# Executive Directive: Deliver a safe SMI 00-05-01 update floor while preserving a return path to revised DisplayTest and the FAT32 production handoff. Prove the transition on both controller assemblies before release.

Status: completed
Type: idea-brief
Role: project-executive-directive-v1
Updated: 2026-09-24
Next Action: None for this release; publication and asset verification are complete.
Readiness Review: READY-WITH-PRM-GATES at revision 3; four gates transferred to MAP-0009
Produces: MAP-0009

## Current release reconciliation — 2026-09-24

SMI 00-05-01 is published and independently verified: https://github.com/Sheldon-Mfg-Inc/7520553_SMI_FW/releases/tag/v00.05.01. All eight downloaded assets match expected bytes, including 7520553_SMI_00_05_01.imx; IMX CRCs and its main-payload match to the downloaded Release S-record pass. Exact content 2ec96c2c7ceb00db7e7ca6c0186aebff4c2c6b0c passed all four push-CI jobs. Tag v00.05.01 points to provenance commit 74a6cda40c64ee012f4bb0844cd982a6361ea72e. Firmware bytes remain those qualified at b59c33d1. Evidence: work/evidence/smi-work5-publication-20260924.json. The owner explicitly authorized ship and the .imx. All four qualification gates retain their accepted evidence and scope limits; no unperformed target test is claimed.

## CEO Directive

Deliver a safe SMI 00-05-01 update floor while preserving a return path to revised DisplayTest and the FAT32 production handoff. Prove the transition on both controller assemblies before release.

## Desired Outcome

Deliver the safe SMI transition under the owner-directed shared ordinary/service updater and target-media preparation policy in the current capsule and IDEA-0006. Preserve the exact CEO Directive, controlled DisplayTest return/FAT32 handoff, explicit SMI HPT2 initialization and both-assembly qualification. The former blanket ordinary personality floor and service-only downgrade design is superseded by the owner's September 23 direction.

## Current Position

SMI 00-05-01 is published and independently verified: https://github.com/Sheldon-Mfg-Inc/7520553_SMI_FW/releases/tag/v00.05.01. All eight downloaded assets match expected bytes, including 7520553_SMI_00_05_01.imx; IMX CRCs and its main-payload match to the downloaded Release S-record pass. Exact content 2ec96c2c7ceb00db7e7ca6c0186aebff4c2c6b0c passed all four push-CI jobs. Tag v00.05.01 points to provenance commit 74a6cda40c64ee012f4bb0844cd982a6361ea72e. Firmware bytes remain those qualified at b59c33d1. Evidence: work/evidence/smi-work5-publication-20260924.json. The owner explicitly authorized ship and the .imx. All four qualification gates retain their accepted evidence and scope limits; no unperformed target test is claimed.

## Progress

- [x] Directive captured exactly in canonical project state.
- [x] MAP-0009 delivered the accepted qualification scope.
- [x] Owner-authorized v00.05.01 and the qualified .imx are published and verified.
- [x] MAP-0009 result is reconciled and propagated; this directive closes on the same evidence.

## Recommended Next Action

None for this release. Preserve the published assets and qualification evidence; new work requires its own scope.

## Why This Next

Qualification and authorized publication are complete; all release assets were downloaded and verified.

## Blockers

- None for this release.

## Operator Needs

None for this release.

## Completion Condition

All four MAP-0009 gates must have evidence or an explicit approved disposition under the current shared updater policy, tied to the corrected immutable candidate. Complete applicable A/B transitions, refusal/fault recovery, logging/export/retention and a separate evidence-backed release decision; reconcile the owning outcome only then.

## Authority And Delivery Boundary

- The owner authorized and completed the scoped source/candidate freeze and documented A/B bench work. Those historical approvals do not authorize another controller action.
- The prior release hold is superseded by the explicit September 24 ship instruction; release qualification, push, tag, publication and verification are authorized.
- Current Work5 authority covers this SMI GitHub release and its .imx asset; abandoned work and unrelated controlled rollout remain outside scope.
- Ordinary and service updates share the accepted field workflow. Recovery after internal-flash replacement begins is not promised.
- Preserve owner-closed legacy investigations and the removed stale-selection test requirement.

## Delegation Contract

Initial issuance is durable intake only. Tool Shed appends this Idea through canonical planning
order, checkpoints it, and stops so other directives may be captured first. Reissuing the exact
active directive delegates or resumes it when doing so will not preempt another working campaign.

The Plan Cycle interprets this directive, the Roadmap Cycle organizes it when needed, the Milestone
Cycle materializes bounded campaigns, Campaign Cycles execute, and Evidence/Outcome Cycles report
the result back to 100k. The CEO is not required to select those internal mechanics.

## Exploration Log

### 2026-09-21

- The owner accepted the recommended CEO framing from the IDEA-0006 discussion. Preserve that brief as the technical source and keep this directive as the executive outcome.
- The owner directed IDEA-0006 and this CEO directive to include direct service rollback to approved older SMI firmware and in-place FAT32 preparation. Service 471 is the existing explicit HPT2 recovery action when current SMI remains bootable.
- The owner later clarified that service rollback accepts any valid SMI image, and corrected the DisplayTest normal return floor to 01-01 or later. The earlier named-image questions are superseded; exact images remain qualification specimens.

### 2026-09-22

- Read-only review of the separate DisplayTest 01-01 source found FAT32 handoff before personality installation, no DisplayTest personality version floor, and a 01-01 fixture-to-fixture minimum. Its project record reports a Controller B transition to SMI 00-04-11 after FAT32 handoff, with an initially unresponsive install tap requiring a power cycle; old SMI logging remains unproven. The SMI ordinary 00-05-01 floor and DisplayTest return floor are distinct. SMI A/B target qualification and this project's bench pause remain open.
- Owner designated Controller A as the initial target control for the SMI 00-05-01 transition work. Controller B remains the second required release-qualification assembly. The designation does not itself resume bench work or authorize a target operation.
- Source review removed the late-format false-failure timeout and made the read-only USB media flush informational after staged CRC verification. Release rebuild, 16 update cases, and 15 review checks pass; target fault behavior is still open. SMI 00-05-00 and 00-04-11 specimens are identified by controlled hashes, while 00-05-01 and DisplayTest 01-01 IMX candidate bytes remain pending. A newer DisplayTest Controller B record demonstrates new SMI 00-04-11 FAT32 records in a five-minute export; post-restart retention was not checked.

### 2026-09-22 direct 00-05-01 updater correction

- The owner confirmed that 00-05-00 was never deployed on a production controller and excluded it from this qualification. A deterministic host-built 00-05-01 IMX now provides the correct SMI QSPI resources directly, so the next target step uses Settings > Update Firmware and does not install the 00-05-00 development image.

### 2026-09-22 Controller A result and owner requirements detour

- Controller A Settings > Update Firmware listed and accepted `7520553_SMI_00_05_01.imx`. QSPI main and audio matched the selected image, but internal flash remained the prior candidate. CID `05000C61736466672200001C8901A34F`, representative-sector validity, FAT32 classification, and operational configuration remained stable. At this checkpoint the final flash-transition cause was unresolved; the 2026-09-23 reconciliation below closes it.
- The owner required target-driven FAT32 preparation: retain verified FAT32; format another readable classified layout only when the admitted target requires FAT32; stop on missing or unreadable media. The owner also required the main chart to use its gray disabled appearance whenever logging is unavailable.
- The revised SMI source implements those requirements. Twenty-four identity/media cases, thirteen FAT32 transaction checks, sixteen update cases, main-chart availability checks, both canonical builds, and related review/warning/USB/FileX checks pass. Commit `10dbb91519384cc9144b94e8a79057c8f47c0630` was rebuilt cleanly and reproduced the committed bytes. Immutable candidate `00.05.01-10dbb9151938-4e7dfb2f7333` contains Release S-record SHA-256 `4E7DFB2F7333202C71A736DF6692512030DB43508A1CCD0C556E7E8C1EB6B326`; manifest SHA-256 is `6F753689C56EFACE054C802FF782FFCC193BFAE2D7F5E948F0BE20F44FA86586`. No controller programming or SD formatting occurred during the detour or freeze.

### 2026-09-23 reconciliation to completed Codex work

- Commits `76471306` and `ab0755e7` corrected the internal-flash handoff by refreshing the watchdog during bounded flash operations, clearing stale FCU command-lock state, and disabling ROM cache before the RAM-resident updater. A controlled self update completed with diagnostic error `0`; internal flash exactly matched the candidate at SHA-256 `6B27C922C40908BB6221819841F8A7F264E09C3E5D3399ABB0F18993BD01A86F`. The earlier unresolved-transition statement is closed by this evidence.
- Subsequent UI work produced accepted candidate `00.05.01-1bf8afe6aeba-6476100e5ae5`. Controller A exact readback matched its expanded Release image at SHA-256 `40560E9D046293BE345676BC97CD09E88E29D543DBEB02AD3B764EBF029D4E87`. The owner accepted the Format 2 startup warning, disabled-chart reason messages and return behavior, operator service 467 access, and service 471 warning flow.
- The owner unintentionally completed service 471 during review. Immediate evidence showed ready media, unchanged valid CID `05000C61736466672200001C8901A34F`, a valid representative-sector read, and no terminal initialization error.
- Controller A service 150 generated `7520553_SMI_00_05_01.imx` on `IMX2`. Read-only validation found 8,388,864 bytes, SHA-256 `AF8132D13837F6030CD73689E77833AA563C0C878C19126448E869DFEB337332`, valid header/main/audio CRCs, and an exact main-payload match to the accepted Release candidate. The SMI controlled-image prerequisite is complete; the DisplayTest 01-01 controlled IMX and the A/B transition matrix remain open.
