# Checklist: Additional USB drive compatibility sampling

Status: complete
Type: checklist
Updated: 2026-08-01
Next Action: none; retain T00_8GB as an architecture-review incident and do not change production firmware from this sample alone
Parent: work/maps/map-smi-firmware-stabilization-and-qualification.md
Canonical Truth: docs/firmware-update-validation-and-recovery.md; docs/usb-drive-specimen-identities.md

## Goal

Determine whether four additional owner-prepared FAT32 USB specimens complete
ordinary controller enumeration, mount, WAV read, image publication, ordinary
removal, and independent Pi verification on the frozen broad USB production
baseline. Use Controller B as the representative control. Cross-check a failure
on Controller A only when needed to separate device behavior from one control.

This sampling measures breadth; it does not authorize drive-specific firmware
behavior or promise that every USB device will always succeed.

## Checklist

- [x] Inventory `T00_8GB`, `T01_16GB`, `T02_8GB`, and `T03_32GB` by canonical
      label, hardware serial, capacity, FAT UUID, and partition bounds.
- [x] Confirm all four drives are unmounted on `srv-rpi00.local`.
- [x] Run non-correcting `fsck.fat -n -v`; require last-sector access, two
      consistent FATs, and no structural error.
- [x] Verify exact prepared `W00.wav` and `W01.wav` sizes and SHA-256 values.
- [x] Capture both controllers with no USB attached, exact Release baseline,
      valid SD CID/representative read/HPT state, and zero errors.
- [x] `T00_8GB`: first-insertion mount and WAV load passed; image save failed at
      47% / 1,979,648 requested bytes with raw `0x5C`
      (`UX_TRANSFER_TIMEOUT`) after 1,934 successful 1 KiB writes. Preserve the
      first failure; unmounted Pi inspection found an unchanged clean FAT32
      filesystem, exact WAV hashes, and no temporary or published image. FAIL.
- [x] `T01_16GB`: first-insertion mount and WAV load passed without recovery or
      error. Image save reached controller result `1` after all 8,193 1 KiB
      writes and 8,388,864 requested bytes; the single raw FileX status `4` is
      the accepted first-publication `FX_NOT_FOUND` prior-image probe already
      represented by passing baseline evidence. Returned Pi inspection matched
      serial, label, and UUID; `fsck.fat -n -v` was clean, both WAV hashes were
      exact, and published `7520553_SMI_00_05_00.imx` measured 8,388,864 bytes
      with SHA-256 `ed193752464f814f2b417e229dfb1188352836ee23a5b3bf5dfd83ceee8649bc`.
- [x] `T02_8GB`: first-insertion mount and WAV load passed without recovery or
      error. Image save reached controller result `1` after all 8,193 1 KiB
      writes and 8,388,864 requested bytes; the single raw FileX status `4` is
      the accepted first-publication `FX_NOT_FOUND` prior-image probe. Returned
      Pi inspection matched serial, label, and UUID; `fsck.fat -n -v` was clean,
      both WAV hashes were exact, and published `7520553_SMI_00_05_00.imx`
      matched the T01 SHA-256 `ed193752464f814f2b417e229dfb1188352836ee23a5b3bf5dfd83ceee8649bc`.
- [x] `T03_32GB`: first-insertion mount and WAV load passed without recovery or
      error. Image save reached controller result `1` after all 8,193 1 KiB
      writes and 8,388,864 requested bytes; the single raw FileX status `4` is
      the accepted first-publication `FX_NOT_FOUND` prior-image probe. Returned
      Pi inspection matched serial, label, and UUID; `fsck.fat -n -v` was clean,
      both WAV hashes were exact, and published `7520553_SMI_00_05_00.imx`
      matched the T01/T02 SHA-256 `ed193752464f814f2b417e229dfb1188352836ee23a5b3bf5dfd83ceee8649bc`.
- [x] If a specimen fails, preserve the first-failure state before any retry;
      cross-check Controller A only after the failure is classified.
- [x] Record a small evidence summary and disposition each specimen PASS, FAIL,
      or INCONCLUSIVE without changing production firmware.

## Runtime Closeout

- [x] Both controllers retain Release S-record
      `6907F88F...932581` from source baseline `ca6f573a`.
- [x] Each drive finishes unmounted on the Pi with its owner label unchanged.
- [x] Each controller finishes with no USB attached and zero USB/application/
      system errors.
- [x] Raw captures remain under ignored generated-evidence paths.

## Result

`T01_16GB`, `T02_8GB`, and `T03_32GB` passed the complete normal interaction:
fresh insertion, WAV read, 8,388,864-byte image publication, final rename, and
independent clean unmounted Pi inspection. `T00_8GB` remains the one preserved
fail-closed `UX_TRANSFER_TIMEOUT` incident. This is breadth evidence, not a
claim of universal compatibility and not authorization for a drive-specific
firmware rule or a production lifecycle expansion.

## Verification

Use `script/invoke-usb-workflow-qualification.ps1` for serial-bound controller
capture and workflow actions. Use `lsblk`, non-correcting `fsck.fat -n -v`,
read-only content hashing, and kernel-log review on `srv-rpi00.local`. Do not
format, repair, controller-cycle VBUS, inject faults, or change firmware during
this campaign.
