# Project Map: SMI 00.05.02 first-format reliability

Status: active
Type: project-map
Updated: 2026-09-30
Origin: IDEA-0009
Target Release: 00.05.02
Next Action: return Controller A from verified FAT32 DisplayTest 01-01 to exact SMI 00.05.02 and capture its first Format 2 result before retry

## Purpose

Make SD initialization and commissioning succeed on the first attempt after a fresh SMI install. Preserve the exact first failure and distinguish driver I/O from invalid HPT metadata. Carry the verified fix into the shared 00.05.02 image with IDEA-0008.

## Direction

1. Reproduce or isolate the first-format sequence against v00.05.01, beginning with the provided two-controller screenshots and source trace. Keep the cause open until a failing operation or metadata invariant is observed.
2. Correct the proven common firmware defect and retain useful first-failure diagnostics. Do not add card-specific timing or unconditional retry behavior.
3. Verify format, reopen, commissioning append/readback, and failure paths with focused tests and the canonical managed build.
4. Coordinate the 00.05.02 candidate with IDEA-0008. Qualify the exact image on both affected controller/card combinations using separately authorized expendable media, CID baselines, service 468 results, and first-attempt outcomes before release.

## Current Position

v00.05.01 failed at commissioned-media reopen on the first format attempt on two controls with different cards; each second attempt worked in the same powered session. The original failing SD operation or HPT metadata check was not captured. Source tracing found that exhausted raw reads could be reported as CORRUPT and a subsequent legacy probe could erase the displayed driver error. Committed 00.05.02 diagnostics preserve the first raw error/sector, identify the open stage and lane, and classify proven read exhaustion as IO_ERROR. They do not yet establish the underlying first-attempt cause.

Commit `b7f9cd9fda8b65070b984e6137cfe0461adcfac0` passed clean managed Debug and Release rebuilds and focused commissioning checks (110/110). Immutable candidate `00.05.02-b7f9cd9fda8b-4e1a73b11a06` validates with manifest SHA-256 `DC624924690825C3EEDDC7F8B9D220ED0E5354739DDB0811C3B0EABD270FF170` and Release S-record SHA-256 `4E1A73B11A06C0026F9AAFDE37FD69E04924732BF1D8054B9C7E8F5EB7D21656`. Both affected controls were programmed, verified, reset, and independently read back; each complete 4 MiB flash matches candidate hash `A638AAA78E7CE51C2C9DE4283B3EEB188FB17EA70FA4B77E5AECA2C8F2B12AAF`. Fresh read-only CIDs, validity, and representative sector reads were captured after each reboot. The owner confirmed both installed cards expendable. CID-bound first format requests on the installed cards completed on the first observed 00.05.02 attempt, with full commissioning terminal proof and no retry. These cards were already HPT-ready at baseline following the owner's successful second attempt, so the original fresh-install failure remains unreplicated and no root-cause correction is proven. Evidence: `work/evidence/hpt-log-store-circular-mirror/00-05-02-preflash-20260930/baseline.md`.

The owner chose the same-card SMI-to-DisplayTest path to recreate FAT32 without SD removal. Controller A's ordinary update reported Success. Its full flash matches the published DisplayTest 01-01 IMX main payload; the same CID `FE34325344000000200000015B01A30B` is valid, FAT32 ready, and has storage status zero. The exact SMI 00.05.02 return IMX was built and CRC/round-trip checked; SHA-256 `E9B30A1B368C2D005252F145DB1630FF7718332CA67564605D7BC9D14ECB357E`. It still needs staging on the `imx` USB drive, DisplayTest-to-SMI installation, fresh CID/classification capture, and a first Format 2 attempt. No result from this FAT32 first-format condition is claimed yet.

## Dependencies And Boundaries

- Diagnostic and source work can proceed locally. Physical destructive formatting requires separate authorization and approved expendable media.
- No powered SD removal or insertion.
- Release 00.05.02 must include both this correction and IDEA-0008, with exact candidate identity and required release gates.

## Next Ground Task

Stage the verified return IMX on the `imx` USB drive when the owner connects it to the Windows PC. Complete A's ordinary DisplayTest-to-SMI install, capture its unchanged CID and FAT32-needs-Format-2 classification, then run one CID-bound Format 2 and preserve service 467/468 and RAM status before any retry. Repeat the same-card transition on B after A's evidence is interpreted. Correct only a demonstrated common cause; rerun first-attempt and graph qualification on one frozen candidate before release.
