# Prove independent HPT media validation

Status: abandoned
Type: campaign
Updated: 2026-08-26
Next Action: none
Campaign ID: 012-prove-independent-hpt-media-validation
Campaign Number: 012
Outcome: Complete the physical operator workflow and standalone proof for the pinned read-only HPT media 2.0 validator using an explicitly selected expendable card and identified external Pi reader.
Primary Focus Areas: hpt-media-logging
Supporting Focus Areas: sd-qualifier-app, qualification-release
Depends On: 009-complete-clean-contract-bound-a-b-qualification
Decision: none
Detour For: none
Return To: none
Completion Gate: The website guides power-off transfer and reinsertion, captures required CID identities, invokes the pinned validator read-only with bounded evidence, uses the reviewed result in a qualification decision, and operates with this firmware workspace disconnected.
Completion Evidence: none
Disposition: Superseded by the owner decision to change SD-card qualification direction; preserve all partial results as history without claiming qualification completion or card rejection.; replacement: Replacement roadmap, milestones, and campaigns are pending the owner follow-up discussion; requirements remain captured in work/spikes/spike-firmware-service-code-sd-qualification-direction.md and work/spikes/spike-hpt2-service-life-retrieval-performance-requirements.md.

## Request

Primary workpackage: `work/wp/active/wp-build-independent-hpt-media-validator-for-pi-qualification.md`.

Require an explicitly selected expendable card, an identified external Pi
reader, a powered-off transfer plan, and separate physical/read-only authority.
The validator remains read-only and bounded, preserves exact tool/card/result
identity, and cannot approve a card or orchestrate controller operations.
Recapture CID after the card is reinserted and the controller boots.

## Completion Check

The website guides power-off transfer and reinsertion, captures required CID identities, invokes the pinned validator read-only with bounded evidence, uses the reviewed result in a qualification decision, and operates with this firmware workspace disconnected.
