# Campaign: Route service 471 to HPT media 2.0 formatting

Status: completed
Type: campaign
Updated: 2026-09-24
Next Action: none; bounded service-471 implementation and Controller B target evidence are complete
Campaign ID: CAMP-0028
Campaign Number: 028
Outcome: Service code 471 preserves its established operator-facing wording and formats the installed SD card as HPT media 2.0 instead of FAT32
Primary Focus Areas: none
Supporting Focus Areas: none
Depends On: none
Decision: September 24 approved Controller B service-471 execution supplies the formerly missing target evidence; no further format is required
Detour For: none
Return To: none
Requested Endpoint: work2
Completion Gate: The scoped source is committed, deployed to the authorized development target, and focused target evidence proves the unchanged service-471 screens invoke guarded whole-card HPT media 2.0 initialization without invoking the legacy FAT32 formatter
Completion Evidence: Committed service-471 path and unchanged GUI resources; corrected immutable candidate exact B flash; same-CID B service 471 completed with initialization state 3, reason 0, phase 11, proof mask 15 and HPT2 ready. See work/evidence/smi-b-corrected-forward-20260924.json and work/evidence/smi-current-release-gate-review-20260924.json.
Disposition: satisfied for the requested local development endpoint; not a firmware release or a broader fault/SD-family qualification
Roadmap: none
Roadmap Revision: none
Milestone: none
Unlocks Gate: none

## September 24 completion reconciliation

The September 3 implementation commit `c577a6a6` is an ancestor of the current corrected candidate. Its `appTwoBtnStartEraseLogRecords` handler is unchanged, the service-471 dispatch differs only in its comment, and `src/SMI_Gui_resources.c` / `.h` are unchanged. The established service title, confirmation, buttons, progress and terminal text remain wired to the same resources; the handler calls `SdCardRequestHptInitialization()`.

The owner subsequently authorized and performed service 471 on B / assembly 1751219 / probe 69660123. Baseline CID `05000C61736466672200001C8201A379` was valid with representative-sector proof and FAT32 needing initialization. After execution, the same CID had detection/CID/sector 5/1/1, initialization state 3, reason 0, phase 11, proof mask 15 and HPT2 ready. Fresh logging, CSV export and restart retention subsequently passed. Exact corrected SMI main flash was later independently verified. Evidence: `work/evidence/smi-b-corrected-forward-20260924.json`.

This completes the formerly deferred local service-471 criterion using existing evidence. The newer Format 2 startup flow is a separate UI surface and does not invalidate the unchanged service-471 wording. No additional screen transcription or destructive rerun is necessary. There is no open outcome cycle attached to this historical campaign; its managed document lifecycle is reconciled directly. Firmware release remains owned by MAP-0009/IDEA-0007 and unauthorized.

## Historical September 3 request and evidence

### Request

Permanently redirect service code 471 from the retired FAT/FileX formatting path to the production HPT media 2.0 whole-card initializer. Preserve the existing service-471 screen wording, title, buttons, progress wording, success wording, and error wording.

Candidate commit `c577a6a6` implements the request in `src/HMI_MainEventHandler.c`, updates the HPT-only regression check and development notes, and regenerates the Debug ELF/SREC artifacts. The owner authorized deployment to Controller B on 2026-09-03 but did not authorize invoking service 471 or destructively formatting a physical SD card.

### Evidence at that checkpoint

- `script/check-version5-hpt-only-sd.ps1`: 15/15 passed.
- `script/check-hpt-commissioning.ps1`: 110/110 commissioning invariants and 16/16 lifecycle-policy checks passed.
- HPT interruption model: all 141 states passed.
- HPT triple-circular model passed.
- Canonical managed Debug rebuild completed without errors.
- Debug ELF SHA-256: `ABED86D24F81F4E855ABF2121DBA2CC7346E42EF18EBC440B42CE75526D6CC90`.
- Debug SREC SHA-256: `49293DF05D5D36D9BB679C761F2C3292B795A23DD395D298C0D8AA23F4F363F1`.
- Fresh-handoff commits: firmware candidate `c577a6a6`; initial campaign checkpoint `b5b6d39b`.
- Strict workspace preflight and Tool Shed Doctor passed with a clean worktree before deployment.
- Controller B / assembly `1751219` / J-Link `69660123` accepted the exact Debug S-record. J-Link reported VTref `3.295 V`, identified the Cortex-M4, programmed and verified 2,932,736 bytes, reset the controller, and resumed execution.
- Service 471 was not invoked and the installed SD card was not formatted, removed, or replaced.

### Former completion check

On the explicitly authorized development controller/card pair, capture baseline CID/status, enter service 471, confirm the established text is unchanged, execute the destructive action, and verify post-operation CID/status plus HPT media 2.0 readiness. Card insertion or replacement must occur only with controller power off.
