# Controller A corrected promotion PASS and baseline scrub timeout

Date: 2026-08-04
Status: promotion passed; qualification blocked
Authorization reference: `owner-a-corrected-envelope-20260804`

## Outcome

Controller A was atomically rebound and programmed with the exact reviewed
immutable bundle
`smi-00-05-00-868598ee08d9-404826a5be8e-release`. The one-shot programming
operation and independent read-only observation both passed. The conditional
F1-A1 baseline full-address scrub was then started once under a newly minted
UUID, but exceeded its finite one-hour poll deadline and closed
`INTERRUPTED_UNKNOWN`. A separate read-only reconciliation found the SRAM scrub
command still pending. The scrub is non-replayable and the conditional media
initialization and all later qualification stages were not performed.

## Controller promotion

- Controller role: `A`
- Assembly: `1751136`
- Hardware variant: `0`
- Probe serial: `69664082`
- Bundle content address:
  `0fdff39a47a2aeb9a22fe574e83242b322a2a9fafd812020ead5e056f9182761`
- S-record SHA-256:
  `404826a5be8e318683157e838595cd82ae8cb36b6222115e707ef3debc99baf5`
- Programming operation: `3f0c4d1c-55a9-47f0-8eee-b1d5edf29bff`
- Classification: `PASS`
- Terminal code: `PROGRAM_VERIFY_RESET_RUN_COMPLETE`
- Before complete-flash SHA-256:
  `68029e19efcc409f878b2f43371ee48d823ffff2d7a4f4c0b349176b6077bb28`
- After complete-flash SHA-256:
  `2236f68b720dc9824001597860603c91883bdb4636d5c46a5af41d6b3258a166`
- VEEPROM SHA-256 before and after:
  `2600c8a339ca0fb6f2106b80620e4a163235d71eee5a3569d5fc92da275c20ed`
- Option-memory SHA-256 before and after:
  `af9613760f72635fbdb44a5a0a63c39f12af30f950a6ee5c971be188e89c4051`
- CPU running before and after: yes
- Rollback attempted: no
- Pi result:
  `foundation/controller-programming/3f0c4d1c-55a9-47f0-8eee-b1d5edf29bff/result.json`
- Result SHA-256:
  `da623091146c1aeb82502294d8ed32e1a6852b75c77808ea860925ed1e5225cc`
- Transcript SHA-256:
  `c3a01c30bf5b7007cff68fee2486e70d2146db7d82518e4cef63c612f17c6d00`

The initiating SSH client detached while the remote operation was active. The
original remote process and one-shot container remained live; no second
programming command was issued. That same operation reached its immutable PASS
record and cleaned up its temporary access rule.

## Independent observation and CID

- Observation operation: `50a67801-8ce4-4deb-b6b2-b45390cf2b38`
- Classification: `PASS`
- Read-only: yes
- Observed complete-flash SHA-256:
  `2236f68b720dc9824001597860603c91883bdb4636d5c46a5af41d6b3258a166`
- Mapping SHA-256:
  `84660cb13b285a2647f8eabcb93f22d9b7bb1bd7bd5e5edf8c4f805316628966`
- CPU running before and after: yes
- Pi result:
  `foundation/controller-observations/50a67801-8ce4-4deb-b6b2-b45390cf2b38/result.json`
- Result SHA-256:
  `ef831bdcfd4aed74ba442ec7c6ffdb8fe9d85f5a50af6663b79b476c6bcd8626`
- Transcript SHA-256:
  `50d83a0ba7ce71a8cdb6d56b32d6d8e32ddf0b7a9a3391c6505f51fbd405aa1a`

Fresh boot-relevant CID block admitted to campaign
`d2263f26-6ac7-4a90-ad80-8875c0c24d2a`:

- Protocol status:
  `DETECTION_NEEDS_INITIALIZATION; SD_UNAVAILABLE; DRIVER_OK`
- CID valid: yes
- Representative-sector read valid: yes
- Manufacturer: `Unknown CID manufacturer (retail brand KEXIN)`
- MID: `0x05`
- OEM/application ID: `0x000C`
- Product name: `asdfg`
- Product revision: `2.2`
- Serial number: `7305 (0x00001C89)`
- Manufacturing date: `2026-03`
- Raw 128-bit CID: `05000C61736466672200001C8901A34F`
- HPT media state: uninitialized
- Replacement request: no
- Database capture ID: `2`

## Baseline full-address scrub

- Campaign: `d2263f26-6ac7-4a90-ad80-8875c0c24d2a`
- Campaign sample: `7` / `F1-A1`
- Purpose: `BASELINE`
- Operation: `fbfb1b52-e79c-4ffc-8e54-d34fd4102659`
- Failed historical operation `e36882de-ebf5-4b35-93ef-698e352a553c`
  was not replayed.
- Read-only preflight: PASS
- Preflight flash, campaign, bundle, CID, probe, idle command, and idle status:
  exact
- One permitted SRAM command word: `0x48534352`
- SD media writes: none
- Automatic retry performed: no
- Automatic replay allowed: no
- Terminal state: `INTERRUPTED_UNKNOWN`
- Terminal code: `FULL_ADDRESS_SCRUB_INTERRUPTED_UNKNOWN`
- Failure detail: full-address scrub exceeded its finite poll deadline
- Read-only reconciliation: inconclusive; SRAM command remained pending
- Pi result:
  `foundation/full-address-scrub/fbfb1b52-e79c-4ffc-8e54-d34fd4102659/result.json`
- Result SHA-256:
  `6dabbc242de47d354c61f20fdb89d3ac08997574153c0e2a6438146f5a362060`
- Transcript SHA-256:
  `a964ebccfb25f4518d3eb47957c6899b52a9c1846cf2669220548485e7c38afa`
- Database evidence IDs: transcript `14`, result `15`

Campaign `d2263f26-6ac7-4a90-ad80-8875c0c24d2a` is now `BLOCKED`, version
`3`. Assignment `7` is `SCRUB_INTERRUPTED_UNKNOWN` and explicitly prohibits
initialization or replay.

## Safe final state

- Controller A retains the corrected complete flash.
- Controller A and B both have `enabled_for_qualification=false`.
- Controller B's bundle binding and identity were not changed.
- Active protected-registry SHA-256:
  `1332e1020dc0006371a9e10e4ec393d165b3525c2d78227d7d4478ca6a889b48`
- The Pi J-Link firewall is back to default-deny for ports 19120 and 19121.
- No programmer, observer, or scrub-adapter tools container remains.
- F1-A1 was not initialized, formatted, removed, inserted, or otherwise
  intentionally written.

## Blocked follow-on stages

The following pre-authorized stages were not reached because their scrub-PASS
precondition was not met:

- HPT media 2.0 initialization;
- post-initialization CID/HPT gate;
- S0-S6 bounded-stop and interrupted-session recovery matrix;
- active-run G-PWR interruption;
- regression and independent-reader transfer.

Do not replay either baseline scrub operation and do not initialize F1-A1.
Investigate the still-pending firmware scrub command using read-only methods.
Any bounded recovery operation or new scrub attempt requires a newly reviewed
plan and fresh owner authorization.
