# Project Map: Remote setpoint Work3 release integration

Status: active
Type: project-map
Updated: 2026-09-08
Requested Endpoint: work3
Next Action: validate the production-retention decision in Debug and Release and freeze the local candidate
Campaign: standalone

## Desired outcome

Retain the J-Link mailbox setpoint control as an engineering automation surface in the production
firmware image, document its production risk boundary, validate it together with the normal
touchscreen setpoint path, produce managed Debug and Release artifacts, and freeze a local Work3
candidate. Normal deployed controllers are expected to have no J-Link connected.

This extends the completed MAP-0006 Work2 outcome; it does not rewrite or merge that historical
cycle with MAP-0003.

## Production risk decision

The mailbox is inert when no debugger writes a new coherent request sequence. It validates ABI,
size, magic, command kind, finite range, sequence coherence, and request checksum, then calls the
same canonical setpoint application path used by the touchscreen. The remaining production risk
is physical/debug access: the checksum is an integrity check, not authentication, so anyone with
J-Link access can command a setpoint. Acceptance therefore depends on the stated production
condition that J-Link is not connected and debug access is controlled. This is an engineering
service, not a network or authenticated customer interface.

## Work3 gates

| Gate | Completion evidence |
| --- | --- |
| Scope | Engineering-only production retention and access boundary are documented. |
| Focused behavior | Parser, validation, acknowledgement, range, and shared-setter tests pass. |
| Integration | All applicable repository checks pass with the retained mailbox code. |
| Managed builds | Canonical managed Debug and Release rebuilds pass and hashes are recorded. |
| Freeze | Exact source, documentation, tests, and build artifacts are frozen in one local commit. |

## Transfer after Work3

Work5 will batch all eligible awaiting candidates, including this remote-setpoint candidate and
the MAP-0003 stabilization candidate, into the production release/verification cycle. Work3 does
not program a controller, push, publish a release, complete an ECO, or perform rollout.
