# Operator warning truth and target proof

Status: complete
Date: 2026-07-26
Candidate SREC SHA-256:
`944BEA28BFD6DE5604A5BE1B03F4F5690CA84213B2BD923940ED27D193844501`
Candidate ELF SHA-256:
`DF24D50C56A871BCB99C349D769DED4747A1A5AFF6E6E4B30FEA1D62AB118E6F`

## Result

The false configuration-invalid warning is corrected on one exact image loaded
on both controls. All current HMI message surfaces were classified. Synchronous
input corrections and explicit confirmations remain tied to immutable operator
input; high-risk asynchronous configuration, SD/HPT, and export failures now
require a reason-specific terminal owner snapshot and a final recheck before a
modal can open.

Both targets exercised a real temporary setpoint save followed by restoration
of the exact original floating-point bits. Every save encountered the existing
first-attempt VEEPROM command lock (`stage 0x00001100`,
`SSP_ERR_CMD_LOCKED 0x000001F5`) and committed on attempt 2. The retry remained
non-terminal and operational, no warning transaction was latched, the first
failure remained available to diagnostics, and the restored RAM and both
VEEPROM blocks were identical.

## Software gates

- Isolated e2 studio clean Debug build and versioned packaging: PASS.
- Stable and versioned ELF/SREC pairs: byte-identical hashes.
- Repository policy checks: 19/19 PASS.
- Operator-warning truth invariants: 17/17 PASS.
- Transaction model: recovered retry silent; exhausted storage warns once;
  semantic invalidity warns and stale recovery does not.
- Bounded retries: three attempts; only exhausted storage or terminal semantic
  invalidity can inhibit heating and generate the configuration modal.
- SD/HPT Home warning: three-refresh stability requirement, reason-specific
  classification, and immediate owner-state/configuration recheck.
- Export/progress warning: HPT reasons are accepted only from a twice-read
  terminal HPT export failure; unrelated progress operations cannot reuse a
  stale HPT reason.

## Controller B: abnormal media retained

- Assembly/J-Link: `1751219 / 69660123`.
- CID status/read status: protocol `6`, CID valid `1`, representative read `0`.
- Card: SanDisk/WD, MID `0x03`, OID `SD`, product `SS08G`, revision `8.0`,
  serial `2540634245`, manufactured `2024-05`.
- Raw CID: `035344535330384780976F0085018507`.
- Media action: no format, initialization, removal, replacement, or layout
  normalization.
- Preserved asymmetric lane oldest sequences: `86 / 86 / 1`.
- Preserved cache-time active sequences: `1109 / 1109 / 1024`.
- Preserved cache-time active records: `337 / 337 / 422`.
- Save exercise: transactions `4` and `5`, both committed on attempt `2`;
  warning transaction remained `0`; original setpoint `23.900045 C` restored
  bit-exactly; VEEPROM mirrors and RAM match.
- Graph cache: ready; `1,445` records scanned, `1,440` selected; traversal
  `1.64 s`, total load `2.51 s`; `274` read commands, `8,368` read blocks,
  zero bulk fallbacks.

Evidence:

- `work/evidence/hpt-log-store-circular-mirror/controller-b/warning-truth-final-20260726/validated-exercise/config-save-exercise.json`
- `work/evidence/hpt-log-store-circular-mirror/controller-b/warning-truth-final-20260726/final-state/sd-card-identity.json`
- `work/evidence/hpt-log-store-circular-mirror/controller-b/warning-truth-final-20260726/final-state/chart-cache-status.json`

## Controller A: normal-media regression

- Assembly/J-Link: `1751136 / 69664082`.
- CID status/read status: protocol `6`, CID valid `1`, representative read `0`.
- Card: SanDisk/WD, MID `0x03`, OID `SD`, product `SS08G`, revision `8.0`,
  serial `2540634244`, manufactured `2024-05`.
- Raw CID: `035344535330384780976F0084018559`.
- Lane oldest sequences: `1 / 1 / 1`; active sequences
  `1024 / 1024 / 1024`; active records `475 / 475 / 475`.
- Save exercise: transactions `2` and `3`, both committed on attempt `2`;
  warning transaction remained `0`; original setpoint `25.000067 C` restored
  bit-exactly; VEEPROM mirrors and RAM match.
- Graph cache: ready; `1,498` records scanned, `1,497` selected; traversal
  `1.75 s`, total load `2.60 s`; `291` read commands, `9,090` read blocks,
  zero bulk fallbacks.

Evidence:

- `work/evidence/hpt-log-store-circular-mirror/controller-a/warning-truth-final-20260726/validated-exercise/config-save-exercise.json`
- `work/evidence/hpt-log-store-circular-mirror/controller-a/warning-truth-final-20260726/final-state/sd-card-identity.json`
- `work/evidence/hpt-log-store-circular-mirror/controller-a/warning-truth-final-20260726/final-state/chart-cache-status.json`

## Operator handoff

Both controls are running the exact candidate, configuration is operational,
the original setpoints are restored, SD identity is valid, and each graph cache
is complete with real data. They are ready for operator review of the Graph
screen, warning wording/navigation, and the observed load time.

Positive physical semantic-corruption or exhausted-storage fault injection was
not performed. Those cases are safety/destructive-test governed and still
require separate explicit authorization. The executable model and static gates
prove that the warning paths remain present and terminal-only; this electronic
handoff does not claim physical negative-fault qualification.
