# Controller A HPT2 S0 matrix pass

Status: pass
Type: evidence
Updated: 2026-08-05
Next Action: continue the remaining Controller A S1-S6 matrix under fresh exact authorization; keep the production deadline unset
Campaign Reason: Historical record from campaign 009-complete-clean-contract-bound-a-b-qualification; retained independently after campaign closure and requires no separate owner-queue execution.
Campaign: standalone
Parent: work/checklists/checklist-hpt2-bounded-stop-recovery-and-regression-measurement.md

## Result

Controller A completed three accepted planned-S0 observations on the exact
qualification-only hold candidate. Every run used one immutable Start and one
immutable Stop, published them through one acknowledgement-gated J-Link
session, measured `0 ms` from Start acknowledgement to Stop publication,
disabled automatic replay, and retained `profile_stop_deadline_ms=null`.

Each run supplied two stable read-only `STOPPED_CLEAN` observations with reason
`0`, proof `0x1F`, boot witness `DEE10A12EC443248`, and the unchanged full CID.
All three finalized `CASE_PASS` and were accepted for S0. Their append-only
adjudications also contribute valid S3 clean-boundary observations. Controller
A progress is therefore S0 `3/3` and S3 `5/10`.

## Frozen candidate and campaign

- Campaign: `7f13c433-e904-4320-a0d1-33d503057f69`, live and `RUNNING`.
- Controller A assignment: `15`, sample `F1-A1`.
- Controller B assignment: `16`, sample `F1-B1`; no B target access occurred.
- Bundle: `smi-00-05-00-52edddc39e30-054d5386ad9d-release`.
- Bundle manifest SHA-256:
  `e2561cdd82b6e1fc69585b2149d27f3bf3ca2690df5e5a2fc6356dd825c2e638`.
- Complete code-flash SHA-256:
  `862b8122c0c8c9556508130927cc9960e91fc0a2bc4aea5f8d7b457ba4cd7efe`.
- Diagnostic mapping SHA-256:
  `91555e7ef99ca7dd951b92123ccb46c813a8f78beef17a8dbd1ce9f8c31004d3`.
- Qualification-only S0 hold token: `0x53304844`.

Programming operation `1dd28105-a9f0-4391-8810-c569d672f314` verified the
complete candidate flash and preserved VEEPROM and option memory. Independent
observer operation `9730acaf-4078-4c0b-a7d8-5bed5e903527` reverified flash and
CID. Full-address scrub operation `63c758ac-97a1-45df-b7f4-51e4dbdcf8b3`
passed all `15,728,640` sectors with zero failures, recoveries, or identity
mismatches. Initialization operation `74818d9c-51f7-4f94-bcae-6161aa15496f`
completed canonical HPT initialization with three lanes, zero retired
segments, zero mismatch/loss, and terminal proof `0x0F`; no initialization
command was replayed after the Pi evidence decoder failed.

## SD identity block

CID captures `20` and `21` record exact post-program and post-scrub identity;
capture `22` records post-initialization identity, and captures `23`-`25` bind
the same card to the three S0 admissions.

- Protocol/card status: `DETECTION_READY; RAW_HPT; DRIVER_OK` at each S0
  preflight; post-initialization capture reported `READY; RAW_HPT; DRIVER_OK`.
- CID-valid status: true.
- Representative-sector-read status: true.
- Manufacturer: unknown CID manufacturer, retail brand KEXIN; MID `0x05`.
- OEM/application ID: `0x000C` from the exact post-program/post-scrub captures.
- Product name: `asdfg`.
- Product revision: `2.2`.
- Serial number: `7305` (`0x00001C89`).
- Manufacturing date: 2026-03.
- Complete raw 128-bit CID: `05000C61736466672200001C8901A34F`.

No card removal, insertion, replacement, or powered media manipulation
occurred during this continuation.

## S0 run evidence

### Repetition 1

- Run: `2b143453-69d4-45a8-8873-1e9b3287a916`.
- Start / Stop operations: `5b81d133-e3f1-4595-b502-4ac7b4f93479` /
  `9782e342-3d88-4360-b826-d0084d2b2bea`.
- Same-session Evidence `170` SHA-256:
  `ea25b02b71d4db28baa9c9ef5b7baf3a9f950151020fb52f10a4f8a06b0e6414`.
- Stable Evidence `171` / `172` SHA-256:
  `b5054074b40daf4155cffee0081a579c251e97c9d2f0a7de1a7527679ae99dbd` /
  `297fa76829e06faba698943c95dadc45201edb8bf97da124a62973881bd650a3`.
- Result Evidence `173` SHA-256:
  `c8e9e15f07494516ecb644d0df01651fa32b25c2e4dd920420ab634e77b231e0`;
  observation upper bound `2052 ms`.
- Adjudication Evidence `174` SHA-256:
  `a6b7a4ad2b9b06afe23a4c8541e4434aa7971190a7094543142c4d4b99947e1c`.

### Repetition 2

- Run: `df613d0e-d0d4-4678-a5ef-861be6c78c53`.
- Start / Stop operations: `d2fb1822-180d-4120-866b-272aee61863d` /
  `52cf381b-af72-405e-b1ca-6c189fbeb792`.
- Same-session Evidence `184` SHA-256:
  `85dae515d7f30c3992ad0167671e88e6002dde9003c5d945e07eb250e2c65909`.
- Stable Evidence `185` / `186` SHA-256:
  `36cd9829a3dd659a9a04a2ad6310a99cb639751eca1234db4c5242e5ee47cab1` /
  `cb92c710e707e0483aa5abd297e819dd7e13ebe9578b6a11febc60d009f68b23`.
- Result Evidence `187` SHA-256:
  `4d57da82f1c2a610be20348a61695901cf24f38e35d085a93a1d57fe2ff6211e`;
  observation upper bound `2068 ms`.
- Adjudication Evidence `188` SHA-256:
  `7574e71a83487511d8a678b3bf1ca9cba4ac7e0307aca85fd1068c384b5016b7`.

### Repetition 3

- Run: `bd937453-4879-4e8c-90eb-b73b31bae42b`.
- Start / Stop operations: `dda70a22-715c-445c-abb4-5c4d8c1d3c76` /
  `f467941f-ea9a-42e3-b18d-291c263643b6`.
- Same-session Evidence `198` SHA-256:
  `329c121da0748f06db72fddb2576ec13c7f4289c11936aeb2db4946ef6735c7c`.
- Stable Evidence `199` / `200` SHA-256:
  `1feaeaeccfd93a1071f93df7efd41611e582e29ec976e2cb785e0211a7b2499e` /
  `ad69e9cea751413ef36505edfb27cd064c210de7baef8257f74dce74c3e20f82`.
- Result Evidence `201` SHA-256:
  `1efce89869926f6200997658610303bf00ddca2222e0ec6eeeefe03e33c3b166`;
  observation upper bound `2089 ms`.
- Adjudication Evidence `202` SHA-256:
  `e2b9f947a36c4657dfffb4f2e1d9d0ba3b51ac7a1021db5da0f9302ffe843948`.

## Coordinator and GitHub state

Pi commit `e81e168bb8f774b0829782884188938786821ca7` parses the current ten
guarded initialization captures and rejects torn/backward seqlock state. Pi
commit `c6000e6a548f1ef1e1b77682b7221824f10258ce` admits either the historical
append-only initialization adjudication or the canonical completed
initialization PASS plus terminal-phase post-CID capture. Focused and full
tests passed; the exact deployed-image suite passed `191/191`.

Release `hpt2-canonical-init-admission-c6000e6`, image
`sha256:74e3cc95b6c7c9547a2ae92a094ae797e924d06105a340854c10b46ea44072b4`,
was deployed after backup/restore verification. The Pi changes are published
in draft PR `PC-Redemption/sd-qualification#32`; firmware is published in
draft PR `Sheldon-Mfg-Inc/7520553_SMI_FW#4`.

## Cleanup and remaining gate

The default firewall again drops non-loopback access to J-Link ports `19120`
and `19121`. No observer, programmer, scrub, or HPT2 command-adapter tool
container remains. Production `stop_deadline_ms` remains `null`; no positive
deadline may be derived until the full A/B matrix, recovery evidence,
representative regression, and owner review pass.
