# Project Map: 7520553 SMI Firmware

Status: superseded
Type: project-map
Updated: 2026-07-21
Next Action: none; content merged into the established stabilization map
Campaign Reason: Cross-campaign coordination or operating guidance; intentionally tracked outside any single owner campaign.
Campaign: standalone
Superseded By: work/maps/map-smi-firmware-stabilization-and-qualification.md
Canonical Truth: README.md; docs/firmware-00-04-13-plan.md; docs/firmware-00-04-13-release-notes.md

## Purpose

Navigate the 7520553 SMI firmware from implemented code through hardware
qualification and production release without confusing completed implementation
with still-open destructive or operator-driven evidence gates.

## Visual Map

```mermaid
flowchart TD
  A["00-04-13 production-ready firmware"] --> B["Implemented and built"]
  A --> C["Controller qualification"]
  A --> D["Media and recovery qualification"]
  B --> B1["Graph and 90-day export policy: implemented"]
  B --> B2["Services 469, 470, 472, 474: implemented"]
  C --> C1["469 full-year export test on Controller A: active"]
  C --> C2["Graph and USB boundary matrices: open"]
  D --> D1["2–32 GB format/fill/power-cut matrix: open"]
  D --> D2["Configuration destructive fault matrix: open"]
  D --> D3["472 comparative card qualification: open"]
  C1 --> G["Ground task: complete year, export, trim to 90/89 days, delete fixture"]
```

## Zoom Levels

30,000 ft:

- Overall outcome: release firmware 00-04-13 with verified graph, export,
  configuration-recovery, and SD behavior on assemblies 1751136 and 1751219.
- Success shape: clean frozen image, completed operator evidence, no SD/logging
  regressions, and no unsupported media-capacity claim.

10,000 ft:

- Completed implementation: full-capacity formatter safeguards, graph bounds
  correction, 90-day export validator, configuration fingerprinting, service
  470 continuous endurance, service 474 monitor, and service 469 signed export
  fixture.
- Active qualification: Controller A service 469 and USB export behavior.
- Open release qualification: manual graph/export matrix and destructive SD
  format/fill/power-cut coverage.
- Separate longer qualification: configuration fault transitions and service
  472 comparative media discrimination.

1,000 ft:

- Active workpackage equivalent: firmware 00-04-13 qualification closeout,
  canonically specified in `docs/firmware-00-04-13-plan.md` and the operator
  checklist rather than duplicated here.
- Active tickets: none backfilled; source evidence describes qualification work,
  not discrete software defects.
- Open decisions: which approved expendable card samples are authorized for the
  destructive capacity and comparative matrices.

Ground:

- Current next action: let service 469 finish its 8,760-hour fixture on
  Controller A, verify a greater-than-90-day USB export, then use guarded 469
  actions to test exactly 90 days, 89 days, and signed-fixture cleanup.
- Owner/context: operator fingers and USB media are required; Codex can monitor
  controller state and inspect firmware counters.
- Verification: export contents and boundaries, normal logger health, zero SD
  failures, and removal of fixture-only data.

## Workstreams

| Workstream | Status | Lead Artifact | Depends On | Next Action |
| --- | --- | --- | --- | --- |
| Service 469 export fixture | active qualification | `docs/sd-export-history-fixture.md` | Controller A, USB stick, operator | Complete full-year/export/90/89/delete sequence |
| Service 470 continuous endurance | done | `docs/sd-continuous-background-endurance-plan.md` | none | Retain as qualified history |
| Graph and export release matrix | open | `docs/firmware-00-04-13-plan.md` | final image, both controllers, operator | Run checklist on frozen candidate |
| Full-capacity SD formatting | open qualification | `docs/sd-full-capacity-format-plan.md` | approved expendable 2/4/8/16/32 GB media | Run destructive format/fill/power-cut matrix |
| Configuration recovery | open qualification | `docs/configuration-validation-and-recovery.md` | representative foreign/corrupt fixtures and power cuts | Complete pending target fault matrix |
| Service 472 media evaluator | open qualification | `docs/sd-card-endurance-evaluator.md` | EDGE/Industrial/candidate samples and data-loss authority | Establish comparative discrimination and repeats |
| Service 474 monitor | implemented/available | `docs/sd-autonomous-soak-monitor.md` | normal logger | Run when independent real-time monitoring is desired |

## Dependency Notes

- Freeze the final Release image before recording final operator-checklist
  evidence; current results are development evidence.
- Service 469 can validate export policy without formatting the card and should
  finish before destructive media work.
- Destructive format and evaluator work require explicit card/sample authority
  and cannot be inferred from firmware implementation success.
- Production support above the qualified capacity remains prohibited until the
  relevant media matrix passes.

## Current Navigation

You are here:

- Controller A is running the signed 365-day service-469 fixture while normal
  mirrored logging remains healthy. Service 474 is currently stopped.

Do next:

- [ ] Complete service 469 generation on Controller A.
- [ ] Export a range older than 90 days and confirm policy rejection/behavior.
- [ ] Validate the exact 90-day and 89-day boundaries.
- [ ] Delete all signed fixture files and confirm real logs remain.
- [ ] Freeze the image and start a fresh final operator checklist.

Avoid for now:

- Do not start destructive format/evaluator cases on the active data card.
- Do not mark 00-04-13 released from clean builds or service-470 success alone.

## Related Artifacts

- Work index: `work/index.md`
- Inventory: `work/inventories/inventory-7520553-smi-firmware-surfaces.md`
- Operator results: `operator-results/firmware-00-04-13-checklist.json`
- Canonical release plan: `docs/firmware-00-04-13-plan.md`
- Release notes: `docs/firmware-00-04-13-release-notes.md`
