Y2 + Reborn Platform 1.0 master report

Installed baseline physical follow-up — 2026-10-04

The exact-image physical receipt records PARTIAL / INTERRUPTED qualification, bounded smoke/C1/hotplug/OPPs/C2 and DATA/SD successes, no qualified C3 entry, owner-reported USB reconnect trouble and recovered-boot DRM WARNING / C3 safely Skipped. Firmware/software seal below is unchanged; it is not full hardware acceptance. Owner-prioritized audio testing finishes before exclusive USB diagnosis. No main/public promotion. Wired-precision result: the evidence record replaces the withdrawn DL1-monitor argument with direct measurements (register probing, DL2 loopback, interconnect arithmetic and an on-device I2S serializer-pad capture). The MT6582 wired path carries at most 16 meaningful bits; S16 44.1/48 is the platform maximum and no native 24/32 qualification is claimed or possible.

Independent final baseline — 2026-10-04

Current software handoff: Y2LINUX-PLATFORM-V1-BASELINE-01 — READY_FOR_PLATFORM_V1_PHYSICAL_QUALIFICATION. Compiled Linux 98daf3f0220f4a1580bb4893094ee9f0e02362a5 / Reborn 9cd12baeeb70b204e08299bd4c91c8c35604c304; kernel 6.18.0-y2linux-platform-v1-baseline-01, root 2025.02.18-platform-v1.24. Canonical owner candidate: /home/luca/Dokumente/Code/Y2Linux/out/y2linux-platform-v1-baseline-candidate. Fresh 475 production cases / 465 passed / ten dependency skips, all ten independently passed; 324 Reborn tests, fmt/strict Clippy/fresh kernel/ARM/QEMU/package/source/privacy PASS. SOFTWARE_VALIDATED / INTEGRATED_PHYSICAL_NOT_RUN; PUBLIC_DISTRIBUTION_NOT_READY. UART01 CPU hardware is inherited; Baseline02 RTC FAIL remains unresolved. Policy-enabled C3, native S16, battery safeguards, DATA/layout and recovery stay.

See baseline, twelve sessions, independent integration review and one smoke-gated physical campaign. This current section supersedes candidate/build/acceptance wording in the dated master planning and execution record below. Older NOT_CREATED/NOT_BUILT/accepted-none and in-progress text describes its observation time, never the current baseline. No main merge, push, flash or physical/public milestone promotion occurred.

Historical master planning and execution record (retained)

Review cutoff: 2026-10-04T16:46:18.335648+00:00. READY_FOR_PLATFORM_V1_PHYSICAL_QUALIFICATION.

The master found eleven independent paired subsystem sessions and is doing integration in its own isolated worktrees. No subsystem tree, ref or index was modified. Initial observation performed no build/hardware test/merge. The refreshed activation audit now admits master-owned isolated integration trees; no main merge, flash or push occurred. See the live status for every branch/HEAD/path, dirty state, changed files, contract, tests, evidence, dependencies and candidate; the plan records C01–C30 and merge order.

Current integration result — 2026-10-04

READY_FOR_PLATFORM_V1_PHYSICAL_QUALIFICATION. All eleven source handoffs are finished, all selected source is integrated, and no sessions remain active. The paired integration branches contain one source/image-bound owner-local candidate. Integrated physical/endurance qualification is NOT_RUN and public distribution remains blocked. The repeated boundary audit and roadmap precede this readiness change; no main merge, push, flash or owner-tree/ref/index change.

Compiled Linux 4c72466f2f27ddf9f0ca18ba8ddc4d89c52599d2 / Reborn dd73dcc3243045cd33e319dda2f76918ed37ea31. Candidate: /home/luca/Dokumente/Code/worktrees/platform-v1-integration/Y2Linux/out/y2linux-platform-v1-integration-candidate. BOOTIMG d2dec1a517a596861adb69b4c9aaab51e68d5caf46712a99dbd8607e9d8fbb06; Y2ROOT cd3c077fd6c4882c82b7c67c42266f5f0ddc04828ddc2af111434740153bd1dc. Exact next owner action: SPFT Download Only with the candidate's MT6582_preserve_data_scatter.txt, select BOOTIMG.img and Y2ROOT.img only; leave USRDATA and all other partitions unselected. Retain the separate matching UART01 fallback. Then review exact source/boot/taint and use one A–J campaign.

Overall Platform 1.0 state

The protected source foundation is Linux b5aea937a3b8e3e8ec398f8cb2e04656b8a53f8c and Reborn b71b468860233faa0a42b8448ec5777fa952b8e3. Reborn main at 7f9df397 lacks the scanout-release commit; preserve it. All eleven session histories retain the foundations. Selected source from all eleven finished handoffs is composed, software-qualified and sealed as one owner-local candidate in paired isolated master branches.

Owner receipts identify installed Baseline02 (compiled Linux 8584ccd8, Reborn b71b4688, root v1.21). Radio/storage/DB/graphics measurements belong to boot 27e6d684-3794-4490-95db-a489027cd4f4, taint 0. The later single RTC full sleep trial recovered through a watchdog reboot to 88b85fa3-2282-4d93-b0b8-818a105ddd0a, also taint 0. Retained SRAM stops at DEVICES_RESUMING, wake 0x20, full PCM 596 and reset stamp 0x59325253, with no complete/exit mark: FAIL, not a same-boot resume. Post-reboot aligned direct reads of both 64-KiB scratch fixtures match and root/data/SD ext4 counters are zero; this is reboot recovery, not suspend restoration. Raw owner receipts are immutably archived in the 13:11 inventory snapshot’s suspend-baseline02-rtc-failure folder. New suspend source was not installed; its acceptance remains open. Master has not contacted the device. Baseline02 automatic C3 qualification remains an independent gate; prior bounded CPU/storage evidence is retained.

The UART01 physical receipt protects bounded C1, C2 84.3473%, C3 65.2450%, 21 guarded trials and 3,647 successful entries/resumes, same boot and zero checked restore faults. It does not qualify full-system suspend, electrical battery savings or future integrated images.

Protected-path review at the cutoff finds only suspend modifying Linux spm.c: its new context checks target full-system entry, plus checked BIU/normal-PCM/ timer/CIRQ restoration and shared quarantine on failure. The DORMANT finisher branch retains the existing timer/stash/flush/WFI/abort contract; other inventoried idle/UART/timer/boot-policy paths are untouched by the eleven owners. USB's Buildroot defconfig addition is MTP, with existing dependencies retained. This is source preservation evidence, not an integrated physical pass; shared SPM/config/package effects still require fresh C1/C2/C3 regression.

Active and finished sessions

Bluetooth has a clean paired software handoff at Linux 5846a7a0a133 / Reborn de092094c27a. Its owner verdict is MORE_WORK_REQUIRED for actual changed binary/peer/audio qualification; do not call it Platform 1.0 finished. Master source disposition is ACCEPT_WITH_INTEGRATION_ADJUSTMENT for safe diagnostic composition, subject to final complete-diff/source review before cherry-pick. No code has been integrated.

High-resolution audio has a paired software handoff at Linux 71631818 (implementation d9595d6f) / Reborn cd5d2430; its MORE_HARDWARE_EVIDENCE_REQUIRED verdict keeps wider native modes disabled. Documentation-only 71631818 corrects its research diagram to include the live post-conversion f64 VolumeRamp; unity-volume fixtures do not prove every gain/DSP state. This is a documentation correction, without reopened implementation scope. Input has refreshed paired software and userspace candidate 95ed509 / e51a335, with 257 workspace tests and malformed-key cancellation. Owner requested session closure after a zero-event observation; its final closing report is now committed at Linux 8b58030. Counted acceptance remains MORE_WORK_REQUIRED, and no changed binary was executed. The master removed its reserved physical slot.

Wi-Fi has a clean paired source handoff at Linux 78c35124 / Reborn 2cdb9cce; its after-policy hardware and wider acceptance remain PARTIAL. Graphics has clean paired final handoffs 383234de / a2df691e. Reviewed durable receipts prove bounded Baseline02 awake/off/wake behavior and temporary native ARM JPEG benefit, with the static redraw defect and broader acceptance left PARTIAL. Reborn performance has an admission-only Linux commit and Reborn implementation b8c05db plus wired pacing 069415a. Its exact final-binary matched device and supplemental controls pass is reviewed; clean closing Reborn7ed4a406/Linux949b78ce completes the handoff. USB has a clean paired software handoff and a sealed subsystem candidate; closing 1115933 also freezes later qualification metrics: owner 08019df and fresh source-bound ARM/package receipts supersede the earlier openat2 header build failure (C23). Physical desktop gates remain open; this is not the master RC. Suspend has clean paired final source/evidence handoff 2d2b543 / c57a55f, including codec source a69bd50. Installed Baseline02 full RTC FAIL is retained; new kernel/handshake is software validated and PHYSICAL_NOT_RUN. FFmpeg has a clean paired software handoff with 252 host and 32 media/30 library ARM QEMU tests; physical scan/playback is NOT_RUN. Storage has a final clean paired handoff at Linux 3a6b5f3 (implementation 2a603c1) and Reborn f726ae40 playback guard following ee1c25a. Its completed 1k stock DATA/SD corpus receipts are also preserved by FFmpeg c9ef7902/e709ecc. Library DB has clean paired final handoffs cdbdfe8 / c7a8786 and saved bounded native 1k/10k/50k measurements; no whole-app/endurance acceptance follows. All eleven clean paired source/software handoffs are now available. Performance closing reports and supplementation are complete; highres documentation correction is complete without reopened implementation. Check the status cutoff before using these lifecycle labels; commits alone never finish a session.

Product area coverage

Accepted, rejected and unchanged work

Accepted into integration: none. Final selections require finished owners and semantic reconciliation. Bluetooth's software work is provisionally suitable; its physical gates remain open. Wi-Fi's reviewed source is provisionally suitable after shared wait/diagnostic composition; no after-performance claim. Audio's source additions are provisionally suitable with diagnostic/media composition; no native wider mode is accepted. No branch was rejected wholesale or deleted. Reject performance's weaker Bluetooth polling hunk in favor of the completed Bluetooth owner worker.

Duplicated implementations detected: FFmpeg and DB incremental scan/reuse; FFmpeg and graphics reduced JPEG decode. Keep one DB-owned scanner and one selected bounded media artwork path. Input/performance also duplicate timestamp names (kernel_mono_us versus evdev_us); choose the input-owned monotonic/provenance contract. Independent report/roadmap insertions are documentation duplication, not eleven new feature authorities.

Preserve good unchanged behavior: GPU/Lima/DRM runtime-PM and scanout architecture; Bluetooth controller/CONSYS ownership and conservative reconnect budget; Wi-Fi fullmac/supplicant/DHCP ownership and disabled broken checksum offload; native S16/44.1/48 fallback; battery/charging/thermal policy; immutable fallback, Y2DATA/protected partitions and recovery. The wired path is measured at 16 meaningful bits maximum (no wide memif, 16-bit interconnect outputs, serializer pad low 16 bits zero), so native highres is closed as hardware-limited rather than a pending requirement; S16 stays the maximum. These are current preservation decisions, not final no-change acceptances of all active sessions.

Outstanding conflicts and interfaces

Confirmed text conflicts: shared Linux readiness wait (USB/Wi-Fi), Reborn library scanner (FFmpeg/DB), native JPEG artwork (FFmpeg/graphics), physical Power/input router (input/suspend/performance). Temporary-copy checks leave live worktrees untouched.

Further semantic risks: one Reborn app/catalog/scanner/event loop; storage diskseq/mount lifetime and MTP eject; union of safe diagnostic fields; paired C/Rust media ABI; full-suspend shared SPM normal firmware/restore/broken-state; Buildroot dependency/config/source version and kernel patch digest composition; USB auto-refresh must not launch a scan after suspend preparation acknowledgement. Performance's new asynchronous watchdog observations can also launch scans when results reach the UI; compose their cancellation/freshness with prepare/restore and storage lifecycle (C25), without adding a second hardware authority. Collection-art composition must retain FFmpeg sidecar freshness and performance's successful-insert-only cache eviction, with one bounded worker/cache (C27). The pure combined diagnostic probe confirms lost/redacted new public telemetry; Wi-Fi 7056977 partly resolves its observation fields/enums, while USB/sleep/bonded composition remains open; storage’s UUID+CID upgrade intentionally retains legacy rows offline and requires one rescan/new queue selection. Reviewed UI catalog filters online tracks, so those legacy rows are already excluded from normal browsing. Preserve that safe policy and no old-Track rebind; verify saved-queue refusal, count/memory and total resident-catalog capacity when old plus new rows coexist (C19). Storage and DB duplicate its parsing helper. FFmpeg's additive metadata-revision migration/reuse must enter the DB-owned scanner (C24). Storage f726ae40 supersedes the confirmed ee1c25a path-only decoder gap and the first dirty nested-symlink defect. Reviewed source walks root/parents/ regular file with no-follow and device/mount checks, holds file and parent FDs through decoder close, and pins queued tracks and sidecars. All 33 valid audio fixtures retain metadata/first PCM/position, with identical JPEG/PNG/WebP pixels through suffix-free FDs and special-file refusal. The bounded artwork signature fallback adds a fourth owner to native media composition; preserve FFmpeg limits and graphics behavior. Combined-media/source/suspend regression remains open, and new source is PHYSICAL_NOT_RUN (C26). FFmpeg owner review adds semantic metadata equality (timing counters separate) and case-insensitive/corrupt-fallback sidecar selection through the pinned parent to the combined regression list. USB's earlier installed-UART01 assumption is corrected by 6fcd1b2; retain the dated receipt as historical evidence and current Baseline02 identity separately. Performance changes native shaders/batching with exactly49,152 bytes of staging. Its final source-bound comparison contains ten benchmark screen readbacks:600 of 6,912,000 channels differ (0.0087%), maximum5/255, small antialias/interpolation differences. Live covers are excluded from those pixels. Preserve that honest near-equivalence and require integrated render/capture regression. Graphics closing receipt corrects stale SDK 9.0.1 wording to verified 9.0.2 and binds the tested membrane hash; its device runtime version was not independently captured (C22). Canonical contract choices are documented, not implemented/reconciled yet. Keep existing negotiated_codec authoritative; intent names remain distinct. Proposed Power contract follows the suspend owner's reported explicit requirement: long hold opens the existing shutdown confirmation, short paused Power requests qualified sleep/wake and playing Power blanks. Input owns raw normalization and typed cancellation; its older QuickSettings-on-Power expectation must be reconciled once. This contract selection is documented for integration, not yet shipped.

Hardware and release blockers

• Final integrated-image boot policy and protected C1/C2/C3 regression.
• Genuine same-boot full RTC/Power suspend/wake and all subsystem restoration:

  single Baseline02 RTC trial failed; retained codec resume entry has no leave.

• USB desktop MTP/copy/disconnect/eject behavior with one filesystem owner;

  generated openat2/syscall headers must remain valid in the integration build.

• Final Wi-Fi readiness/transfer and changed Bluetooth worker/runtime/peer/codec

  evidence. Owner reports no headset currently available; coexistence/audio stays NOT_TESTED until one is supplied for the actual campaign.

• Native highres exact-SoC fetch/interconnect and independent bit/clock proof;

  admitted native output remains S16 stereo 44.1/48 kHz.

• Current-image storage/filesystem modes/hotplug, new renderer batching equivalence/performance, display/brightness/boot/shutdown,

  counted wheel/buttons, library/durability and measured performance.

• Charging/battery/thermal/electrical and representative actual workload endurance;

  short samples and passive collectors do not prove these.

• Corresponding source/notices/collector gaps, owner firmware redistribution,

  private calibration exclusion, optional codec distribution review, exact fallback and private-state-free package composition. New MTP dependencies need inventory.

These preserve the existing 233-feature release inventory and its implementation/software/physical/hardware/distribution distinctions. No required feature is silently dropped. No new legal clearance is claimed. Read-only GitHub refresh on 2026-10-04 confirms #16/#27/#28/#29/#31/#32/#33/#34 OPEN and historical #30 CLOSED since 2026-09-15. That planning closure does not qualify physical full resume; the new failed RTC receipt keeps this release gate open. No external issue state or comment was changed by master.

Current integration order and candidate

0 foundations; 1 shared kernel review; 2 storage; 3 USB; 4 Wi-Fi/service loop; 5 Bluetooth; 6 precision/media; 7 DB scanner reconciliation; 8 graphics/performance; 9 input; 10 paired Reborn/full sleep; 11 release composition and broad validation. Targeted tests follow each coherent step. The order can split coherent commits when final dependencies require it; no blind branch history merge.

Integration branches codex/platform-v1-integration: NOT_CREATED while selected owners are active. Integration commits: none. Fresh integrated global software results: NOT_RUN. The retained Baseline02 software receipt is 391 production cases (386 pass/5 dependency skips), 125 focused source tests, 27 native filesystem/GIO, 3 ALSA, 238 Reborn, ARM/QEMU/ELF/package checks; those counts are historical, not this master pass or an integrated RC result.

Platform v1 integration candidate: out/y2linux-platform-v1-integration-candidate/ — NOT_BUILT. BOOTIMG SHA256: not available. Y2ROOT SHA256: not available.

Existing Baseline02: out/y2linux-baseline-02-candidate/, compiled Linux 8584ccd85f052f351fe51650b2348c83ca894ed4 / Reborn b71b468860233faa0a42b8448ec5777fa952b8e3; manifest-recorded hashes: BOOTIMG 5d8a2999368a04b23b898d2106b465eb6b028c2314da1a39c66c6b26dc8c41a3; Y2ROOT 3148bea2b6d78be34afcbb9cd933502f14416e81c8053324ff6c9ea151ee3892. They are not the integration-candidate hashes and were not rehashed in this read-only audit. Prior candidates remain retained and indexed by status report. Fresh storage mode/read/reinsert evidence is preserved as bounded Baseline02 observation; it does not automatically admit faster modes or qualify the integrated RC. Input also produced an uninstalled ARM-userspace candidate, with no BOOTIMG or Y2ROOT. Its source/binary hashes are indexed separately; it is not a final release. USB's sealed out/y2linux-platform-v1-usb-candidate/ is also a subsystem candidate, compiled 08019df / 51d477b; its exact hashes are indexed by status. Neither is renamed or promoted into the master candidate.

Device coordination record

Master made no device connection or lock acquisition. Read-only host process, lock and thread-ID metadata identified graphics PID 2284716 as the persistent reservation holder. Its age alone did not establish abandonment. At owner requests, master asked for normal safe batch completion/release; no process was signalled and no lock file was removed or changed. Graphics reports release; performance reports admission at 12:02:52 UTC and restoration/release around 12:08 UTC. Those messages coordinate access, not physical qualification evidence.

Storage reports that input PID 3196160 acquired next, while its nonblocking attempt remained unsuccessful. Master requested an explicit storage gap after input's safe release and notified performance/DB to avoid queued blocking-waiter starvation. No slot is assumed granted and no test is marked run until owner receipts show actual lock admission, source/binary identity and restoration. Input subsequently reports safe release after a zero-event observer window; that is not counted-input acceptance. A previously queued DB waiter then reports normal admission before storage. Master asked DB to finish safely/release and input/performance/suspend waiters to defer for storage's next agreed gap. No active benchmark is interrupted and no reported availability is treated as a guaranteed kernel-lock grant. Suspend reports a pre-existing explicit owner reservation and withdrew its waiting claim only for storage's final cleanup. The requested sequence became DB safe release, storage, reserved continuous suspend, input, performance. Input later reported an owner request to close and removed its slot; the current requested sequence is DB → storage → suspend → performance. All admissions remain actual nonblocking flock checks; messages do not acquire a lease. DB subsequently reports both 50k stages completed and normal release/owned cleanup; master relayed availability to storage. Physical benchmark numbers await the final saved report, source/binary identities and restoration receipt before admission. Storage subsequently reports both 1k mixed-corpus stages passed, owned scratch/ harness cleanup, unchanged mounted modes/services/settings and same boot/taint0, then actual normal release. Master relayed that release to the reserved suspend owner and asked performance to remain deferred. Durable corpus receipts reviewed via FFmpeg’s source-bound compact evidence show all 1,000 stock files indexed/reused on DATA and SD with zero failures/controller fault deltas. Source/binary identity remains Baseline02, not the new playback guard. Suspend then reported actual nonblocking admission at 12:48 UTC and is establishing the independent observer before any requested cable unplug. Master remains offline. Performance initially had no queued waiter and remained deferred until release. The ensuing one-shot full RTC trial failed through watchdog recovery/new boot; owner then completed integrity/cleanup and actual normal release, without a second deep trial. Master relayed that release to performance, which must acquire nonblocking and repeat its preserved baseline on the new boot before its candidate. Master’s retained-ring review identifies unmatched CS43131 1-0030 resume entry 7407; the owner corrected its initial all-callbacks-returned inference and is reviewing that exact driver offline. A final root cause/fix is not established. Suspend plans narrow codec PM substep notes and failed-suspend rollback repair in patch0030 (C28), with no AFE/highres/DSP redesign or new hardware trial. Final a69bd50/2d2b543 codec diff and executed fault tests are reviewed; normal ARM build passes. Semantic integration and future exact-image physical proof remain required. Performance subsequently reports actual nonblocking admission at 13:19 UTC on the new boot, with independent identity/ policy/integrity readmission and preserved baseline followed by b8c05db candidate. The matched b8 run passed per owner report. Its subsequent untimed audio syscall trace motivates a write-size probe and possible bounded ALSA pacing change (C29); no old binary result qualifies a later change. Current extra audio files are measurement helpers; no playback pacing implementation hunk is present at the 13:32 source snapshot. A later reviewed dirty hunk now defers a wired-only bounded wait after a partial write to the next call, preserving accepted-frame progress and clearing wait state after recovery/discard. Pacing is now committed069415a with audio-owner PASS_SOURCE_REVIEW bound to that exact commit. Primary Git verifies the reviewed native.rs blob0580a345 is identical to the committed file (SHA25678a1f816); patch and file hashes are recorded separately after correcting a draft label. Ten executed fault/native tests support the source contract, and final exact069415a ARM binarySHA7871ec67 has a matched Baseline02 device pass. Whole-app playing CPU87.95→11.21% and audio-thread82.63→5.11% of one core, with zero measured xruns/playback/FFmpeg errors. Controls and active shutdown 317.28ms pass; stock/data/policy/integrity restored on boot88b85fa3/taint0 with normal lock release. Full243 workspace tests and lint/ARM build pass per owner. Master requested exact evidence and audio-owner contract review without changing formats/buffers/gain or taking the device. Primary summary/raw receipt/restoration archived in13:58 snapshot. The two-sample Play/Pause KMS regression21.75→42.47ms is retained; the separate16resume/16pause phase-varied replay improves KMS p95 43.98→22.55/64.70→38.50ms. All32samples per side, trace drops0, xruns0, playback/FFmpeg errors0; existing bounded logger drops15/13 are separate. Supplemental JSON is archived in14:10 snapshot and primary figures preserved. No app source changed. Normal lease release/restoration completed; paired closing 7ed4a406/949b78ce is clean and reviewed; master stays offline.

Integration execution ledger — current 2026-10-04

| Bluetooth | f463e657ab3568b20e2385ab22ce0a336a81f5af / 0fadf293569556f3d697704413046acaca90424d | 40 Linux PASS/one DT dependency skip and ten Bluetooth Rust PASS; event-driven owner retained. |

| PCM precision and diagnostics | 0b78829e676f1208294d50a057a622777b02918c / 465b3d3726d1d240ae81605a3abc3d1cb28cd52e | 15 Linux and78 affected Rust tests PASS;35 pinned PCM fixtures, typed public bonding/USB/sleep/precision export and private malformed bond redaction. |

| Bounded media and checked artwork | source foundation / 5435572e761d31d56547b57156f91fe3a98bbdc0 | 90 affected Rust tests and ten host artwork checks PASS. FFmpeg unified bounded decoder, graphics checked JPEG lowres and storage FD header/regular-file guards composed. New case/fallback/parent-rename/symlink test PASS. Host FFmpeg is newer than pinned9.0.2; exact production ARM/QEMU gate remains. |

| Database/media scanner | source foundation / 836533560fdcdadc6351a8b2cfc116e947ace124 | DB-owner TEMP presence/batch/token/keyset protocol retained; FFmpeg metadata revision2/additive schema1 reopen, bounded iterator traversal, demux-only parse and file-race counters adapted.46 library tests plus affected app/binaries PASS, including50k behavior, unchanged persistent-write refusal, UUID-to-CID offline identity and250001 SQL-only cap fixture. The threshold fixture is no hardware/RSS qualification beyond the owner's50k result. |

| Performance/runtime/render | source foundation / 4ee462f5e93b7044d6c0cd40ad32c7a0d53b2085 |222 affected Rust tests and strict workspace Clippy PASS;14 host art requests/eight expected warm hits. Exact reviewed pacing blob0580a345 retained. Observation generation and source-aware artwork composed; later suspend unit releases cached FDs and adds actual worker quiescence. Physical performance numbers remain bound to owner069415a binary. |

| Input |6cd52a672b1789c5c18e270d62da09b34f480dd3 /7686c9b2a72b7829072f82bd63c32452d22262b3 |195 affected Rust and three Linux analyzer tests PASS; host capture helper compiles with strict warnings. Canonical kernel_mono_us controls timing; performance analyzer reads it and retains compatibility with old evdev_us receipts. |

| Full-suspend product reconciliation |82499a0c11b83340767f70068c07cf75d7a538f6 /30b6a95687d101b57151de3df740a02ce6dab956 |324 full Reborn workspace tests, fmt and strict Clippy PASS;40 Linux tests PASS. New source/music/mount/sleep generation, pending scanner acknowledgement, deferred durable USB refresh, active artwork cancellation, zero-cache-FD eject and >read-budget pre-wake queue tests. PowerHold is shutdown confirmation; short dark wake is consumed; dark transport seeking preserved. Full physical RTC failure remains open and ordinary deep sleep still refuses unqualified hardware. |

| Retained owner handoffs |792f00a5bf655071920991d5af3c672dae3c8ee2 /f0fba6cc4e90fae0681eee93ebecba20187caff3 | Source-bound architecture/validation/raw committed receipts preserved; historical roadmap/CURRENT claims are not replayed as current integration identity.15:40 read-only discovery confirms all owner heads unchanged/clean/stable. |

Private master build/test logs: isolated paired out/integration-validation/; initial kernel output Y2Linux/out/integration-kernel/. These are software units, not a sealed BOOTIMG/Y2ROOT pair or physical acceptance. Exact public source unit origins remain in the status/plan; source owners and canonical refs are unchanged. Raw patch context whitespace is retained for exact zero-fuzz/digest verification; ordinary code whitespace is checked separately.

Historical pre-seal next-action checkpoint

No owner flash/install action now. All eleven source-frozen handoffs are reviewed. Paired isolated integration branches are active; shared kernel, storage, USB/Wi-Fi, Bluetooth, precision, media and DB source units are committed and targeted software checks pass. Performance/runtime/input/suspend composition has passed its targeted tests; fresh release/software gates remain. A real headset is needed for later Bluetooth qualification. One final integrated physical campaign will reuse unaffected receipts and focus on cross-subsystem regressions, with minimal owner interaction.

Readiness: INTEGRATION_IN_PROGRESS. The final 16-item completion report, one candidate and its exact owner installation step become available only after required integration/software gates; PLATFORM_V1_READY additionally requires required physical/endurance and distribution gates.

Source composition is now committed; next work is release composition, the one qualification harness and fresh broad software/ARM validation. Owner trees/refs remain untouched. Collection caching retains four valid embedded covers and immutable source/file claims; cached covers own no descriptors or mount pins. Sidecar results are uncached/fresh. New source freshness checks avoid repeated UUID probes on warm cache hits and reject changed inode/ctime/mount/card claims before worker and UI publication. Sleep preparation consumes read-only observation, actual scanner admission and artwork activity gates; queued/active work cannot start after acknowledgement. USB durable generations remain deferred until restore. The source freshness claim also checks inode/ctime/mount/card before worker and UI publication while releasing decode descriptors, so cached artwork cannot block SD eject. Initial compile-only composition failures are kept in private logs and corrected; no failure is reclassified as a pass.

Fresh production build checkpoint — 2026-10-04

Compiled source target is Linux e4a615dc9d02b70a3ceb71558162fce0cc70614d / Reborn dd73dcc3243045cd33e319dda2f76918ed37ea31; root 2025.02.18-platform-v1.23, kernel 6.18.0-y2linux-platform-v1-integration-01. Fresh kernel Image/zImage/modules and ARM ABI helper PASS; fresh Buildroot userspace is running, not qualified yet. All 22 frozen owner trees remain unchanged/clean/stable at 16:17 UTC. Fifteen registered CPU-idle/UART/timer/CIRQ/DVFS foundation source files are byte-preserved relative to the protected base; no source/test deletion. The one coordinator prints its A–J plan offline and its 43 affected software tests PASS. No device access or new physical acceptance. Final package contract review must separate software S24/S32 conversion from native hardware admission and bind delivered MTP to config/package/responder presence. Initial missing host APK cache preflight failed before compilation and is retained; verified cache inputs were copied into master-owned storage and the fresh build restarted.

Final 16-item master handoff

1. All discovered sessions

Both branches are codex/platform-v1-. All22 owner trees are clean/stable and unchanged at16:46UTC. Full worktree paths, every source commit/file/interface/receipt and lifecycle are in the live status. All selected source is ACCEPT_WITH_INTEGRATION_ADJUSTMENT; physical scope remains separate.

2. Cross-branch conflicts found

C01–C34 are recorded in the plan. Resolved shared signal/socket wait, storage/USB ownership/claims, schema/diagnostic union, audio/media ABI and meaningful-bit precision, scanner/extractor revision, JPEG/artwork limits, one runtime/worker authority, monotonic input/Power/wake queues, source freshness/eject/zero-FD caching, prepare/restore ACK barriers, release source/package version and MTP dependency evidence. Initial cache/mount/ GIO preflight failures remain private and corrected; no failed receipt becomes PASS. No unresolved source merge/interface conflicts remain; physical gates remain open.

3. Duplicated work rejected

Reject FFmpeg's second durable seen-marker scanner in favor of DB-owned bounded TEMP scan protocol. Reject stale performance BT20→100ms timer hunk in favor of Bluetooth-owner event worker. Use one source/card authority, kernel_mono_us clock, artwork cache/cancellation model, signal wake/select loop and qualification lease. Do not package subsystem candidates as independent Platform1.0 releases.

4. Interface changes reconciled

Retain platform APIv1/feature contract2; Bluetooth PCM codec remains the canonical observed codec, alongside bounded PCM epoch/readiness. One USB schema/typed client with durable library_refresh_generation and Linux filesystem ownership; native output precision/rate admission stays distinct from software conversion. Sleep requested/preparing/refused/sleeping/waking/restored/restore_failed with explicit product ACK and same-boot full PCM/reset/wake proof. Diagnostics fixed-field union keeps safe bool bonded while redacting arbitrary bond secrets/addresses/ paths/text. One C/Rust metadata/FFmpeg ABI and schema1 additive extractor revision.

5. Features improved

Bounded radio event work, desktop-MTP implementation, durable incremental refresh, strict source/card/queue/sidecar admission, checked JPEG reduction, per-vertex render batching, waitable input/event loop and wired ALSA pacing, TEMP scanning/ metadata revision, malformed-media limits/tags and meaningful-bit conversion, source-aware zero-FD cover cache, observed kernel precision/PM faults, real worker sleep quiescence and explicit refusal/restore contracts. These are selected source and software improvements; owner physical performance numbers apply to their exact temporary binaries, not the new image.

6. Features deliberately unchanged

Preserve established GPU/DRM/Lima/runtime-PM/scanout, guarded native S16 path, CPU/idle/timer/DVFS/hotplug, battery/low-battery/charger authority, logical storage layout, DATA/SD integrity and preserving recovery. Do not invent wider AFE modes, raw block export/RNDIS, larger memory/catalog qualification or battery-life claims.

7. Known-good foundations preserved

UART01 all4 C1; C2 84.3473%; C3 65.2450%,3647 checked returns, restore faults0, sameboot. Fifteen source files and SPM dormant/idle-arm/idle-restore functions are byte-identical to the protected foundation. Reborn starts at b71b468 scanout fix, not its older main. Full suspend remains independent and unqualified on the RC.

8. Integration commits

Coherent semantic units on isolated branches; no main merge/history rewrite. Compiled source ends at Linux4c72466/Reborndd73dcc. Later documentation-only commits record the seal without claiming to be compiled code. Full unit ledger:

Y2Linux:

• a99b56f477ff641d6ac7ae44a689328a8ab40c11 — docs: admit isolated Platform 1.0 integration from frozen owner handoffs
• c95561f79d839c42a8f4bc78c87c07b818f82d53 — Integrate shared kernel fixes while preserving qualified CPU idle
• 02c314e4c5608dad62d2972788e6a13d38084b03 — Integrate storage claims, filesystem preflight and lifecycle diagnostics
• 96ce4df086c149620f81cdd206b419f507f6e107 — Compose USB transfer and Wi-Fi readiness with one signal/socket wait
• f463e657ab3568b20e2385ab22ce0a336a81f5af — Integrate BlueZ reconnect policy and bounded Bluetooth observations
• 0b78829e676f1208294d50a057a622777b02918c — Compose truthful audio capability and private-safe shared diagnostics
• 6cd52a672b1789c5c18e270d62da09b34f480dd3 — Retain input capture evidence tooling in integrated production checks
• 82499a0c11b83340767f70068c07cf75d7a538f6 — Integrate checked full-suspend restoration contracts and qualification evidence tooling
• 792f00a5bf655071920991d5af3c672dae3c8ee2 — Preserve subsystem source-bound validation and architecture handoffs
• e4a615dc9d02b70a3ceb71558162fce0cc70614d — release: compose one Platform 1.0 identity, inventory and leased qualification campaign
• 3689131fc75d269acbfc82d274aefb9e41a88886 — release: reconcile native audio admission and delivered MTP dependencies
• 4c72466f2f27ddf9f0ca18ba8ddc4d89c52599d2 — release: derive Reborn package identity and retain native Bluetooth qualification

Y2Reborn:

• a243405416beb71b6912696d498ecea5baa91e8e — docs: admit isolated Platform 1.0 integration from frozen owner handoffs
• b533ebbded5020839a9d9f8372a7ca9f2d67809d — Pin playback files and sidecars to current storage sources
• ccdb794cf22791270041665c68b0aef971f2cbf2 — Add typed USB transfer states and durable library refresh
• 5317b7c1a5f5b291a5680289e52d2d5e64716a15 — Integrate bounded Wi-Fi observations and association freshness
• 0fadf293569556f3d697704413046acaca90424d — Use event-driven Bluetooth intent and PCM transport epochs
• 465b3d3726d1d240ae81605a3abc3d1cb28cd52e — Preserve meaningful PCM bits and all pinned audio fixtures
• 5435572e761d31d56547b57156f91fe3a98bbdc0 — Integrate bounded FFmpeg metadata, checked JPEG reduction and pinned sidecars
• 836533560fdcdadc6351a8b2cfc116e947ace124 — Compose TEMP-table library scans with revisioned bounded FFmpeg metadata
• 4ee462f5e93b7044d6c0cd40ad32c7a0d53b2085 — Integrate measured render and audio pacing with source-safe artwork and observations
• 7686c9b2a72b7829072f82bd63c32452d22262b3 — Reconcile monotonic input timing, hold routing and performance capture
• 30b6a95687d101b57151de3df740a02ce6dab956 — Compose full-suspend acknowledgement with scanner, USB, artwork and input ownership
• f0fba6cc4e90fae0681eee93ebecba20187caff3 — Preserve media, database, input and measured performance handoffs
• dd73dcc3243045cd33e319dda2f76918ed37ea31 — docs: record composed Platform 1.0 source and scoped physical evidence

9. Global software results

Fresh kernel Image/zImage/modules/config/DT/ABI and full Buildroot/Reborn ARM PASS.466production cases:456PASS/10minimal-host dependency skips; all10exact cases pass separately in native fixtures (43scratch,31storage/measurement/owner, 15GIO/ALSA cases).324Reborn workspace tests/fmt/strict Clippy PASS. Cortex-A7 QEMU, installed ARM platform/app/codec/audio-null/library, exactFFmpeg9.0.2, 384ELFs/1411dependency edges,106packages, capability manifest, source/notices, root/fallback/private-state/preservation/checksum validation PASS.449source/license records preserve collector warnings. Source-bound private receipts: /home/luca/Dokumente/Code/worktrees/platform-v1-integration/Y2Linux/out/platform-v1-integration-qualification.

10. Remaining physical qualification

One A–J campaign: exact boot/cold-start, C1/C2/C3 before/after full return, staged/one-shot RTC/Power, DATA/SD/different-card/ MTP desktop, AP/headset/actual negotiated codecs/coexistence, wired playback and listening/conditional wide precision, format/library/USB/sleep races, GPU/countable wheel/buttons, charging/electrical/endurance, shutdown and preserving recovery. Baseline02 RTC FAIL remains; no new-image physical pass, precise inner codec cause or endurance claim. Ordinary deep sleep stays guarded.

11. Distribution/permission blockers

Firmware redistribution unresolved; AAC/aptX/aptX-HD/LDAC approvals unresolved. Pinned MTP GPL3+ source/license delivery included; source/notices/toolchain/local collector limitations still need review before public distribution. Owner-local software candidate only; public_distribution_ready=false.

12. Integrated candidate path

/home/luca/Dokumente/Code/worktrees/platform-v1-integration/Y2Linux/out/y2linux-platform-v1-integration-candidate. Preserving profile only; no DATA payload. Source pair/hash identity is in manifest.json; OWNER-HANDOFF.md and the physical plan contain exact next steps.

13. BOOTIMG SHA256

d2dec1a517a596861adb69b4c9aaab51e68d5caf46712a99dbd8607e9d8fbb06 (7231488bytes).

14. Y2ROOT SHA256

cd3c077fd6c4882c82b7c67c42266f5f0ddc04828ddc2af111434740153bd1dc (536870912bytes).

15. Exact next owner action

Owner installs this pair in SPFT Download Only using MT6582_preserve_data_scatter.txt: BOOTIMG→BOOTIMG.img and ANDROID→Y2ROOT.img only, USRDATA/every other partition unselected; no format/table/loader/calibration write. Retain matching UART01 fallback and stock recovery. First review installed source/boot/taint, then one shared-lease A–J campaign. Master has never accessed/flashed the device or pushed/main-merged.

16. Verdict

READY_FOR_PLATFORM_V1_PHYSICAL_QUALIFICATION. Platform1.0 product remains PARTIAL pending required exact-RC hardware/endurance and distribution gates.