Platform v1 capability report
> **Historical record.** The dates, candidate identity, "current" claims, > next steps and permissions below belong to this recorded boundary. See > [current state](../CURRENT_PLATFORM_STATE.md) for the latest physically observed result.Y2Linux Platform v1 Candidate: source d04b95a / Reborn 6c8aa12. No current-candidate physical or endurance qualification is claimed. The machine ledger retains starting state, implementation, commits, tests and independent evidence levels for each row. ARM/image labels cover the described implemented contract, never its unimplemented extensions. PHYSICAL_GATE may coexist with completed software.
| Area / capability | Status | Implemented or retained contract | Remaining boundary |
|---|---|---|---|
| CORE — boot/startup/readiness | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Boot stages, actual first frame/PID readiness, supervised independent services; preserve identity/fsck/rescue gates | Exact candidate boot/UI/input/library readiness and boot timing: PHYSICAL_GATE |
| CORE — rescue | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Native authenticated root updater, torn-root restore ordering, preserved explicit RAM rescue | BOOTIMG replacement is non-atomic and remains manual; physical rescue/restore: PHYSICAL_GATE |
| CORE — telemetry | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Versioned standard Linux CPU/memory/thermal/power/storage/radio/system observations and identity records | Sampling cost, device sensors and exact target measurements: PHYSICAL_GATE |
| CORE — health | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Bounded quick/query-only full checks; explicit OK/DEGRADED/FAILED/UNAVAILABLE; malformed counters/profiles fail closed | Node/interface presence is not hardware qualification: PHYSICAL_GATE |
| CORE — capability/version API | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | JSON v1 implemented/enabled/qualified separation; typed Reborn reader; disabled/gated capabilities explicit | Qualification flags remain false; owner evidence must bind exact release |
| CORE — service readiness | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Storage health; Wi-Fi auth/IP/route/DNS; BlueZ/BlueALSA owners; audio profile; update journal; SSH binding | Service recovery under physical faults: PHYSICAL_GATE |
| CORE — reset/crash diagnostics | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Durable eight-boot journal/count/last stage, bounded private previous-log tails, taint/watchdog/pstore observations | Reset register/panic retention remain unknown; no reboot loops: PHYSICAL_GATE |
| STORAGE — eMMC/root/data | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Preserve existing split, controller/UUID guards and protected partitions; standard errors/I/O/space observation | Current-image durability/long I/O tails/endurance: PHYSICAL_GATE |
| STORAGE — SD lifecycle | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Platform owner, boot/mount/UUID/sysfs instance claims, bounded failed unmount, disappearance/replacement rejection | Actual cards, surprise removal and hardware errors: PHYSICAL_GATE |
| STORAGE — ext4/FAT/exFAT | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | In-tree exFAT plus pinned GPL exfatprogs; private noexec/nodev/nosuid mount policy | Card compatibility/flush semantics: PHYSICAL_GATE |
| STORAGE — free-space policy | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Normal/Low/Critical/ReadOnlyRisk/Failed, 96MiB cache/OTA/transfer and 32MiB state reserve, bounded known-disposable cleanup | Admission is advisory against concurrent writers; actual near-full behavior: PHYSICAL_GATE |
| STORAGE — storage benchmarks | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Pinned fresh scratch; 4/16/64KiB/1MiB sequential/random, metadata and fsync/fdatasync/rename/dirsync with latency quantiles | No physical throughput or electrical durability claimed: PHYSICAL_GATE |
| STORAGE — SQLite workloads/faults | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Actual Reborn 1k/10k/20k schema/query/scan benchmarks; ENOSPC WAL/checkpoint and process-crash fault tooling | Process-crash durability differs from power loss; target latency: PHYSICAL_GATE |
| STORAGE — Reborn library scaling | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Borrow catalog; count/filter IDs and format visible page; no ORM or extra cache authority | 20k wheel p50 2.713→0.033ms on host only; target UI/memory: PHYSICAL_GATE |
| PERFORMANCE — CPU/OPPs/scheduler/NO_HZ | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Observe current governors/frequencies/residencies/per-core load/interrupt/context-switch counters; HZ100/NO_HZ_IDLE preserved | 598MHz sufficiency, core count and schedutil workload budgets need measurement: PHYSICAL_GATE |
| PERFORMANCE — memory/LOWMEM/HIGHMEM | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | RSS/PSS/cache/slab/reclaim/threads; bounded per-boot/PID growth after warmup; no reserved-memory reclaim | Observed slope is not a leak diagnosis; target pressure/endurance: PHYSICAL_GATE |
| PERFORMANCE — thermal/wakeups | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Repeatable die-temperature/cooling/frequency/wakeup collection, no trip changes or pack-temperature inference | Actual workload thermal envelope/idle power: PHYSICAL_GATE |
| PERFORMANCE — deeper cpuidle | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Pinned vendor research finds unestablished board-specific deep-idle dependencies; no guessed SPM sequence | BLOCKED_BY_EVIDENCE / PHYSICAL_GATE; WFI remains enabled |
| POWER — battery observation/charging | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Truthful normal/offline observations; configured current remains distinct from measured current | Current charger envelope, pack identity and source qualification: PHYSICAL_GATE |
| POWER — low-battery mechanism | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Independent supervised hysteresis/debounce mechanism and bounded shutdown; thresholds/config disabled by default | Numeric thresholds/reserve require pack/load evidence: PHYSICAL_GATE |
| POWER — general shutdown/reboot | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | One credential-checked intent/ACK contract; Reborn save/stop/checkpoint/close; bounded platform continuation | Kernel D-state/final physical power transition cannot be guaranteed by userspace: PHYSICAL_GATE |
| POWER — suspend/wake/leases | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Existing shared ALSA/activity leases documented; default suspend refuses; explicit owner qualification path retained | Deep resume and RTC alarm wake: PHYSICAL_GATE; no automatic suspend |
| POWER — RTC/clock/NTP/TLS | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Boot sanity floor, standard NTP when online, bounded freshness/TLS readiness; RTC writes gated | RTC retention/alarm and real network sync: PHYSICAL_GATE; NTP unauthenticated |
| POWER — entropy | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Standard seedrng on data, kernel CRNG gates SSH/update/security; no universal image seed | Early boot entropy latency on target: PHYSICAL_GATE |
| POWER — AP watchdog/pstore | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Observation and source-backed qualification procedure; recovery not armed, no reserved RAM guessed | BLOCKED_BY_EVIDENCE / PHYSICAL_GATE for safe reset/retention/rescue escalation |
| NETWORK — Wi-Fi/DHCP/DNS | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Complete detailed states, one DHCP owner, lease epochs, recent matching DNS, distinct credential/AP/auth/DHCP/DNS errors | Physical AP/credentials/DHCP/DNS: PHYSICAL_GATE |
| NETWORK — Wi-Fi reconnect | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Keep wpa_supplicant sole retry owner; service epochs invalidate stale readiness; no competing app retry | AP loss/reappearance and reboot reconnect: PHYSICAL_GATE |
| NETWORK — throughput/coexistence tools | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Pinned iperf3, bound TCP/ping helper, integrated counters/thermal/CPU/XRUN capture | Real throughput/SBC coexistence/endurance: PHYSICAL_GATE; no synthetic loss metrics |
| BLUETOOTH — pair/trust/bond/connect/disconnect | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Coordinate explicit operations with single reconnect owner and persistent unknown-completion inhibition | Fresh peer pairing/trust/bonds and transport audio: PHYSICAL_GATE |
| BLUETOOTH — SBC baseline/exact PCM | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Pinned built/runtime inventory, native actual negotiated codec/PCM format/rate/channels and lifetime observation | SBC peer qualification remains PHYSICAL_GATE; XQ is only SBC quality mode |
| BLUETOOTH — AVRCP | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Current BlueZ owner registers semantic Play/Pause/Next/Previous and projects existing model metadata | Remote controls/peer restart: PHYSICAL_GATE |
| BLUETOOTH — Auto codec policy | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Typed built/runtime/mutual/distribution/qualification gates, bounded visited candidates and generation/PCM exclusion | No production-eligible codec yet; manual SBC for qualification: PHYSICAL_GATE |
| BLUETOOTH — AAC A2DP encoder | DEFERRED · BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Intentionally absent; capability inventory prevents accidental enablement or negotiation claims | Source/library/distribution decision plus ARM/PCM/peer qualification required; file decoding is separate |
| BLUETOOTH — aptX A2DP encoder | DEFERRED · BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Intentionally absent; capability inventory prevents accidental enablement or negotiation claims | Source/library/distribution decision plus ARM/PCM/peer qualification required; file decoding is separate |
| BLUETOOTH — aptX HD A2DP encoder | DEFERRED · BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Intentionally absent; capability inventory prevents accidental enablement or negotiation claims | Source/library/distribution decision plus ARM/PCM/peer qualification required; file decoding is separate |
| BLUETOOTH — LDAC A2DP encoder | DEFERRED · BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Intentionally absent; capability inventory prevents accidental enablement or negotiation claims | Source/library/distribution decision plus ARM/PCM/peer qualification required; file decoding is separate |
| BLUETOOTH — LE Audio/LC3 ISO, aptX Adaptive/Lossless | DEFERRED | Explicitly excluded, no capability claim | Not Platform v1 scope |
| USB — device ACM/ECM/SSH | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Preserve driver fix; supervise key-only USB-address/interface-bound listener with CRNG/readiness | PC reconnect/runtime PM/host sleep and cross-OS driver behavior: PHYSICAL_GATE |
| USB — PC file transfer | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Standard SFTP only; per-write reserve; private stage/size/hash/descriptor generation/durable no-replace publication | End-to-end throughput/interruption on real USB and Windows ECM setup: PHYSICAL_GATE |
| USB — host/OTG/UAC host | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | No unknown VBUS path or mass-storage gadget enabled; feasibility gates explicit | PHYSICAL_GATE / BLOCKED_BY_EVIDENCE; HID/storage/UAC host unavailable |
| AUDIO — S16 stereo 44.1 kHz | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Preserve allowlisted ALSA/AFE/CS43131 path; native readonly constraint query; no decoder/DSP authority change | Current candidate wired audio/XRUN/rate transitions: PHYSICAL_GATE |
| AUDIO — 48 kHz | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Reported as driver capability; product allowlist remains 44.1 kHz | PHYSICAL_GATE; not enabled in product profile |
| AUDIO — S24_LE internal output | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Exact offline precision/channel fixtures and source trace; no format-mask-only enablement | AFE fetch/interconnect/clock-family evidence missing before physical word/clock/audio qualification |
| AUDIO — S32_LE internal output | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Exact offline precision/channel fixtures and source trace; no format-mask-only enablement | AFE fetch/interconnect/clock-family evidence missing before physical word/clock/audio qualification |
| AUDIO — preserved 24-bit internal precision | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Exact offline precision/channel fixtures and source trace; no format-mask-only enablement | AFE fetch/interconnect/clock-family evidence missing before physical word/clock/audio qualification |
| AUDIO — 88.2 kHz | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Exact offline precision/channel fixtures and source trace; no format-mask-only enablement | AFE fetch/interconnect/clock-family evidence missing before physical word/clock/audio qualification |
| AUDIO — 96 kHz | BLOCKED_BY_EVIDENCE · PHYSICAL_GATE | Exact offline precision/channel fixtures and source trace; no format-mask-only enablement | AFE fetch/interconnect/clock-family evidence missing before physical word/clock/audio qualification |
| AUDIO — CS43131 advanced features | DEFERRED · PHYSICAL_GATE | Keep existing controls; no guessed impedance measurement or automatic gain | Advanced load/power/gain policy DEFERRED / PHYSICAL_GATE |
| UPDATE — OTA check/stage/download | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | HTTPS/local signed manifest check before payload, private bounded staging/hash/compatibility/space checks | Real network/download/staging power behavior: PHYSICAL_GATE |
| UPDATE — signatures/key lifecycle/replay | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Established libsodium Ed25519; key IDs, active/revoked/dev/release/sequence policy and deliberate rotation boundary | Development trust only; production key deployment DEFERRED; old rescue revocation needs owner BOOTIMG |
| UPDATE — offline install/readback/rollback | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Geometry/exclusive offline root guard; verified compressed prior root before write; readback; restore on interrupted install/missing health | Electrical interruption and actual eMMC/rescue access: PHYSICAL_GATE; 800MiB data reserve can refuse backup |
| UPDATE — boot-health acknowledgement | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Exact boot/source/PID/first-frame/core checks, 180-second health window, next owner reboot rollback, no auto reboot loop | Owner failed-app derivative cycle and post-update health: PHYSICAL_GATE |
| UPDATE — automatic BOOTIMG OTA | DEFERRED · PHYSICAL_GATE | Excluded; separately controlled manual pair and hash-verified fallback retained | PHYSICAL_GATE; single-slot write is not atomic |
| UPDATE — scoped reset/full-user reset | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Separate settings/network/bonds/library/cache/full-user plan/confirmation/quarantine/resume/purge; preserve protected/system identity | Logical reset, not secure erasure; quarantined/exported old data remains until explicit purge: PHYSICAL_GATE |
| UPDATE — backup/export | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Private atomic session/queue/preference archive; optional consistent SQLite backup and separately opted-in network credentials | Per-file/DB consistency, not cross-file transaction; physical storage/restore workflow: PHYSICAL_GATE |
| RELEASE — source reproducibility/identity | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED | Explicit Platform v1 identities, paired bundles, Buildroot/package/Rust hashes, patches/owner-firmware and installed inventory | Byte-identical reproducibility not proven; host tools still affect userspace build |
| RELEASE — security | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | USB-bound key-only no-forwarding SSH/SFTP; CRNG gates, signed root updates, private exports and protected partition boundaries | Most hardware/app services remain root; privilege separation DEFERRED; no secure-boot claim |
| RELEASE — rootfs/library optimization | DONE_SOFTWARE · HOST_VALIDATED | Footprint/ELF reference inventory and deliberate diagnostic package cost; no speculative removals | Unreferenced SONAME is not unused; startup/dlopen/target costs need physical measurement |
| RELEASE — endurance tooling | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Passive bounded profiles for all requested soak/cycle cases, exact candidate binding, gaps/reset counters/PID memory series | All actual long runs remain PHYSICAL_GATE; ENDURANCE_QUALIFIED is false |
| RELEASE — Platform v1 Candidate | DONE_SOFTWARE · HOST_VALIDATED · ARM_VALIDATED · IMAGE_VALIDATED · PHYSICAL_GATE | Core contracts implemented; final paired ARM/image/package checks passed, preserve-data candidate with signed root update and owner sessions A–G | Software candidate only; owner Sessions A–G and endurance remain PHYSICAL_GATE; explicit optional exclusions retained |