PASS: 36855 complete12bit-code nominal voltage/current/NTC oracle cases; all out-of-credibility calibration words; rail clipping, raw range, supply bounds, stale/partial timestamp and wrap checks; failed calls preserve output. Diagnostic math only.

PASS: synthetic wrong3.3V factory reference rejected
PASS: 72 delay/wrap frame cases; physical channel order; GPIO isolation; partial/stale frames; stage timeouts, overrun, clock/config faults, locked pins and backward/late time rejected. MMIO simulation only.

PASS: synthetic skipped-CCRDY mutant rejected
fixed 0 PASS: 8 boot cases; both remap bits, prior GPIO zero/all-ones; physical pin16 low and pin17 input pulldown; mapping staged before switch. MMIO model only.
original -6 
PASS: 33 zero-output invariants plus replay, deadline, budget, mode, sensor, rollover and config checks.
PASS: lamp program timer policy (44 checks)
PASS: independent IR absence/removal blocks AI and manual light; late ticket rejected; reentry needs fresh vision; timers preserved incl rollover; omitted input dark.
PASS: guard ticket becomes AI_REQUEST; matching result accepted; TX failure revokes ticket and output.
PASS: lamp_ui_dispatch integrated 55 assertions
PASS: lamp_ui_wire_service 110 assertions
PASS: wire-to-guard path, session/ticket/calibration checks, image-sequence anti-replay and malformed-packet fail-dark.
PASS: LED output is blanked during updates, written atomically across 61/122-channel banks, and fails off on bus, rail, and guard faults.
PASS: 128 GPIO combinations; PA12 vs PA10 alias isolation; read-only sampler; unbound IR/ADC/driver stays false; active AI output cancelled by real sampler/policy path. MMIO model only.
PASS: 16 init clock/prior GPIO cases; PC15 mapping, no RTC mutation, locked/config/clock conflicts, 10ms assertion/instant low/stall/reentry/wrap; physical sampler-to-guard MMIO integration.

PASS: wrong-PC14 negative control rejected
Memory region         Used Size  Region Size  %age Used
           FLASH:       16140 B        32 KB     49.26%
             RAM:        2824 B         8 KB     34.47%
   text	   data	    bss	    dec	    hex	filename
  16136	      4	   2816	  18956	   4a0c	/Users/guman/Documents/Codex/2026-09-27/https-www-amazon-com-electric-drill/work/tri-product-continuation-2026-10-10.nosync/lamp_measurement_A44/firmware/固件/lamp_target/build/lamp_safety_g030f6.elf
{
  "status": "LINKED_IMAGE_STATIC_CHECK_PASS",
  "target": "STM32G030F6P6 / Cortex-M0+",
  "toolchain": "arm-none-eabi-gcc (GCC) 16.2.0",
  "flash_binary_bytes": 16140,
  "initial_sp": "0x20002000",
  "reset_vector": "0x080000cd",
  "linked_policy_symbols": [
    "lg_init",
    "lg_accept_ai_packet",
    "lg_accept_ai_decoded_result",
    "lg_output_sync",
    "pca9956b_init",
    "is31fl3236a_lamp_backend_init",
    "aiw_stream_push",
    "aiw_stream_push_message",
    "aiw_encode_ui_ack",
    "lamp_ui_wire_service_init",
    "lamp_ui_wire_service_handle",
    "lamp_ui_dispatcher_init",
    "lamp_ui_dispatcher_handle",
    "lamp_uart_init",
    "lamp_uart_tx_enqueue",
    "lamp_tx_queue_push",
    "lamp_tx_queue_pop",
    "lamp_ticket_dispatch_issue",
    "USART2_IRQHandler",
    "SysTick_Handler",
    "lamp_board_inputs_read",
    "lg_poll",
    "lamp_board_ir_init",
    "lamp_ir_filter_update",
    "lamp_adc_init",
    "lamp_adc_poll",
    "lamp_adc_get_frame",
    "lamp_adc_failed",
    "lamp_read_factory_vrefint_cal",
    "lamp_measurement_from_frame"
  ],
  "entry_symbol": "main",
  "sha256_bin": "c52f7e5cb7112f84ca96f73693e38c531b72a7cf071b77ee399e67ed0fdba6d4",
  "sha256_elf": "50e5df62c5e1fc94fc7630dcbe5a971ab98f9499720e7f2da57f8b5596cf06ba",
  "physical_hardware_validation": false,
  "uart_rx_frame_parser_linked": true,
  "crc_valid_frames_reach_policy_guard": true,
  "ui_session_command_ack_path_linked": true,
  "ui_ack_queue_is_atomic": true,
  "guard_configured_or_armed": false,
  "ticket_dispatch_path_linked": true,
  "ticket_issuance_enabled": false,
  "runtime_ticket_requests_queued": false,
  "tx_packet_enqueue_is_atomic": true,
  "tx_wire_delivery_confirmed": false,
  "guard_rejection_counter_linked": true,
  "output_adapter_bound": false,
  "led_output_enabled": false,
  "external_watchdog_kicked": false,
  "runtime_control_enabled": false,
  "physical_contact_GPIO_sampling_bound": true,
  "A35_IR_policy_linked": true,
  "IR_GPIO_bound": true,
  "ADC_raw_sampling_bound": true,
  "nominal_voltage_current_diagnostics_bound": true,
  "VREFINT_factory_cal_read_bound": true,
  "physical_frontend_calibration": false,
  "ADC_temperature_and_supply_sampling_bound": false,
  "ADC_calibrated_safety_permissions_bound": false,
  "LED_driver_health_readback_bound": false
}
