This commit is contained in:
Aiden
2026-05-13 19:40:50 +10:00
parent 29b14691ea
commit 2c1dd9f22b
7 changed files with 317 additions and 0 deletions

View File

@@ -5146,3 +5146,151 @@ Best current follow-up:
- test exact and host-shaped handling of `07 80 7A 28 D3 5C`
- optionally compare `E8` vs `E9` timing to see whether the differing `7A`
payloads reflect selector choice or timing/context
### HE13: Exact Echo Of `07 80 7A 28 D3 5C`
Recreate the `E9` neighbor path, then immediately send the exact `7A`-family
response back to the panel.
```powershell
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 E9 40 30 C3" --frame "07 80 7A 28 D3 5C" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-echo-exact-7a28d35c.txt
```
### HE14: Host-Shaped Mirror Of `07 80 7A 28 D3 5C`
Host-shaped checksum for `00 00 7A 28 D3 ??` is `DB`.
```powershell
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 E9 40 30 C3" --frame "00 00 7A 28 D3 DB" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-echo-host-7a28d3.txt
```
What would count as a hit:
- any non-heartbeat response after the exact or host-shaped `7A 28 D3` frame
- a repeat of `07 80 7A 28 D3 5C`
- crossover into the `E8`-style `07 80 7A 50 26 D1` or `07 80 FA 50 26 51`
branch
- any new stable family that suggests `E9` is a second entry point into the
same broader selector surface
### 2026-05-13 `E9` Mirror Result
Captures:
- `captures/rcp-heartbeat-echo-exact-7a28d35c.txt`
- `captures/rcp-heartbeat-echo-host-7a28d3.txt`
Result summary:
- `E9` cleanly reproduced its `7A`-family response in group 1 in both tests:
- `07 80 7A 28 D3 5C`
- Exact echo `07 80 7A 28 D3 5C` produced only heartbeat afterwards.
- Host-shaped mirror `00 00 7A 28 D3 DB` did not open a new stage either; it
only drained more copies of `07 80 7A 28 D3 5C` before falling back to
heartbeat.
- Group 2 was heartbeat-only in both tests.
Interpretation:
- `E9` behaves very much like the `E8` branch structurally:
- the host-shaped `E9` step is the active stimulus
- the downstream `7A` response is real and reproducible
- but directly echoing or mirroring that `7A` response does not advance the
exchange
- So `E8` and `E9` now look like sibling selector-style entry points into
related but distinct `7A`-family outputs:
- `E8` -> `07 80 7A 50 26 D1`
- `E9` -> `07 80 7A 28 D3 5C`
- This strengthens the idea that the `Ex` region may be selecting pages or
classes of status rather than carrying the real session-advance command.
Best current next move:
- test more nearby `Ex` values to see whether this is a broader selector strip
- or try explicit host queries for the downstream family bytes (`00 -> 7A`,
`00 -> FA`) after `E8`/`E9` selection
### HE15: Continue Outward In The `Ex` Neighborhood
Push one step farther out from the now-interesting `E8` / `E9` region and see
whether the selector-like behavior continues, shifts family again, or collapses
back into heartbeat-only behavior.
Checksums:
- `00 00 E6 40 30 CC`
- `00 00 EB 40 30 C1`
- `00 00 EC 40 30 C6`
#### HE15a: Host-Shaped `E6`
```powershell
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 E6 40 30 CC" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-neighbor-e6.txt
```
#### HE15b: Host-Shaped `EB`
```powershell
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 EB 40 30 C1" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-neighbor-eb.txt
```
#### HE15c: Host-Shaped `EC`
```powershell
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 EC 40 30 C6" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-neighbor-ec.txt
```
What would count as a hit:
- any new non-heartbeat response after `E6`, `EB`, or `EC`
- recurrence of the `E8`-style `07 80 7A 50 26 D1` or `E9`-style
`07 80 7A 28 D3 5C`
- recurrence of known heartbeat-family transients like `07 80 40 40 30 ED` or
`07 80 C0 40 30 6D`
- any additional family that strengthens the idea of a selector strip across
the `Ex` region
### 2026-05-13 Outward `Ex` Result
Captures:
- `captures/rcp-heartbeat-neighbor-e6.txt`
- `captures/rcp-heartbeat-neighbor-eb.txt`
- `captures/rcp-heartbeat-neighbor-ec.txt`
Result summary:
- `E6` and `EB` behaved the same way:
- no immediate structured reply at the `Ex` step
- the following heartbeat provoked `07 80 40 40 30 ED`
- `EC` produced a new structured family in group 1:
- `07 80 7B 50 26 D0`
- As with the other recent selector tests, all interesting behavior was group 1
only. Group 2 was heartbeat-only.
Observed outputs:
| Host step | Structured result |
| --- | --- |
| `00 00 E6 40 30 CC` | later heartbeat provoked `07 80 40 40 30 ED` |
| `00 00 EB 40 30 C1` | later heartbeat provoked `07 80 40 40 30 ED` |
| `00 00 EC 40 30 C6` | produced `07 80 7B 50 26 D0` |
Interpretation:
- The `Ex` neighborhood is continuing to look like a selector-like strip with
mixed outcomes, not a uniform command class.
- `E6`, `E7`, and `EB` now cluster together as values that bias into the
`07 80 40 40 30 ED` heartbeat-family transient.
- `E8` and `E9` open distinct `7A`-family responses:
- `E8` -> `07 80 7A 50 26 D1`
- `E9` -> `07 80 7A 28 D3 5C`
- `EC` now extends that pattern one step further with a new sibling:
- `EC` -> `07 80 7B 50 26 D0`
- `EA` remains its own case steering toward `07 80 C0 40 30 6D`.
Best current follow-up:
- treat `EC` as the next strong lead and test exact/host-shaped handling of
`07 80 7B 50 26 D0`
- optionally try `ED` next to see whether the `7B` branch continues