diff --git a/captures/rcp-heartbeat-echo-exact-7a5026d1.txt b/captures/rcp-heartbeat-echo-exact-7a5026d1.txt new file mode 100644 index 0000000..2551d20 --- /dev/null +++ b/captures/rcp-heartbeat-echo-exact-7a5026d1.txt @@ -0,0 +1,33 @@ +Sequence probe: 5 frames x 2 group(s) on COM5 at 38400 8N1 +FRAME 1: 00 00 A0 00 80 7A +FRAME 2: 00 00 E8 40 30 C2 +FRAME 3: 07 80 7A 50 26 D1 +FRAME 4: 00 00 00 00 80 DA +FRAME 5: 00 00 00 00 80 DA +BASELINE heartbeat-compatible RX: 30 bytes, offset 0, 5 frames + 0 bytes +BEGIN group 1/2 +19:17:21.788 TX group=1 frame=1 len=006 00 00 A0 00 80 7A +19:17:21.788 RX group=1 frame=1 no RX bytes +19:17:22.293 TX group=1 frame=2 len=006 00 00 E8 40 30 C2 +19:17:22.293 RX group=1 frame=2 ANOMALY 6 RX bytes; first mismatch at byte 0: got 07, heartbeat offset 3 expected 00 +19:17:22.293 RX group=1 frame=2 raw 07 80 7A 50 26 D1 +19:17:22.830 TX group=1 frame=3 len=006 07 80 7A 50 26 D1 +19:17:22.830 RX group=1 frame=3 heartbeat-compatible RX: 6 bytes, offset 0, 1 frames + 0 bytes +19:17:23.335 TX group=1 frame=4 len=006 00 00 00 00 80 DA +19:17:23.335 RX group=1 frame=4 heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +19:17:23.841 TX group=1 frame=5 len=006 00 00 00 00 80 DA +19:17:23.841 RX group=1 frame=5 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +GROUP 1 TAIL heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +BEGIN group 2/2 +19:17:25.002 TX group=2 frame=1 len=006 00 00 A0 00 80 7A +19:17:25.002 RX group=2 frame=1 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +19:17:25.508 TX group=2 frame=2 len=006 00 00 E8 40 30 C2 +19:17:25.508 RX group=2 frame=2 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +19:17:26.045 TX group=2 frame=3 len=006 07 80 7A 50 26 D1 +19:17:26.045 RX group=2 frame=3 heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +19:17:26.583 TX group=2 frame=4 len=006 00 00 00 00 80 DA +19:17:26.583 RX group=2 frame=4 heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +19:17:27.090 TX group=2 frame=5 len=006 00 00 00 00 80 DA +19:17:27.090 RX group=2 frame=5 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +GROUP 2 TAIL heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +Anomalies: 1 diff --git a/captures/rcp-heartbeat-echo-host-7a5026.txt b/captures/rcp-heartbeat-echo-host-7a5026.txt new file mode 100644 index 0000000..bfe64b1 --- /dev/null +++ b/captures/rcp-heartbeat-echo-host-7a5026.txt @@ -0,0 +1,34 @@ +Sequence probe: 5 frames x 2 group(s) on COM5 at 38400 8N1 +FRAME 1: 00 00 A0 00 80 7A +FRAME 2: 00 00 E8 40 30 C2 +FRAME 3: 00 00 7A 50 26 56 +FRAME 4: 00 00 00 00 80 DA +FRAME 5: 00 00 00 00 80 DA +BASELINE heartbeat-compatible RX: 24 bytes, offset 0, 4 frames + 0 bytes +BEGIN group 1/2 +19:17:41.698 TX group=1 frame=1 len=006 00 00 A0 00 80 7A +19:17:41.698 RX group=1 frame=1 no RX bytes +19:17:42.235 TX group=1 frame=2 len=006 00 00 E8 40 30 C2 +19:17:42.235 RX group=1 frame=2 ANOMALY 18 RX bytes; first mismatch at byte 6: got 07, heartbeat offset 0 expected 00 +19:17:42.235 RX group=1 frame=2 raw 00 00 00 00 80 DA 07 80 7A 50 26 D1 07 80 7A 50 26 D1 +19:17:42.744 TX group=1 frame=3 len=006 00 00 7A 50 26 56 +19:17:42.744 RX group=1 frame=3 ANOMALY 18 RX bytes; first mismatch at byte 0: got 07, heartbeat offset 0 expected 00 +19:17:42.744 RX group=1 frame=3 raw 07 80 7A 50 26 D1 00 00 00 00 80 DA 00 00 00 00 80 DA +19:17:43.280 TX group=1 frame=4 len=006 00 00 00 00 80 DA +19:17:43.280 RX group=1 frame=4 heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +19:17:43.787 TX group=1 frame=5 len=006 00 00 00 00 80 DA +19:17:43.787 RX group=1 frame=5 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +GROUP 1 TAIL heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +BEGIN group 2/2 +19:17:44.914 TX group=2 frame=1 len=006 00 00 A0 00 80 7A +19:17:44.914 RX group=2 frame=1 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +19:17:45.418 TX group=2 frame=2 len=006 00 00 E8 40 30 C2 +19:17:45.418 RX group=2 frame=2 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +19:17:45.956 TX group=2 frame=3 len=006 00 00 7A 50 26 56 +19:17:45.956 RX group=2 frame=3 heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +19:17:46.462 TX group=2 frame=4 len=006 00 00 00 00 80 DA +19:17:46.462 RX group=2 frame=4 heartbeat-compatible RX: 12 bytes, offset 0, 2 frames + 0 bytes +19:17:46.999 TX group=2 frame=5 len=006 00 00 00 00 80 DA +19:17:46.999 RX group=2 frame=5 heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +GROUP 2 TAIL heartbeat-compatible RX: 18 bytes, offset 0, 3 frames + 0 bytes +Anomalies: 2 diff --git a/docs/discovery-notes.md b/docs/discovery-notes.md index f572852..8cf4981 100644 --- a/docs/discovery-notes.md +++ b/docs/discovery-notes.md @@ -5001,3 +5001,68 @@ Best current model of this branch: not produce a second-stage exchange. - The next useful probe should probably target `07 80 7A 50 26 D1` directly, or compare exact-vs-host handling of `7A` rather than `FA`. + +### HE10: Exact Echo Of `07 80 7A 50 26 D1` + +Recreate the host-shaped `E8` path that now reproducibly yields +`07 80 7A 50 26 D1`, then immediately send that exact `7A` frame back. + +```powershell +python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 E8 40 30 C2" --frame "07 80 7A 50 26 D1" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-echo-exact-7a5026d1.txt +``` + +### HE11: Host-Shaped Mirror Of `07 80 7A 50 26 D1` + +Host-shaped checksum for `00 00 7A 50 26 ??` is `56`. + +```powershell +python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 E8 40 30 C2" --frame "00 00 7A 50 26 56" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.8 --log captures/rcp-heartbeat-echo-host-7a5026.txt +``` + +What would count as a hit: + +- any new non-heartbeat response after the `7A` echo or mirror +- a stable second-stage family after `07 80 7A 50 26 D1` +- recurrence of `FA`, `7A`, or another new `50`-region family +- any visible panel behavior change beyond the usual `CONNECT NOT ACT` + +### 2026-05-13 `7A` Echo Follow-Up Result + +Captures: + +- `captures/rcp-heartbeat-echo-exact-7a5026d1.txt` +- `captures/rcp-heartbeat-echo-host-7a5026.txt` + +Result summary: + +- Both runs again point to the host-shaped `E8` step as the meaningful branch + trigger. +- In group 1, `00 00 E8 40 30 C2` reproduced `07 80 7A 50 26 D1` in both tests. +- The exact-echo run was the cleanest: + - `00 00 E8 40 30 C2` produced one `07 80 7A 50 26 D1` + - exact echo `07 80 7A 50 26 D1` produced only heartbeat afterwards +- The host-shaped mirror run behaved like the earlier `FA` tests: + - `00 00 E8 40 30 C2` produced `07 80 7A 50 26 D1` twice + - host-shaped `00 00 7A 50 26 56` then only drained one more + `07 80 7A 50 26 D1` followed by heartbeat +- In group 2, both tests were heartbeat-only after the same sequence. + +Interpretation: + +- `07 80 7A 50 26 D1` is now a confirmed reproducible response family on the + host-shaped `E8` branch. +- But directly echoing `7A`, whether exact or host-shaped, still did not create + a second-stage exchange, visible state change, or reusable session behavior. +- This makes `7A` look more like another readable/event family emitted by the + branch, not yet like the next host command the panel expects. +- The asymmetry is useful: + - host-shaped `E8` can provoke `7A` + - `7A` itself does not obviously provoke anything back + +Best current model of the `E8` branch: + +- `00 00 E8 40 30 C2` is the active stimulus. +- `07 80 7A 50 26 D1` is the most reproducible downstream response in that + branch. +- `07 80 FA 50 26 51` and `07 C0 7A 50 A6 11` remain side-family observations, + but neither has overtaken `7A` as the strongest lead. diff --git a/docs/pt2-protocol-summary.md b/docs/pt2-protocol-summary.md index fde0c49..b788b86 100644 --- a/docs/pt2-protocol-summary.md +++ b/docs/pt2-protocol-summary.md @@ -239,7 +239,7 @@ confirmed Sony definition. | `07 80 E8 40 30 45` | context-sensitive `A0` path in some runs | medium | variant readable/query family, likely selector- or timing-sensitive | | `07 80 FA 50 26 51` | host-shaped mirror of `07 80 E8 40 30 45`, seen once | low-medium | new structured response family on the `E8` branch; follow-up echo did not advance state | | `07 C0 7A 50 A6 11` | exact echo of `07 80 E8 40 30 45`, seen once | low | new structured response family on the `E8` branch; not yet repeated | -| `07 80 7A 50 26 D1` | host-shaped `E8` branch in HE8/HE9 group 1 | medium | reproducible sibling response family in the `E8` / `FA` / `7A` branch | +| `07 80 7A 50 26 D1` | host-shaped `E8` branch, reproduced across HE8-HE11 group 1 | medium-high | reproducible downstream response family in the `E8` / `FA` / `7A` branch | Current caution: @@ -257,6 +257,9 @@ Current caution: clean second-stage response; both follow-up tests instead repeated the `07 80 7A 50 26 D1` branch after the host-shaped `E8` step and then went back to heartbeat. +- Directly echoing or host-mirroring `07 80 7A 50 26 D1` also did not advance + the exchange; the active trigger still appears to be the host-shaped + `00 00 E8 40 30 C2` step. ## What We Know