run 19
This commit is contained in:
Aiden
@@ -4751,3 +4751,187 @@ Best next move:
|
||||
- especially around `2.00 s`, `2.25 s`, `2.50 s`, and `2.75 s`
|
||||
- because the difference between the earlier `CI6` late hit and these no-hit
|
||||
decoupling runs is now most likely timing, framing shape, or both
|
||||
|
||||
## Heartbeat-Family Echo Probes
|
||||
|
||||
Goal:
|
||||
|
||||
- Test whether the newer heartbeat-induced response families behave more like
|
||||
camera-state blocks that the host is expected to mirror or acknowledge.
|
||||
- Compare exact echo versus host-shaped mirror for the same apparent payload.
|
||||
|
||||
Best current echo candidates:
|
||||
|
||||
- heartbeat-induced:
|
||||
- `07 80 40 40 30 ED`
|
||||
- `07 80 40 60 30 CD`
|
||||
- `07 80 C0 40 30 6D`
|
||||
- explicit `00 -> 40` family:
|
||||
- `07 80 50 40 30 FD`
|
||||
- context-sensitive `A0` variant:
|
||||
- `07 80 E8 40 30 45`
|
||||
|
||||
Host-shaped mirrors:
|
||||
|
||||
- `00 00 40 40 30 6A`
|
||||
- `00 00 40 60 30 4A`
|
||||
- `00 00 C0 40 30 EA`
|
||||
- `00 00 50 40 30 7A`
|
||||
- `00 00 E8 40 30 C2`
|
||||
|
||||
### HE1: Exact Echo Of `07 80 40 40 30 ED`
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --frame "07 80 40 40 30 ED" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 3 --frame-interval 0.10 --read-after-frame 0.25 --read-after-group 0.5 --log captures/rcp-heartbeat-echo-exact-404030ed.txt
|
||||
```
|
||||
|
||||
### HE2: Host-Shaped Mirror Of `07 80 40 40 30 ED`
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --frame "00 00 40 40 30 6A" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 3 --frame-interval 0.10 --read-after-frame 0.25 --read-after-group 0.5 --log captures/rcp-heartbeat-echo-host-404030.txt
|
||||
```
|
||||
|
||||
### HE3: Exact Echo Of `07 80 C0 40 30 6D`
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --frame "07 80 C0 40 30 6D" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 3 --frame-interval 0.10 --read-after-frame 0.25 --read-after-group 0.5 --log captures/rcp-heartbeat-echo-exact-c040306d.txt
|
||||
```
|
||||
|
||||
### HE4: Host-Shaped Mirror Of `07 80 C0 40 30 6D`
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --frame "00 00 C0 40 30 EA" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 3 --frame-interval 0.10 --read-after-frame 0.25 --read-after-group 0.5 --log captures/rcp-heartbeat-echo-host-c04030.txt
|
||||
```
|
||||
|
||||
### HE5: Exact Echo Of Explicit `00 -> 40` Response
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 40 00 80 9A" --frame "07 80 50 40 30 FD" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.6 --log captures/rcp-heartbeat-echo-exact-504030fd.txt
|
||||
```
|
||||
|
||||
### HE6: Host-Shaped Mirror Of Explicit `00 -> 40` Response
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 40 00 80 9A" --frame "00 00 50 40 30 7A" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.6 --log captures/rcp-heartbeat-echo-host-504030.txt
|
||||
```
|
||||
|
||||
### HE7: Echo The `A0` Variant From DL1
|
||||
|
||||
```powershell
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "07 80 E8 40 30 45" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.6 --log captures/rcp-heartbeat-echo-exact-e8403045.txt
|
||||
python scripts/serial_sequence_probe.py --port COM5 --prompt --frame "00 00 A0 00 80 7A" --frame "00 00 E8 40 30 C2" --frame "00 00 00 00 80 DA" --frame "00 00 00 00 80 DA" --repeat 2 --frame-interval 0.20 --read-after-frame 0.30 --read-after-group 0.6 --log captures/rcp-heartbeat-echo-host-e84030.txt
|
||||
```
|
||||
|
||||
What would count as a hit:
|
||||
|
||||
- any new non-heartbeat RCP frame after the echo/mirror
|
||||
- the panel leaving or changing behavior around `CONNECT NOT ACT`
|
||||
- a previously one-shot query family becoming readable again
|
||||
- the echo path producing a repeatable family-specific response
|
||||
|
||||
Recommended order:
|
||||
|
||||
1. `HE2`
|
||||
2. `HE4`
|
||||
3. `HE1`
|
||||
4. `HE3`
|
||||
5. `HE6`
|
||||
6. `HE7`
|
||||
|
||||
### 2026-05-13 Heartbeat-Family Echo Result
|
||||
|
||||
Captures:
|
||||
|
||||
- `captures/rcp-heartbeat-echo-host-404030.txt`
|
||||
- `captures/rcp-heartbeat-echo-host-c04030.txt`
|
||||
- `captures/rcp-heartbeat-echo-exact-404030ed.txt`
|
||||
- `captures/rcp-heartbeat-echo-exact-c040306d.txt`
|
||||
- `captures/rcp-heartbeat-echo-host-504030.txt`
|
||||
- `captures/rcp-heartbeat-echo-exact-504030fd.txt`
|
||||
- `captures/rcp-heartbeat-echo-exact-e8403045.txt`
|
||||
- `captures/rcp-heartbeat-echo-host-e84030.txt`
|
||||
|
||||
#### HE1 / HE2 / HE3 / HE4: Echoing The Heartbeat-Induced `0x40` / `0xC0` Families
|
||||
|
||||
Observed result:
|
||||
|
||||
- `07 80 40 40 30 ED` exact echo: no new structured response after the echo.
|
||||
- `00 00 40 40 30 6A` host-shaped mirror: no new structured response after the
|
||||
mirror.
|
||||
- `07 80 C0 40 30 6D` exact echo: no new structured response after the echo.
|
||||
- `00 00 C0 40 30 EA` host-shaped mirror: no new structured response after the
|
||||
mirror.
|
||||
|
||||
Read:
|
||||
|
||||
- The heartbeat-induced `0x40` / `0xC0` families do not currently look like
|
||||
payloads the panel expects to receive back as an echo or mirror.
|
||||
- They behave more like one-way readable/context responses than a bidirectional
|
||||
acknowledge-and-continue exchange.
|
||||
|
||||
#### HE5 / HE6: Echoing The Explicit `00 -> 40` Response Family
|
||||
|
||||
Observed result:
|
||||
|
||||
- `00 -> 40` again produced the known readable block `07 80 50 40 30 FD`.
|
||||
- Exact echo of that block, `07 80 50 40 30 FD`, produced no new structured
|
||||
response.
|
||||
- Host-shaped mirror, `00 00 50 40 30 7A`, also produced no new structured
|
||||
response.
|
||||
- In the host-shaped mirror run, a later plain heartbeat again provoked the
|
||||
transient `07 80 40 40 30 ED` family rather than any direct reply to the
|
||||
mirror.
|
||||
|
||||
Read:
|
||||
|
||||
- The explicit `00 -> 40` family also does not behave like something the panel
|
||||
wants echoed back in either exact or host-shaped form.
|
||||
- The reappearance of `07 80 40 40 30 ED` after the mirror reinforces that the
|
||||
heartbeat/context state machine is still active in the background and can
|
||||
dominate what happens next.
|
||||
|
||||
#### HE7: Echoing The `A0` Variant From DL1
|
||||
|
||||
Observed result:
|
||||
|
||||
Two distinct outcomes appeared here:
|
||||
|
||||
- Exact echo path:
|
||||
- `00 -> A0` did not log its usual readable block in the immediate window
|
||||
- sending exact `07 80 E8 40 30 45` produced a new unexpected response:
|
||||
`07 C0 7A 50 A6 11`
|
||||
- Host-shaped mirror path:
|
||||
- `00 00 E8 40 30 C2` produced another new structured response:
|
||||
`07 80 FA 50 26 51`
|
||||
|
||||
Read:
|
||||
|
||||
- This is the first heartbeat-family echo probe set that produced genuinely new
|
||||
structured responses rather than just heartbeat.
|
||||
- The `E8`/`FA` area now looks much more interesting than the `40`/`C0` exact
|
||||
echo families.
|
||||
- We do not yet know whether:
|
||||
- `07 C0 7A 50 A6 11` is a valid stable family or a context-fragmented reply
|
||||
- `07 80 FA 50 26 51` is a proper readable page, an error/status block, or a
|
||||
transformed reply to the `E8`-family mirror
|
||||
- But these are strong enough to treat as new leads rather than noise.
|
||||
|
||||
Overall interpretation:
|
||||
|
||||
- Most heartbeat-family responses do **not** behave like simple values the host
|
||||
should echo back.
|
||||
- The exception is the `A0`-variant / `E8` area, where echoing or host-mirroring
|
||||
produced fresh structured responses.
|
||||
- So the most promising echo branch is no longer generic `40`/`C0` heartbeat
|
||||
mirroring, but focused follow-up around:
|
||||
- `07 80 E8 40 30 45`
|
||||
- `07 80 FA 50 26 51`
|
||||
- `07 C0 7A 50 A6 11`
|
||||
|
||||
Next branch worth testing:
|
||||
|
||||
- reproduce the `E8`-mirror path cleanly and see whether `FA` and `7A` are
|
||||
stable
|
||||
- try host-shaped and exact echoes of `07 80 FA 50 26 51`
|
||||
- probe whether `FA` / `7A` correspond to nearby explicit host queries such as
|
||||
`00 -> FA` or `00 -> 7A`
|
||||
|
||||
@@ -188,6 +188,37 @@ What does not work:
|
||||
- The CALL path is real and useful for probing, but is not currently the
|
||||
activation handshake.
|
||||
|
||||
## Heartbeat / Cadence Behavior
|
||||
|
||||
Plain host heartbeat traffic has turned out to matter, but not in the simple
|
||||
"session OK" way we first hoped.
|
||||
|
||||
Confirmed behavior:
|
||||
|
||||
- Repeating `00 00 00 00 80 DA` can keep the panel out of `CONNECT NOT ACT`
|
||||
while the traffic continues.
|
||||
- When that traffic stops, the panel typically falls into `CONNECT NOT ACT`
|
||||
after a short timeout.
|
||||
- Once the panel is already in `CONNECT NOT ACT`, resuming heartbeat alone does
|
||||
not immediately make it active again.
|
||||
- Keeping heartbeat running does not by itself make one-shot reads like
|
||||
`00 -> A0` or `00 -> B0` reusable.
|
||||
|
||||
Heartbeat-only or heartbeat-heavy runs can also provoke transient structured
|
||||
responses:
|
||||
|
||||
- `07 80 40 40 30 ED`
|
||||
- `07 80 40 60 30 CD`
|
||||
- `07 80 C0 40 30 6D`
|
||||
|
||||
Best current interpretation:
|
||||
|
||||
- Some host traffic satisfies a "host present" or link-alive condition.
|
||||
- That is still separate from whatever camera/session information makes the
|
||||
panel truly active.
|
||||
- The `0x40` / `0xC0` heartbeat-family responses look cadence- or
|
||||
context-sensitive rather than like a generic `ACK`.
|
||||
|
||||
## Known Response Families
|
||||
|
||||
These are the response frames that are stable enough to treat as known working
|
||||
@@ -201,9 +232,13 @@ confirmed Sony definition.
|
||||
| `07 80 6D 20 D8 48` | `00 -> B5` | high | readable discovery/status block |
|
||||
| `07 80 45 20 D0 68` | synthetic CALL high/low pair | high | CALL event-path response |
|
||||
| `07 80 45 30 D0 78` | CALL timing test, seen once | low | sibling CALL-response-family frame |
|
||||
| `07 80 50 40 30 FD` | `00 -> 40` | medium-high | explicit readable/query family outside the main B/A/C map |
|
||||
| `07 80 40 40 30 ED` | some heartbeat-only cadence runs | medium | transient heartbeat/context response family |
|
||||
| `07 80 40 60 30 CD` | some heartbeat-only cadence runs | low-medium | transient heartbeat/context response family |
|
||||
| `07 80 C0 40 30 6D` | some heartbeat-only cadence runs | medium | transient heartbeat/context response family |
|
||||
| `07 80 E8 40 30 45` | context-sensitive `A0` path in some runs | medium | variant readable/query family, likely selector- or timing-sensitive |
|
||||
| `07 80 FA 50 26 51` | host-shaped mirror of `07 80 E8 40 30 45` | low-medium | new structured response family worth focused follow-up |
|
||||
| `07 C0 7A 50 A6 11` | exact echo of `07 80 E8 40 30 45` | low | new structured response family worth focused follow-up |
|
||||
|
||||
Current caution:
|
||||
|
||||
@@ -213,6 +248,10 @@ Current caution:
|
||||
acknowledgements.
|
||||
- The `45` family behaves like an event response, not a generic accept.
|
||||
- The `40` / `C0` family currently looks state- or cadence-sensitive.
|
||||
- Exact and host-shaped echoes of the `40` / `C0` / `50` heartbeat-adjacent
|
||||
families did not advance the session.
|
||||
- The first echo experiments that produced genuinely new structured output were
|
||||
on the `E8` branch, not the `40` / `C0` branch.
|
||||
|
||||
## What We Know
|
||||
|
||||
@@ -231,6 +270,12 @@ Current caution:
|
||||
physical button.
|
||||
- The panel can remain visibly at `CONNECT NOT ACT` while still responding in
|
||||
protocol-specific ways.
|
||||
- Heartbeat maintenance can hold the panel out of `CONNECT NOT ACT`, but that
|
||||
still does not create a fully active session.
|
||||
- The heartbeat-induced `0x40` / `0xC0` families are real, but they usually act
|
||||
more like transient state/context responses than like camera-data streaming.
|
||||
- The most promising new echo-derived lead is now the `E8` / `FA` / `7A`
|
||||
response branch.
|
||||
|
||||
## What We Do Not Know
|
||||
|
||||
|
||||
Reference in New Issue
Block a user