Adom Custom Electronic Load

@@ -1,6 +1,6 @@ Memory region         Used Size  Region Size  %age Used-             RAM:       23968 B       144 KB     16.25%-           FLASH:       64688 B       256 KB     24.68%+             RAM:       24072 B       144 KB     16.32%+           FLASH:       68196 B       256 KB     26.01%    text	   data	    bss	    dec	    hex	filename-  62936	   1752	  22216	  86904	  15378	/home/adom/project/adom-custom-electronic-load/build/stm32-bringup/adom-load-bringup.elf+  66440	   1752	  22320	  90512	  16190	/home/adom/project/adom-custom-electronic-load/build/stm32-bringup/adom-load-bringup.elf COMPILED ONLY: output permanently locked OFF; no flash or hardware validation performed.

@@ -0,0 +1,11 @@+STM32 adapter fake-HAL: pins, endian/address encoding, zero-only DAC, age and sticky faults passed.+load_core: safety policy tests passed (host C build; no MCU/HAL validation)+fan_tach: qualification, RPM, stale input, noise, slow fan, timer wrap and stale-history expiry passed+load_protocol: host safety/framing tests passed; no MCU or USB validation+Measurement cache: conversion age, WAIT expiry, fault latch and clock wrap passed.+Instrument register, readback, signed conversion and transaction-failure tests passed.+.........................+----------------------------------------------------------------------+Ran 25 tests in 0.049s++OK

@@ -25,7 +25,7 @@ Sunon MF40200V1-1000U-G99 version 0.2.3 is published in source and registry: fac  ## Firmware continuation -Fresh latch acknowledgement, instrument readback/fault injection, and null-sensor diagnostic host connections are implemented and host-tested (25 Python tests plus C suites). MCU output stays locked; no flash occurred. Continue with bounded I2C/ADC adaptation and hardware-independent integration tests. Do not mistake these checks for physical qualification or use them to close thermal/finish gates. The reviewed fan-stall replay brings the raw inventory to 62.+Fresh latch acknowledgement, instrument readback/fault injection, and null-sensor diagnostic host connections are implemented and host-tested (25 Python tests plus C suites). MCU output stays locked; no flash occurred. Diagnostic I2C integration, conversion-age cache and fake-HAL tests now pass; continue with ADC/temperature adaptation and physical timing tests. Do not mistake these checks for physical qualification or use them to close thermal/finish gates. The reviewed fan-stall replay brings the raw inventory to 63 (the latest static fastener-page take is excluded from the action edit).  ## Browser recovery and fastener review 

@@ -19,3 +19,7 @@ Boyd recommends 0.452 N·m for the -7 washer, below the transistor's 1.13 N·m m Next: choose a toleranced sleeve/fastener or insulated clamp that fits the exact tab, preserve the existing PCB drill, then check the assembled screw/head/nut and tooling volumes in CAD. No washer is added to the released BOM by this screen.  [Reproducible dimensional screen](mechanical/cooling-fastener-screen.json). Run `python3 tools/screen_cooling_fasteners.py`.++## Short-sleeve centering sensitivity++A rigid 2D cylinder model gives 0.176 mm remaining nominal radial clearance at the far side of a 1.40 mm tab with a 2.8448 mm screw, the 0.81 mm sleeve and nominal catalog diameters. Smaller illustrative screw diameters of 2.75 and 2.60 mm reduce this to 0.129 and 0.066 mm. Thus full-depth coverage is not inherently necessary, and this washer remains a candidate. These are sensitivity calculations, not tolerance limits: real thread roots, discontinuous crests, eccentricity, deformation and molding variation are absent. Do not use the result as insulation qualification. [Model and assumptions](mechanical/short-sleeve-sensitivity.json), reproduced with `python3 tools/check_short_sleeve.py`.

@@ -42,8 +42,10 @@ Request sequence numbers remain monotonic across all owners during one device bo  ## Instrument readback and bring-up monitoring — 9 October -The driver checks DAC gain, configuration, synchronization, command-register readback and reference status. INA226 initialization verifies configuration and calibration readback. Paired shunt/bus measurements now use triggered conversions: `load_ina_poll` distinguishes WAIT, READY and ERROR; only READY replaces outputs and starts the next conversion. WAIT must not refresh sample age. ERROR requires immediate output disable and reinitialization by the future adapter. This API is not yet connected to the MCU I2C peripheral.+The driver checks DAC gain, configuration, synchronization, command-register readback and reference status. INA226 initialization verifies configuration and calibration readback. Paired shunt/bus measurements now use triggered conversions: `load_ina_poll` distinguishes WAIT, READY and ERROR; only READY replaces outputs and starts the next conversion. WAIT must not refresh sample age. ERROR requires immediate output disable and reinitialization by the future adapter. This API is connected to I2C1 in the permanently output-locked diagnostic image; hardware operation is unverified.  The register model tests inject failure at every transaction in initialization, DAC writes and measurement reads. They also cover acknowledged-but-ignored setup/command writes, wrong IDs, reference fault, configuration reset, signed current, overflow and invalid arguments. These are host tests; they do not verify physical I2C timing or analog accuracy. Register definitions follow [TI DAC60501 Rev E](https://www.ti.com/lit/ds/symlink/dac60501.pdf) and [TI INA226 Rev C](https://www.ti.com/lit/ds/symlink/ina226.pdf).  Replies now include mandatory Boolean `sensors_valid` and `assembly_qualified`. Missing sensors may use null only when validity is false. The host accepts such a diagnostic connection only with OFF/FAULT, enable false, DAC zero and applied current zero. It preserves unavailable readings as null, does not calculate power, and refuses ARM in both server and UI. Valid telemetry still requires the existing 50 ms freshness bound. These fields are required by this draft protocol revision; update host and firmware together. A compiled C peer with missing sensors verifies the actual Python transport connection and rejected ARM.++The diagnostic I2C adapter and conservative measurement cache are compiled and host-tested together using a fake HAL. Current is available only from fresh successful conversions; post-diode voltage is not mislabeled as DUT voltage. The MCU still requires ADC/temperature integration and physical timing validation. See the STM32 README for configured timeout limits, including the HAL internal BUSY wait.

@@ -0,0 +1,23 @@+#include "measurement_cache.h"+#include <math.h>+#include <stddef.h>+void load_measurement_begin(load_measurement_cache *c,uint32_t now,bool ok){+ *c=(load_measurement_cache){.healthy=ok,.trigger_ms=now};+}+load_ina_result load_measurement_poll(load_measurement_cache *c,const load_i2c *b,uint32_t now){+ if(!c->healthy)return LOAD_INA_ERROR;+ if(c->have_sample&&(uint32_t)(now-c->sample_ms)>50)c->have_sample=false;+ float v,a;+ load_ina_result r=load_ina_poll(b,&v,&a);+ if(r==LOAD_INA_ERROR){c->healthy=false;c->have_sample=false;return r;}+ if(r==LOAD_INA_READY){+  c->sample_ms=c->trigger_ms;c->trigger_ms=now;+  c->load_terminal_v=v;c->amps=a;c->have_sample=isfinite(v)&&isfinite(a);+  if(!c->have_sample){c->healthy=false;return LOAD_INA_ERROR;}+ }+ return r;+}+bool load_measurement_get(const load_measurement_cache *c,uint32_t now,float *v,float *a,uint32_t *stamp){+ if(!c||!v||!a||!stamp||v==a||!c->healthy||!c->have_sample||(uint32_t)(now-c->sample_ms)>50)return false;+ *v=c->load_terminal_v;*a=c->amps;*stamp=c->sample_ms;return true;+}

@@ -0,0 +1,15 @@+#ifndef LOAD_MEASUREMENT_CACHE_H+#define LOAD_MEASUREMENT_CACHE_H+#include "instruments.h"+typedef struct {+ bool healthy, have_sample;+ uint32_t trigger_ms, sample_ms;+ float load_terminal_v, amps;+} load_measurement_cache;+/* Caller initializes the devices with output OFF, then starts this cache with+ * a timestamp captured BEFORE initialization. All bus callbacks must be bounded. */+void load_measurement_begin(load_measurement_cache *,uint32_t before_init_ms,bool init_ok);+load_ina_result load_measurement_poll(load_measurement_cache *,const load_i2c *,uint32_t before_poll_ms);+/* Timestamp is the beginning of the averaging interval, never the read time. */+bool load_measurement_get(const load_measurement_cache *,uint32_t now_ms,float *,float *,uint32_t *);+#endif

@@ -4,7 +4,7 @@ This adapter compiles for the routed LQFP32 GP package. **Output is permanently  The adapter sets PA5 (MCU_ENABLE), PA4 (ARM_CLK), and PA6 (WDI) low before clock setup. PB3 (FAULT_CLEAR) is open drain and held low. It does not import the Nucleo LED code, because that example toggles our enable pin. Hard-fault and fatal initialization paths deassert enable. USB disconnect/suspend/DTR loss drops protocol ownership. USB attachment follows PB0 VBUS detection. The image never releases the hardware latch or writes a nonzero DAC command. -Voltage, current and temperature telemetry remain unavailable (`null`, invalid sensors), and assembly qualification is false. Fan RPM is supplied by the PA7/TIM2 input once its pulse history qualifies. The portable protocol and ownership/replay checks run over CDC, with bounded input work and bounded reply buffering. This proves a linkable implementation, not boot timing, interrupt latency, USB compliance, or operation of the board's interlocks. Reset-time pulldowns and physical faults still require bench verification.+DUT voltage and case temperature remain unavailable (`null`, invalid sensors), and assembly qualification is false. Current can be reported only after a successful INA conversion and while its conservative age is at most 50 ms. Fan RPM is supplied by the PA7/TIM2 input once its pulse history qualifies. The portable protocol and ownership/replay checks run over CDC, with bounded input work and bounded reply buffering. This proves a linkable implementation, not boot timing, interrupt latency, USB compliance, or operation of the board's interlocks. Reset-time pulldowns and physical faults still require bench verification.  ## Reproduce @@ -27,7 +27,7 @@ The explicitly supplied lab boot ID is **not fresh across resets**. Production f  ## Remaining adapter work -ADC calibration and temperature conversion; INA226/DAC60501 I2C integration and readback; physical tach timing and ISR-latency verification; physical watchdog/latch handshake; reset/brownout and auxiliary/USB power sequencing; production boot identity; integration of qualified assembly configuration; fault injection and USB reconnect tests on the actual PCB. Only then can a separately reviewed functional adapter enable the load.+ADC calibration and temperature conversion; physical INA226/DAC60501 I2C validation and timing; physical tach timing and ISR-latency verification; physical watchdog/latch handshake; reset/brownout and auxiliary/USB power sequencing; production boot identity; integration of qualified assembly configuration; fault injection and USB reconnect tests on the actual PCB. Only then can a separately reviewed functional adapter enable the load.  ## Fan tachometer bring-up @@ -49,4 +49,15 @@ The portable core refuses ARM if the sampled hardware latch is already high. A n  ## Host bring-up monitoring -The control panel can retain a confirmed-OFF connection while voltage/current/temperature are unavailable. Firmware replies explicitly report sensor and assembly qualification; the host keeps unknown readings blank and Enable load disabled. Host-to-compiled-C interoperability covers this path. It does not establish USB enumeration on this board. The register driver is tested separately and is not yet linked to the I2C peripheral.+The control panel can retain a confirmed-OFF connection while voltage/current/temperature are unavailable. Firmware replies explicitly report sensor and assembly qualification; the host keeps unknown readings blank and Enable load disabled. Host-to-compiled-C interoperability covers this path. It does not establish USB enumeration on this board. The register driver is now linked to I2C1 through an output-locked diagnostic adapter. Host fake-HAL tests exercise that adapter; physical bus operation remains unverified.+++## I2C diagnostic acquisition++PB6/PB7 (GP package pins 30/31) use AF6 I2C1 with external pull-ups, matching [ST's pin table](https://www.st.com/resource/en/datasheet/stm32g0b1kc.pdf). A dedicated HSI16 peripheral clock and TIMINGR `0x30444f4f` target no more than about 25 kHz before edge/filter effects. This is an initial timing configuration, not verified I2C compliance. Check rise/fall time, capacitance, analog filtering and the actual clock on hardware.++The adapter performs register ID/config/readback checks at startup and permits only zero writes to the DAC data register. It samples the INA periodically; failure is sticky until reset. Main-loop output disable remains unconditional. Transfer timeout arguments are 5 ms, but the pinned ST HAL also has an internal 25 ms BUSY wait. A pre-check rejects an already busy bus. This does not establish a 5 ms overall deadline or measured worst-case execution time; production enabling requires a separately verified nonblocking/bounded control schedule.++The cache timestamps readings from before the averaging interval began, not when they were read. WAIT cannot refresh their age; errors invalidate the cache. Polling and reading expire values older than 50 ms, with unsigned timer-wrap handling. INA voltage is after the protection diode and is deliberately not sent as DUT voltage. The future PA1 ADC adapter must supply the DUT measurement, and PA0 must supply calibrated case temperature before sensors can be valid.++Fake-HAL tests execute the real adapter, register driver and cache together: GPIO mapping, shifted bus addresses, byte order, timeout arguments, zero-only DAC, invalid startup, stale samples and sticky faults. They do not prove electrical timing, boot behavior or analog accuracy. Current image: 68,196 bytes flash; 24,072 bytes RAM including reservations. No device was flashed.

@@ -0,0 +1,62 @@+/* Diagnostic acquisition only; never writes a nonzero DAC or enables the load.+ * PB6/PB7, pins 30/31 of STM32G0B1KCT6 GP, AF6 I2C1.+ * HAL transfer timeout is 5 ms; upstream BUSY wait can take 25 ms.+ * These are configured timeouts, not measured WCET or a production control loop.+ */+#include "stm32g0xx_hal.h"+#include "instrument_input.h"+#include "measurement_cache.h"+#if !defined(ADOM_BRINGUP_OUTPUT_LOCK) || ADOM_BRINGUP_OUTPUT_LOCK != 1+#error Diagnostic I2C adapter requires permanent output lock+#endif+static I2C_HandleTypeDef bus;+static load_measurement_cache cache;+static uint32_t last_poll;+static bool write16(uint8_t addr,uint8_t reg,uint16_t value){+ if(addr==0x48&&reg==8&&value!=0)return false; /* local zero-only defense */+ uint8_t bytes[2]={(uint8_t)(value>>8),(uint8_t)value};+ if(__HAL_I2C_GET_FLAG(&bus,I2C_FLAG_BUSY))return false;+ return HAL_I2C_Mem_Write(&bus,(uint16_t)addr<<1,reg,I2C_MEMADD_SIZE_8BIT,bytes,2,5)==HAL_OK;+}+static bool read16(uint8_t addr,uint8_t reg,uint16_t *value){+ uint8_t bytes[2];+ if(__HAL_I2C_GET_FLAG(&bus,I2C_FLAG_BUSY))return false;+ if(HAL_I2C_Mem_Read(&bus,(uint16_t)addr<<1,reg,I2C_MEMADD_SIZE_8BIT,bytes,2,5)!=HAL_OK)return false;+ *value=((uint16_t)bytes[0]<<8)|bytes[1];return true;+}+static const load_i2c io={write16,read16,HAL_Delay};+bool load_instrument_input_init(void){+ uint32_t start=HAL_GetTick();+ load_measurement_begin(&cache,start,false);+ RCC_PeriphCLKInitTypeDef clock={0};+ clock.PeriphClockSelection=RCC_PERIPHCLK_I2C1;+ clock.I2c1ClockSelection=RCC_I2C1CLKSOURCE_HSI;+ if(HAL_RCCEx_PeriphCLKConfig(&clock)!=HAL_OK)return false;+ __HAL_RCC_GPIOB_CLK_ENABLE();__HAL_RCC_I2C1_CLK_ENABLE();+ GPIO_InitTypeDef pins={0};pins.Pin=GPIO_PIN_6|GPIO_PIN_7;+ pins.Mode=GPIO_MODE_AF_OD;pins.Pull=GPIO_NOPULL;+ pins.Speed=GPIO_SPEED_FREQ_LOW;pins.Alternate=GPIO_AF6_I2C1;+ HAL_GPIO_Init(GPIOB,&pins); /* external pullups; never push-pull */+ bus.Instance=I2C1;+ /* HSI16: prescaler /4, SCLL/H 80 ticks each -> <=25 kHz.+    SCLDEL 5 ticks, SDADEL 4 ticks. Rise/fall and filter timing need bench checks. */+ bus.Init.Timing=0x30444f4f;+ bus.Init.AddressingMode=I2C_ADDRESSINGMODE_7BIT;+ bus.Init.DualAddressMode=I2C_DUALADDRESS_DISABLE;+ bus.Init.GeneralCallMode=I2C_GENERALCALL_DISABLE;+ bus.Init.NoStretchMode=I2C_NOSTRETCH_DISABLE;+ if(HAL_I2C_Init(&bus)!=HAL_OK||HAL_I2CEx_ConfigAnalogFilter(&bus,I2C_ANALOGFILTER_ENABLE)!=HAL_OK||+    HAL_I2CEx_ConfigDigitalFilter(&bus,0)!=HAL_OK)return false;+ start=HAL_GetTick();+ bool ok=load_instruments_init(&io);+ load_measurement_begin(&cache,start,ok);last_poll=HAL_GetTick();return ok;+}+void load_instrument_input_poll(void){+ uint32_t now=HAL_GetTick();if((uint32_t)(now-last_poll)<5)return;+ last_poll=now;(void)load_measurement_poll(&cache,&io,now);+}+bool load_instrument_input_current(float *amps,uint32_t *sample_ms){+ float post_diode_v;+ return load_measurement_get(&cache,HAL_GetTick(),&post_diode_v,amps,sample_ms);+ /* Post-diode INA voltage is deliberately NOT published as DUT voltage. */+}

@@ -0,0 +1,9 @@+#ifndef LOAD_INSTRUMENT_INPUT_H+#define LOAD_INSTRUMENT_INPUT_H+#include <stdbool.h>+#include <stdint.h>+/* Output-locked bring-up only. Failure is sticky until reset. */+bool load_instrument_input_init(void);+void load_instrument_input_poll(void);+bool load_instrument_input_current(float *amps,uint32_t *sample_ms);+#endif

@@ -4,6 +4,7 @@ #include "tusb.h" #include "load_protocol.h" #include "fan_input.h"+#include "instrument_input.h" #include <stdio.h> #include <math.h> #if !defined(ADOM_BRINGUP_OUTPUT_LOCK) || ADOM_BRINGUP_OUTPUT_LOCK != 1@@ -62,6 +63,7 @@ int main(void) {   safe_gpio_init(); /* do not wait for oscillator or USB setup to deassert enable */   if (HAL_Init() != HAL_OK || !load_clock_init()) load_fatal();   if (!load_fan_input_init()) load_fatal();+  (void)load_instrument_input_init(); /* stay diagnostic/OFF if devices absent */   __HAL_RCC_SYSCFG_CLK_ENABLE(); __HAL_RCC_PWR_CLK_ENABLE();   GPIO_InitTypeDef gpio = {0};   gpio.Pin = GPIO_PIN_11 | GPIO_PIN_12;@@ -85,12 +87,14 @@ int main(void) {       if (vbus) tud_connect(); else { tud_disconnect(); disconnect(); }     }     tud_task();+    load_instrument_input_poll();     bool online = vbus && tud_cdc_connected();     if (!online && connected) disconnect();     connected = online;     load_sample sample = {.now_ms = HAL_GetTick(), .volts = NAN, .amps = NAN,       .case_c = NAN, .fan_rpm = NAN, .assembly_qualified = false,       .sensors_valid = false, .hw_ok = false, .latch_q = false};+    (void)load_instrument_input_current(&sample.amps,&sample.sample_ms);     sample.fan_rpm_valid=load_fan_input_read(&sample.fan_rpm,&sample.last_tach_ms);     sample.now_ms=HAL_GetTick();     load_protocol_poll(&protocol, &sample);

@@ -0,0 +1,35 @@+{+  "status": "nominal-centering-sensitivity-only",+  "acceptance": false,+  "washer": "7721-7PPSG",+  "assumptions": {+    "tabMaxMm": 1.4,+    "stemLengthMm": 0.81,+    "boreMm": 2.95,+    "stemODMm": 3.43,+    "screwDiameters": "2.8448 mm is nominal #4 diameter; smaller values are sensitivity inputs, not sourced thread tolerances"+  },+  "model": "Rigid straight cylindrical screw in a straight concentric sleeve; sleeve translates to tab-hole wall; full angular fit includes screw diameter / cos(theta).",+  "rows": [+    {+      "screwDiameterMm": 2.8448,+      "maximumTiltDegrees": 6.223737950440215,+      "remainingRadialMarginMm": 0.17565815293782633+    },+    {+      "screwDiameterMm": 2.75,+      "maximumTiltDegrees": 10.62817441998488,+      "remainingRadialMarginMm": 0.12928418797722285+    },+    {+      "screwDiameterMm": 2.6,+      "maximumTiltDegrees": 16.445511453185023,+      "remainingRadialMarginMm": 0.06584419059654684+    }+  ],+  "limitations": [+    "Thread roots and discontinuous crests are not a solid cylinder",+    "No washer tolerances, deformation, wear, molding flash or eccentricity",+    "No flange/tool access, pad insulation, pressure or torque verification"+  ]+}

@@ -0,0 +1,41 @@+#ifndef LOAD_TEST_HAL_H+#define LOAD_TEST_HAL_H+#include <stdint.h>+typedef int HAL_StatusTypeDef;+#define HAL_OK 0+#define HAL_ERROR 1+typedef struct {uint32_t Timing,AddressingMode,DualAddressMode,GeneralCallMode,NoStretchMode;} TestI2CInit;+typedef struct {void *Instance;TestI2CInit Init;} I2C_HandleTypeDef;+typedef struct {uint32_t PeriphClockSelection,I2c1ClockSelection;} RCC_PeriphCLKInitTypeDef;+typedef struct {uint32_t Pin,Mode,Pull,Speed,Alternate;} GPIO_InitTypeDef;+#define I2C1 ((void *)1)+#define GPIOB ((void *)2)+#define I2C_FLAG_BUSY 1+#define RCC_PERIPHCLK_I2C1 1+#define RCC_I2C1CLKSOURCE_HSI 2+#define GPIO_PIN_6 64+#define GPIO_PIN_7 128+#define GPIO_MODE_AF_OD 1+#define GPIO_NOPULL 0+#define GPIO_SPEED_FREQ_LOW 0+#define GPIO_AF6_I2C1 6+#define I2C_ADDRESSINGMODE_7BIT 7+#define I2C_DUALADDRESS_DISABLE 0+#define I2C_GENERALCALL_DISABLE 0+#define I2C_NOSTRETCH_DISABLE 0+#define I2C_ANALOGFILTER_ENABLE 1+#define I2C_MEMADD_SIZE_8BIT 1+#define __HAL_RCC_GPIOB_CLK_ENABLE() ((void)0)+#define __HAL_RCC_I2C1_CLK_ENABLE() ((void)0)+extern int test_busy;+#define __HAL_I2C_GET_FLAG(bus,flag) (test_busy)+uint32_t HAL_GetTick(void);+void HAL_Delay(uint32_t);+HAL_StatusTypeDef HAL_RCCEx_PeriphCLKConfig(RCC_PeriphCLKInitTypeDef *);+void HAL_GPIO_Init(void *,GPIO_InitTypeDef *);+HAL_StatusTypeDef HAL_I2C_Init(I2C_HandleTypeDef *);+HAL_StatusTypeDef HAL_I2CEx_ConfigAnalogFilter(I2C_HandleTypeDef *,uint32_t);+HAL_StatusTypeDef HAL_I2CEx_ConfigDigitalFilter(I2C_HandleTypeDef *,uint32_t);+HAL_StatusTypeDef HAL_I2C_Mem_Write(I2C_HandleTypeDef *,uint16_t,uint16_t,uint16_t,uint8_t *,uint16_t,uint32_t);+HAL_StatusTypeDef HAL_I2C_Mem_Read(I2C_HandleTypeDef *,uint16_t,uint16_t,uint16_t,uint8_t *,uint16_t,uint32_t);+#endif

@@ -0,0 +1,45 @@+/* Fake HAL exercises the real adapter/driver/cache boundary, not physical I2C. */+#include "hal_stub/stm32g0xx_hal.h"+#include <assert.h>+#include <math.h>+#include <stdio.h>+#include <string.h>+#define ADOM_BRINGUP_OUTPUT_LOCK 1+#include "../firmware/stm32/instrument_input.c"+static uint32_t tick;+static uint16_t dac[256],ina[256];+static unsigned transactions;+static bool fail;+int test_busy;+uint32_t HAL_GetTick(void){return tick;}+void HAL_Delay(uint32_t n){tick+=n;}+HAL_StatusTypeDef HAL_RCCEx_PeriphCLKConfig(RCC_PeriphCLKInitTypeDef *c){assert(c->I2c1ClockSelection==RCC_I2C1CLKSOURCE_HSI);return HAL_OK;}+void HAL_GPIO_Init(void *port,GPIO_InitTypeDef *p){assert(port==GPIOB&&p->Pin==(GPIO_PIN_6|GPIO_PIN_7)&&p->Mode==GPIO_MODE_AF_OD&&p->Alternate==6&&p->Pull==GPIO_NOPULL);}+HAL_StatusTypeDef HAL_I2C_Init(I2C_HandleTypeDef *h){assert(h->Instance==I2C1&&h->Init.AddressingMode==7);return HAL_OK;}+HAL_StatusTypeDef HAL_I2CEx_ConfigAnalogFilter(I2C_HandleTypeDef *h,uint32_t n){(void)h;assert(n==1);return HAL_OK;}+HAL_StatusTypeDef HAL_I2CEx_ConfigDigitalFilter(I2C_HandleTypeDef *h,uint32_t n){(void)h;assert(n==0);return HAL_OK;}+static uint16_t *regs(uint16_t addr){assert(addr==0x90||addr==0x80);return addr==0x90?dac:ina;}+HAL_StatusTypeDef HAL_I2C_Mem_Write(I2C_HandleTypeDef *h,uint16_t addr,uint16_t reg,uint16_t size,uint8_t *p,uint16_t n,uint32_t timeout){+ (void)h;assert(size==1&&n==2&&timeout==5);transactions++;if(fail)return HAL_ERROR;+ regs(addr)[reg]=((uint16_t)p[0]<<8)|p[1];if(addr==0x80&&reg==0)ina[6]&=~8u;+ if(addr==0x90&&reg==8)assert(p[0]==0&&p[1]==0);+ return HAL_OK;+}+HAL_StatusTypeDef HAL_I2C_Mem_Read(I2C_HandleTypeDef *h,uint16_t addr,uint16_t reg,uint16_t size,uint8_t *p,uint16_t n,uint32_t timeout){+ (void)h;assert(size==1&&n==2&&timeout==5);transactions++;if(fail)return HAL_ERROR;+ uint16_t v=regs(addr)[reg];p[0]=v>>8;p[1]=v;if(addr==0x80&&reg==6)ina[6]&=~8u;return HAL_OK;+}+static void reset(void){tick=0;test_busy=0;fail=false;transactions=0;memset(dac,0,sizeof dac);memset(ina,0,sizeof ina);dac[1]=0x2115;ina[0xfe]=0x5449;ina[0xff]=0x2260;}+int main(void){+ reset();assert(load_instrument_input_init());assert(dac[4]==0x0101&&ina[0]==0x4523);+ unsigned before=transactions;assert(!write16(0x48,8,1)&&transactions==before);+ float a=-1;uint32_t stamp=99;assert(!load_instrument_input_current(&a,&stamp));+ ina[1]=8000;ina[2]=4000;ina[6]=8;tick=36;load_instrument_input_poll();+ assert(load_instrument_input_current(&a,&stamp)&&fabsf(a-1)<.00001f&&stamp==0);+ tick=51;load_instrument_input_poll();assert(!load_instrument_input_current(&a,&stamp));+ tick=72;ina[6]=8;load_instrument_input_poll();assert(load_instrument_input_current(&a,&stamp)&&stamp==36);+ fail=true;tick=77;load_instrument_input_poll();fail=false;tick=82;ina[6]=8;+ before=transactions;load_instrument_input_poll();assert(transactions==before&&!load_instrument_input_current(&a,&stamp));+ reset();test_busy=1;assert(!load_instrument_input_init()&&transactions==0);+ puts("STM32 adapter fake-HAL: pins, endian/address encoding, zero-only DAC, age and sticky faults passed.");+}

@@ -0,0 +1,36 @@+#include "../firmware/measurement_cache.h"+#include <assert.h>+#include <math.h>+#include <stdio.h>+static load_ina_result result;+static unsigned calls;+static float reading_v=5,reading_a=1;+load_ina_result load_ina_poll(const load_i2c *unused,float *v,float *a){+ (void)unused;calls++;if(result==LOAD_INA_READY){*v=reading_v;*a=reading_a;}return result;+}+int main(void){+ load_measurement_cache c;float v=-1,a=-1;uint32_t stamp=0;+ load_measurement_begin(&c,100,true);+ assert(!load_measurement_get(&c,100,&v,&a,&stamp));+ result=LOAD_INA_WAIT;assert(load_measurement_poll(&c,0,110)==LOAD_INA_WAIT);+ assert(!load_measurement_get(&c,110,&v,&a,&stamp));+ result=LOAD_INA_READY;assert(load_measurement_poll(&c,0,136)==LOAD_INA_READY);+ assert(load_measurement_get(&c,136,&v,&a,&stamp)&&stamp==100&&v==5&&a==1);+ result=LOAD_INA_WAIT;assert(load_measurement_poll(&c,0,149)==LOAD_INA_WAIT);+ assert(load_measurement_get(&c,150,&v,&a,&stamp)&&stamp==100);+ v=a=-1;assert(!load_measurement_get(&c,151,&v,&a,&stamp)&&v==-1&&a==-1);+ result=LOAD_INA_READY;assert(load_measurement_poll(&c,0,172)==LOAD_INA_READY);+ assert(load_measurement_get(&c,172,&v,&a,&stamp)&&stamp==136);+ result=LOAD_INA_ERROR;assert(load_measurement_poll(&c,0,173)==LOAD_INA_ERROR);+ unsigned n=calls;result=LOAD_INA_READY;+ assert(load_measurement_poll(&c,0,174)==LOAD_INA_ERROR&&calls==n);+ assert(!load_measurement_get(&c,174,&v,&a,&stamp));+ load_measurement_begin(&c,UINT32_MAX-20,true);+ assert(load_measurement_poll(&c,0,15)==LOAD_INA_READY);+ assert(load_measurement_get(&c,29,&v,&a,&stamp));+ assert(!load_measurement_get(&c,30,&v,&a,&stamp));+ load_measurement_begin(&c,200,false);assert(load_measurement_poll(&c,0,201)==LOAD_INA_ERROR);+ load_measurement_begin(&c,300,true);reading_v=NAN;+ assert(load_measurement_poll(&c,0,336)==LOAD_INA_ERROR);+ puts("Measurement cache: conversion age, WAIT expiry, fault latch and clock wrap passed.");+}

@@ -24,9 +24,9 @@ for name,path in paths.items(): cc=root/'usr/bin/arm-none-eabi-gcc'; prefix=root/'usr/bin/arm-none-eabi-' newlib=root/'usr/lib/arm-none-eabi/newlib/thumb/v6-m/nofp' h=paths['stm32g0xx_hal_driver']; c=paths['cmsis_device_g0']-sources=[P/'firmware'/s for s in ['load_core.c','load_protocol.c','fan_tach.c','stm32/fan_input.c','stm32/main.c','stm32/clock.c','stm32/usb_descriptors.c','stm32/syscalls.c']]+sources=[P/'firmware'/s for s in ['load_core.c','instruments.c','measurement_cache.c','stm32/instrument_input.c','load_protocol.c','fan_tach.c','stm32/fan_input.c','stm32/main.c','stm32/clock.c','stm32/usb_descriptors.c','stm32/syscalls.c']] sources += [t/'src'/s for s in ['tusb.c','common/tusb_fifo.c','device/usbd.c','class/cdc/cdc_device.c','portable/st/stm32_fsdev/dcd_stm32_fsdev.c','portable/st/stm32_fsdev/fsdev_common.c']]-sources += [h/'Src'/('stm32g0xx_hal'+s+'.c') for s in ['', '_cortex','_pwr','_pwr_ex','_rcc','_rcc_ex','_gpio']]+sources += [h/'Src'/('stm32g0xx_hal'+s+'.c') for s in ['', '_cortex','_pwr','_pwr_ex','_rcc','_rcc_ex','_gpio','_i2c','_i2c_ex','_dma']] sources += [c/'Source/Templates/system_stm32g0xx.c',c/'Source/Templates/gcc/startup_stm32g0b1xx.s'] includes=[P/'firmware',P/'firmware/stm32',t/'src',paths['CMSIS_5']/'CMSIS/Core/Include',c/'Include',h/'Inc',root/'usr/include/newlib'] flags=['-mcpu=cortex-m0plus','-mthumb','-Os','-g3','-ffunction-sections','-fdata-sections','-fno-common','-fstack-usage','-Wall','-Wextra',

@@ -4,6 +4,8 @@ cd "$(dirname "$0")/.." load_check_dir=$(mktemp -d) trap 'rm -rf "$load_check_dir"' EXIT cc_args=(-std=c11 -Wall -Wextra -Werror -fsanitize=address,undefined -g)+gcc "${cc_args[@]}" -Itests/hal_stub -Ifirmware firmware/instruments.c firmware/measurement_cache.c tests/test_instrument_input.c -lm -o "$load_check_dir/adapter"+"$load_check_dir/adapter" gcc "${cc_args[@]}" firmware/load_core.c tests/test_load_core.c -lm -o "$load_check_dir/core" "$load_check_dir/core" gcc "${cc_args[@]}" firmware/fan_tach.c tests/test_fan_tach.c -lm -o "$load_check_dir/tach"@@ -12,6 +14,8 @@ gcc "${cc_args[@]}" firmware/load_core.c firmware/load_protocol.c tests/test_loa "$load_check_dir/protocol" gcc "${cc_args[@]}" demos/fan-safety/trace.c firmware/load_core.c firmware/fan_tach.c -lm -o "$load_check_dir/fan-demo" "$load_check_dir/fan-demo" > "$load_check_dir/fan-trace.json"+gcc "${cc_args[@]}" firmware/measurement_cache.c tests/test_measurement_cache.c -lm -o "$load_check_dir/measurement-cache"+"$load_check_dir/measurement-cache" gcc "${cc_args[@]}" firmware/instruments.c tests/test_instruments.c -lm -o "$load_check_dir/instruments" "$load_check_dir/instruments" gcc "${cc_args[@]}" firmware/load_core.c firmware/load_protocol.c tests/protocol_peer.c -lm -o "$load_check_dir/peer"

@@ -0,0 +1,27 @@+"""Rigid 2D tilted-screw sensitivity; not a toleranced assembly qualification."""+import math,json+from pathlib import Path++def clearance(tab,stem,bore,od,screw):+ if min(tab,stem,bore,od,screw)<=0 or bore<=screw or od<=bore:raise ValueError('invalid geometry')+ lo,hi=0.,math.pi/2-1e-8+ for _ in range(80):+  a=(lo+hi)/2+  if stem*math.tan(a)+screw/math.cos(a)>bore:hi=a+  else:lo=a+ angle=(lo+hi)/2+ # Sleeve can translate until its OD contacts the tab hole. Screw then tilts+ # within the sleeve's bore. Hole diameter cancels from the radial margin.+ margin=(od-bore)/2-max(0,tab-stem)*math.tan(angle)+ return {'maximumTiltDegrees':math.degrees(angle),'remainingRadialMarginMm':margin}+if __name__=='__main__':+ rows=[]+ for screw in [2.8448,2.75,2.6]:+  rows.append({'screwDiameterMm':screw,**clearance(1.4,.81,2.95,3.43,screw)})+ r={'status':'nominal-centering-sensitivity-only','acceptance':False,'washer':'7721-7PPSG',+ 'assumptions':{'tabMaxMm':1.4,'stemLengthMm':.81,'boreMm':2.95,'stemODMm':3.43,+ 'screwDiameters':'2.8448 mm is nominal #4 diameter; smaller values are sensitivity inputs, not sourced thread tolerances'},+ 'model':'Rigid straight cylindrical screw in a straight concentric sleeve; sleeve translates to tab-hole wall; full angular fit includes screw diameter / cos(theta).',+ 'rows':rows,'limitations':['Thread roots and discontinuous crests are not a solid cylinder','No washer tolerances, deformation, wear, molding flash or eccentricity','No flange/tool access, pad insulation, pressure or torque verification']}+ Path(__file__).resolve().parents[1].joinpath('mechanical/short-sleeve-sensitivity.json').write_text(json.dumps(r,indent=2)+'\n')+ print(json.dumps(rows,indent=2))

@@ -0,0 +1,37 @@+{+  "_hint": "The MP4 is finalized (moov written). pull_file {path} brings it to the caller; the janitor prunes the recordings dir by age/size, so pull it promptly.",+  "abVersion": "2.1.173",+  "audio": false,+  "audioFrames": 0,+  "autoStopped": false,+  "bytes": 4440765,+  "captureItemClosed": false,+  "captureQuiet": null,+  "droppedFrames": 0,+  "durationMs": 464,+  "elapsedMs": 17753,+  "encodedFrames": 0,+  "error": "",+  "fileExists": true,+  "finaliseMs": 229,+  "framePath": "gpu",+  "frames": 27,+  "gpuZeroCopy": true,+  "height": 1528,+  "kind": "window",+  "lastFrameAgoMs": 4188,+  "output": "{\"data\":{\"bytes\":4440765,\"elapsedMs\":17753,\"frames\":27,\"path\":\"C:\\\\Users\\\\john\\\\AppData\\\\Local\\\\Temp\\\\adom-bridge-recordings\\\\window-5969372-20261009-204305.mp4\",\"recordingId\":\"rec-b8e8b39b338747c5b694407bc3dd8403\"},\"message\":\"Stopped recording rec-b8e8b39b338747c5b694407bc3dd8403: 27 frames, 17753 ms, 4440765 bytes -> C:\\\\Users\\\\john\\\\AppData\\\\Local\\\\Temp\\\\adom-bridge-recordings\\\\window-5969372-20261009-204305.mp4\"}",+  "path": "C:/Users/john/AppData/Local/Temp/adom-bridge-recordings/window-5969372-20261009-204305.mp4",+  "rateControl": "vbr",+  "recordingId": "rec-b8e8b39b338747c5b694407bc3dd8403",+  "schemaVersion": 1,+  "state": "finalised",+  "status": "ok",+  "success": true,+  "timeline": {+    "reason": "file has more video samples than were written (27 written, fragment 1 needs 60)",+    "repaired": false+  },+  "timeoutSeconds": 30,+  "width": 2560+}

@@ -1,5 +1,5 @@ {-  "rawTakeCount": 62,+  "rawTakeCount": 63,   "reviewedExcerptCount": 16,   "countingRule": "Unique raw window recording filenames in this project; excludes derivative action/speed exports and reference projects. Raw count includes rejected takes.",   "takes": [@@ -374,6 +374,12 @@       "durationSeconds": 16.233333,       "topic": "Review of successful official Parts Search API result",       "review": "Full decode and contact sheet reviewed; mostly static, use only a short price/stock cutaway; no new search shown."+    },+    {+      "file": "videos/fastener-review/window-5969372-20261009-204305.mp4",+      "durationSeconds": 19.6,+      "topic": "Published fastener review",+      "review": "Exclude from action edit: static page; attempted scroll moved zero pixels. Full decode passed. Recorder timing mismatch retained; not a duration measurement of engineering work."     }   ] }