Direct-SBI boundary diagnosis — matching full build

2026-10-03 UTC. Coordinator branch integrate/mainline-probe-path, worktree /home/jadams/tmp/k230-mainline-probe-integration; bounded build source 007410ee7daa55cecd4f59708e4941679a701f9d. Root held /tmp/k230-nix-build.lock during the full build and released it on completion. This increment owns this evidence directory and the mainline task progress note. No UART or board was used for these host checks.

flock -n /tmp/k230-nix-build.lock nix build \
  .#kernelMainlineBootTraceSbiTrialBootFiles --no-link --print-out-paths \
  --max-jobs 1 --cores 16
python3 tools/mainline-drm-trial-inspect.py \
  /nix/store/j0ad6h3s23s5zlwizn3mbiw6cs98s4qn-k230-mainline-drm-trial-boot-files

Both passed. Private log: ~/tmp/k230-mainline-boot-trace-sbi-full-build.log. Exact selected bundle, system/kernel identities, file hashes and actual built configuration are in result.json. Image equality, initrd payload/header/data CRC, DT-to-environment arguments, inventory presence and SHA256SUMS passed. The hardware DT is identical to the previous trace trial after removing only /chosen/bootargs. The inventory has 629 paths; recursive closure 630 includes the bundle. The protected host GC root is ~/tmp/k230-mainline-boot-trace-sbi-bundle-root.

The realized source’s init/main.c hash matches the source/native/RISC-V-object proof. All four public direct-SBI record strings are in the linked Image. The actual built dev configuration enables RISCV_SBI, 64BIT, VMAP_STACK and 4KiB pages; KUnit is disabled. Full link/build does not show firmware output or progress.

Both rd.prepare_trial(...) and the actual ordinary controller’s prepare(...) passed against the exact file manifest and most recent verified protected normal report. Preparation checks required executable tools, immutable init, serial-only console, both exact runtime flags and the original three qualified controls. Commands use the private prepare-transfer.py and host-prepare-ordinary.py under ~/tmp/k230-mainline-boot-trace-sbi-board. No console registration, earlycon/keep_bootcon, global clock bypass or observer service is introduced. The command remains below the 512-byte U-Boot input bound.

The private delta NAR export is 103,873,318 bytes with eight new paths relative to the already staged original trace bundle. Its own prospective board archive and GC root are distinct; transfer preparation is not board staging proof.

Remaining physical gate

Direct-SBI output, ordinary root/login, panel/touch and automatic return are UNVERIFIED. Task 5b.5 stays unchecked. The source proof’s outcome map and firmware-call deadline caveat remain controlling. After a fresh protected normal preflight and staging, the reserved operator runs:

python3 tools/mainline-drm-system-trial.py begin \
  --bundle /nix/store/j0ad6h3s23s5zlwizn3mbiw6cs98s4qn-k230-mainline-drm-trial-boot-files \
  --manifest <private-exact-manifest> --normal-report <private-normal-report> \
  --state <private-state> --log <private-uart-log> --result <private-result>

Keep the existing 180-second readiness deadline and exact banner/login/root qualification. Unknown readiness stops all input; operator reset may be needed. Real glass touch --real-touch and protected finish postflight remain required if a candidate becomes ready. No archive or production acceptance is implied.