# Firmware and ABI checklist

## Firmware identity

- [ ] Exact user-visible firmware identifier supplied by Jens
- [ ] Reproducible identification method documented without kernel access
- [ ] Identifier added to one candidate build only
- [ ] `FIRMWARE_COMPATIBILITY.md` row created as untested
- [ ] No compatibility inferred from another revision

## Discovery gate

- [ ] Capability-probe artifact manifest and SHA-256 reviewed
- [ ] Explicit artifact-specific execution permission recorded
- [ ] Probe resolves names only and invokes no resolved pointer
- [ ] Redacted result log archived
- [ ] Runtime module candidate confirmed or rejected for this firmware

## SDL/VideoOut evidence

- [x] SDL source commit pinned
- [x] Zlib license and overlay notice recorded
- [x] Project code uses public SDL2 APIs only
- [x] Keyboard/IME initialization removed from the staged build
- [x] Direct GNM imports forbidden
- [ ] Bounded flip-wait or safe supervisor proven
- [ ] Cleanup behavior observed on this exact firmware

## Artifact review

- [ ] Clean source commit matches manifest
- [ ] SDK and SDL commits match locks
- [ ] Firmware is not `NONE`
- [ ] ELF filename, size, and SHA-256 match
- [ ] Imports match the API inventory
- [ ] Offline host, static-analysis, cross-compile, and secret tests pass
- [ ] Transfer and execution remain false until separately approved

Any unchecked runtime item blocks execution.