|
| 1 | +# 0001_CROSSCHECK_PROMPT_2026_09_07.md — Deep V1-without-GMS iterative cross-check (2nd pass) |
| 2 | + |
| 3 | +**Number:** 0001 |
| 4 | +**Category:** CROSSCHECK |
| 5 | +**Date:** 2026-09-07 |
| 6 | +**Title:** Deep V1-without-GMS iterative cross-check (2nd pass) |
| 7 | + |
| 8 | +> **Reconstruction note:** `ai-sessions/` and this logging convention (`AI_SESSION_LOG_PROCEDURE.md`) |
| 9 | +> did not exist yet when this session ran — its prompt was given directly in a chat conversation and |
| 10 | +> was never saved verbatim to a file. This `PROMPT` file is a **reconstruction**, assembled from the |
| 11 | +> task instructions the paired `0001_CROSSCHECK_RESULT_2026_09_07.md` file itself quotes, restates, |
| 12 | +> and works from throughout (its Phase 0 reading list, its "per this task's instructions"/"per this |
| 13 | +> task's own instruction" references, and its Work-plan checklist). It is not a byte-for-byte replay |
| 14 | +> of the original prompt text. Entry `0001` is bootstrapped this way, by explicit maintainer |
| 15 | +> instruction, so this new system starts from real content instead of an empty registry — later |
| 16 | +> entries are logged from the actual prompt text going forward. |
| 17 | +
|
| 18 | +--- |
| 19 | + |
| 20 | +## Reconstructed task instructions |
| 21 | + |
| 22 | +Perform a deep, iterative re-investigation of the V1-without-GMS scope, cross-checking every |
| 23 | +relevant Bluetooth capture against the decompiled companion-app APK source. This is a second, more |
| 24 | +thorough pass at what `AUDIT_REPORT_2026-09-07.md` Phase 1 attempted in a rushed, single-pass form |
| 25 | +(two of three planned research passes had failed mid-run on a session-wide rate limit; the surviving |
| 26 | +pass was a single-pass manual investigation, not the broader iterative search a dedicated pass would |
| 27 | +run). |
| 28 | + |
| 29 | +**Operational constraints:** |
| 30 | +- Work sequentially, in one continuous session — no parallel sub-agent/Task-tool passes. |
| 31 | +- Maintain a running progress file (`DEEP_CROSSCHECK_PROGRESS_2026-09-07.md`), appended after every |
| 32 | + phase and after any individually time-consuming step, so a resumed session can read it first and |
| 33 | + continue from wherever it stopped, never restarting a phase already checkpointed there. |
| 34 | +- **AI-assistance boundary throughout, per `DECISIONS.md` ADR-017:** search, list candidates, and |
| 35 | + explain already-surfaced code — never decide relevance, never record a finding directly in |
| 36 | + `REVERSE_ENGINEERING.md`, never self-promote anything to 🟢 FACT, never write or amend a |
| 37 | + `DECISIONS.md` ADR. Everything produced is a proposal for maintainer review unless explicitly |
| 38 | + marked otherwise. |
| 39 | + |
| 40 | +**Required reading order at session start**, per `AGENTS.md` §0.1: `AGENTS.md` (full), |
| 41 | +`PROJECT_RULES.md` (full), `PROJECT.md`, `ARCHITECTURE.md`, `PROTOCOL.md` (full, including its |
| 42 | +changelog and open items), `DECISIONS.md` (every ADR, ADR-001 through the most recent — with extra |
| 43 | +care on the ADRs most relevant to the GMS-boundary/DLCI-0x02 questions this pass investigates), |
| 44 | +`TODO.md`. Plus, for this specific task: `REVERSE_ENGINEERING.md` (full), the reverse-engineering |
| 45 | +procedure and version-tracking docs, the capture index in `CAPTURE_BLUETOOTH_HCI_SNOOP.md` §9, the |
| 46 | +Test-ID catalog, `DESKRESEARCH_FINDINGS.md`, and `id_registry.csv`. |
| 47 | + |
| 48 | +**Work plan — the questions this task needs to answer:** |
| 49 | + |
| 50 | +- **Phase 1 (GMS-boundary Q1–Q3 re-investigation):** go beyond the prior audit pass's keyword-only |
| 51 | + grep. Q1: search for any AIDL-generated interface / `Binder`/`ServiceConnection`/callback |
| 52 | + interface with an ANC-state/settings-notification-shaped method signature, by structural pattern, |
| 53 | + not just keyword. Q2: for any class that only *receives* an already-decoded domain event, trace |
| 54 | + its registration/subscription call site to determine which system component it actually registers |
| 55 | + with. Q3: check whether `apktool-output/AndroidManifest.xml` declares any binding to a GMS-side |
| 56 | + service relevant to this boundary. Produce a per-question verdict. |
| 57 | +- **Phase 2 (deepen DLCI 0x02 / `libmaestro` tracing):** trace which `maestro_pw.*` services fire |
| 58 | + specifically inside the connect-time burst; trace `frb.java`'s `"primary route change"` callback |
| 59 | + further; fully resolve `fsz.java`'s shared-dispatcher structure (trace `WriteSetting`'s actual |
| 60 | + caller through the R8-merged-lambda dispatcher rather than leaving it as an acknowledged gap); |
| 61 | + trace `qhr` field 13's ANC-write call site trigger; apply ADR-019's static-analysis method to `qhr` |
| 62 | + field 11 (Multipoint) and field 15 (Volume EQ), the two fields `TODO.md` explicitly flags as |
| 63 | + unchecked. |
| 64 | +- **Phase 3 (per-V1-feature confirmation pass):** for every V1-scope feature in `PROJECT.md`'s |
| 65 | + functional checklist (battery, ANC, EQ, touch controls, head gestures, firmware/serial, Find My |
| 66 | + Buds Left/Right vs. Case/"both", in-ear detection, multipoint, case sounds), state which evidence |
| 67 | + is DLCI-0x02/companion-app-code-backed versus DLCI-0x04/0x08/GMS-boundary, incorporating whatever |
| 68 | + Phase 1/Phase 2 turn up. |
| 69 | +- **Phase 4 (write-up):** draft (as proposals only, per the AI-assistance boundary above) proposed |
| 70 | + `PROTOCOL.md` §6 updates, proposed `REVERSE_ENGINEERING.md` updates, proposed `TODO.md` |
| 71 | + closures/reprioritizations, and a draft `DECISIONS.md` ADR-025 Update note — none of it committed |
| 72 | + directly. |
| 73 | + |
| 74 | +**Deliverable:** the progress file itself, ending with a summary for the maintainer covering what's |
| 75 | +now more strongly confirmed, what's newly found, what changed from the previous pass's conclusions, |
| 76 | +and what's proposed and awaiting maintainer sign-off. |
| 77 | + |
| 78 | +--- |
| 79 | +https://github.com/tedsluis/opencontrolpixelbudspro2/blob/main/ai-sessions/0001_CROSSCHECK_PROMPT_2026_09_07.md - https://tedsluis.github.io/opencontrolpixelbudspro2/ai-sessions/0001_CROSSCHECK_PROMPT_2026_09_07 |
0 commit comments