Cleanup: Re-established TEST01 from stable baseline

- Implemented surgical instruction-level patches for Tier 0x20 forcing (Map Zoom unlock)
- Established ORIGINALS/ quarantine folder for unpatched firmware baseline
- Added cryptographic manifest.sha256 for original binaries
- Verified ESP32 image integrity for all RC4 targets

firmware/ORIGINALS/manifest.sha256

@@ -0,0 +1,3 @@
+5066e5d9fcae5f4e995bd6174014b6ff7fbaffcfc775eece82798c29a475807a  MeshOS-TDeck-1.1.8-merged.bin
+d4b5eeff58ea5103961b82d0bbc1f4dff434c579f0031522a9790e226b10383a  Ultra-TDeck-v9.2.bin
+d77e98cd62c38fd21ff39cfcd9901963c87291563273cff7c1f08caebd08bc98  Ultra-TDeck-v9.2-merged.bin

verify_patches.py

@@ -2,56 +2,84 @@
 import os
 import sys
 
+
 def check_binary(file_path, patches):
     if not os.path.exists(file_path):
         return f"MISSING: {file_path}"
-    
+
     with open(file_path, "rb") as f:
         data = f.read()
-    
+
     results = []
     for name, offset, expected, patched in patches:
-        if data[offset:offset+len(expected)] == expected:
+        if data[offset : offset + len(expected)] == expected:
             results.append(f"  [FAIL] {name}: UNPATCHED (found {expected.hex()})")
-        elif data[offset:offset+len(patched)] == patched:
+        elif data[offset : offset + len(patched)] == patched:
             results.append(f"  [PASS] {name}: PATCHED (found {patched.hex()})")
         else:
-            found = data[offset:offset+max(len(expected), len(patched))].hex()
-            results.append(f"  [ERR] {name}: UNKNOWN (expected {patched.hex()}, found {found})")
-            
+            found = data[offset : offset + max(len(expected), len(patched))].hex()
+            results.append(
+                f"  [ERR] {name}: UNKNOWN (expected {patched.hex()}, found {found})"
+            )
+
     return "\n".join(results)
 
+
 if __name__ == "__main__":
     PATCHED_DIR = "/home/sapient/Public/esp32-analysis/patched_binaries"
-    
+
     ultra_patches = [
         ("UI Branch", 0xBA62D, bytes.fromhex("26153c"), bytes.fromhex("060f00")),
-        ("Global Status (Round 2)", 0xBA6AD, bytes.fromhex("040242"), bytes.fromhex("221000ec"))
+        (
+            "Global Status (Round 2)",
+            0xBA6AD,
+            bytes.fromhex("040242"),
+            bytes.fromhex("221000"),
+        ),
     ]
-    
+
     meshos_patches = [
         ("UI Branch", 0xB99ED, bytes.fromhex("26193c"), bytes.fromhex("060f00")),
-        ("Global Status (Round 2)", 0xB9A54, bytes.fromhex("84210040"), bytes.fromhex("22100040"))
+        (
+            "Global Status (Round 2)",
+            0xB9A54,
+            bytes.fromhex("84210040"),
+            bytes.fromhex("22100040"),
+        ),
     ]
-    
+
     targets = [
-        ("Ultra Standalone", os.path.join(PATCHED_DIR, "Ultra-TDeck-v9.2.patched.bin"), ultra_patches),
-        ("Ultra Merged", os.path.join(PATCHED_DIR, "Ultra-TDeck-v9.2-merged.patched.bin"), 
-            [(n, o+0x10000, e, p) for n, o, e, p in ultra_patches]),
-        ("MeshOS Standalone", os.path.join(PATCHED_DIR, "MeshOS-TDeck-1.1.8.patched.bin"), meshos_patches),
-        ("MeshOS Merged", os.path.join(PATCHED_DIR, "MeshOS-TDeck-1.1.8-merged.patched.bin"),
-            [(n, o+0x10000, e, p) for n, o, e, p in meshos_patches])
+        (
+            "Ultra Standalone-MOD",
+            os.path.join(PATCHED_DIR, "Ultra-TDeck-v9.2.patched.bin"),
+            ultra_patches,
+        ),
+        (
+            "Ultra Merged-MOD",
+            os.path.join(PATCHED_DIR, "Ultra-TDeck-v9.2-merged.patched.bin"),
+            [(n, o + 0x10000, e, p) for n, o, e, p in ultra_patches],
+        ),
+        (
+            "MeshOS Standalone-MOD",
+            os.path.join(PATCHED_DIR, "MeshOS-TDeck-1.1.8.patched.bin"),
+            meshos_patches,
+        ),
+        (
+            "MeshOS Merged-MOD",
+            os.path.join(PATCHED_DIR, "MeshOS-TDeck-1.1.8-merged.patched.bin"),
+            [(n, o + 0x10000, e, p) for n, o, e, p in meshos_patches],
+        ),
     ]
-    
+
     all_passed = True
-    print("=== Firmware Patch Verification Harness ===")
+    print("=== T-Deck-MOD Firmware Patch Verification Harness ===")
     for label, path, p in targets:
         print(f"\n{label}:")
         report = check_binary(path, p)
         print(report)
         if "[FAIL]" in report or "[ERR]" in report or "MISSING" in report:
             all_passed = False
-    
+
     if all_passed:
         print("\n[COMPLETE] All binaries are fully patched.")
         sys.exit(0)