Release inherited Params locks correctly across fork and exec. Preserve qualified lateral armed intent through temporary faults, restore the Big UI CEM gauge, improve speed typography, and hide unavailable CEM initialization text. Include matching device artifacts and focused regression coverage.
Keep existing ordinary controls under the normal soft-disable countdown when current vehicle data and native permissions remain healthy. Preserve original command deadlines and qualify retained steering intent against completed publication provenance.
Support blind-spot camera popups through the Android Auto layout, remove the redundant BSM camera toggle, and separate projection settings from comma-screen preferences. Refine pinned editor corners and widget removal dialogs.
Pin the preview and save bar, tighten display rows, and group color controls for phone screens. Stabilize touch selection, resizing, drag autoscroll, and menu dismissal.
Handle a strictly newer same-identity combined proof first consumed after
its output lease expires. Require an established healthy combined Ioniq6
baseline, valid fresh-at-publication source, healthy current native requests
and permission for both axes, and unchanged original retention bounds.
Advance only accepted signature/sequence. Do not renew source/native clocks,
extend output leases, grant expired commands, rearm after genuine disarm,
or automatically restore longitudinal control.
Validation: 940 tests on exact f04b source, 19 additional independent cases,
783 unchanged imported modules plus two intended files, Ruff and ty pass.
A prior run with stale test-fixture provenance is retained and superseded.
Road88 supports the mechanism; its exact consumed proof is unlogged.
This repairs intent retention, not the underlying producer delay.
Update protected inventory receipt.
Use the existing settings worker for proactive conditional-mode source
verification. Adopt one immutable snapshot per Card frame, with verified
age strictly below 500 ms. Busy, invalid, or stale snapshots defer
conditional proposals without disengaging ordinary control or AOL.
Preserve fresh per-request SafeMode and gesture mapping checks. Replay
retains its source-clock synchronous owner. Polling phase changes; no
blanket one-second cached permission is added.
Validation: 353 aggregate tests, independent boundary and actual-control
continuity checks, exact source imports and inventory receipt verification.
Measured conditional source reads on main drop from 36 to zero over a
three-second initialized fixture; worker reads increase proactively.
This removes a blocking path, not a demonstrated cure for all road stalls.
Enable compact Card phase capture for qualified Ioniq6 production runs,
including unlatched ordinary control. Record publication gaps, source and
receive clocks, thread CPU, settings-worker context, and latch-clear reasons.
Add bounded SelfdriveD phase, admission, original-proof and Ratekeeper
snapshots with off-thread reporting and suppression counters. Preserve
control predicates, original deadlines, thresholds and scheduling policy.
Validation: 583 combined tests pass on unchanged rerun; an initial host
wall-time microbenchmark failure and isolated pass are retained. Exact-source
import audits and independent review pass. Host overhead is measured, not
a target-device bound. This adds diagnostics, not a producer-lag fix.
Update protected source inventory receipt.
Use the same post-drain clock for source-expiry deferral and intent
admission, avoiding premature state disable when draining crosses the
source freshness cutoff. Preserve the original proof and deadline.
Add cutoff, follow-through, and restrictive-input regression coverage.
Update the protected source inventory receipt.
Validation: 416 focused aggregate tests and 79 independent boundary and
restriction checks; exact source import audits, Ruff, and ty pass.
This addresses a reproduced admission race, not underlying producer lag.
Exclude HYUNDAI_IONIQ_6 from the recent Hyundai CAN-FD highway friction wrapper, restoring original friction threshold/error passthrough in both controller modes. Preserve all steering limits, ramp rates, startup PID settings, scalar calibration, other vehicles, native assets and dropout repairs.
Update regression expectations and add exact Ioniq friction passthrough coverage. Focused suite: 22 passed; 559 repository Python imports match exact parent plus the three intended files. Independent numerical checks: 80,640 comparisons. Protected inventory receipt independently verified. This is the user-requested tuning revert, not a lag fix or on-device qualification.
A recovered axis and its healthy event can arrive through separate sockets in either order. After a previously verified availability pause, resolve an exact fresh healthy LAT-only recovery pair before treating the pending first half as unmatched failure.
Require the original pending deadline, exact newer event association, unchanged session/producer/epoch/inventory, fresh source and positive native LAT authority. Preserve failed-state, physical cancellation, restrictive events and native-denial handling. This only clears join bookkeeping; it grants no output and extends no lease.
Add 24 regression cases. Exact parent fails four split-recovery positives while together-delivery and restriction controls pass. Candidate focused suite: 396 passed; independent adversarial review: 58 passed. Import inventory and protected receipt verified. Host qualification is not road verification; separate lag/producer stalls remain unresolved.
Recognize the existing qualified Ioniq lateral-only held-brake override when checking fresh-source renewal after an old output deadline. Exempt only recurring pedalPressed USER_DISABLE; retain new physical edges, other disable events, source/intent/session validation, native permission checks, and all expired-output enforcement. Do not extend leases or reenable longitudinal control.
Add 28 owner/Controls/Card regression cases and update two old held-brake handoff expectations. Clean serial focused suite: 369 passed; independent adversarial review: 56 passed. Exact parent import inventory and protected receipt verified. Host validation is not device/road qualification; separate lag and producer-stall failures remain under investigation.
Do not gate nonblocking carState reconciliation on an old output packet's deadline. Process queued physical samples once before selected-source owners and the state-machine decision; retain the existing total 32-envelope bound, freshness/native/intent checks and no blocking wait beyond the old deadline.
Controlled route52-shaped retained-timeout schedules reproduce stale-selected-carState/fresh-intent rejection on the parent, including ordinary unlatched critical disable. Candidate consumes the fresh pair before deciding. 341 focused tests and 84 independent adversarial cases passed; exact-source import audit, Ruff, type and inventory checks passed.
No lease extension, scheduling rewrite or native artifact change. Separate Card production gaps remain unproven fixed.
Daniel Koepping