docs: vendor 固件目录实证（CH镜像=本地镜像）+ 全量烧录安全性论证入库

DECISIONS.md

@@ -20,3 +20,5 @@
 | 2026-07-29 | **SUOTA 状态码分两类：会话信息码（8/16）与流程错误码**；16=MEM_DEV type 0x13 位测试应答（固件 0x07FCB770），状态保持 | 反汇编 MEM_DEV handler + 三轮烧录对照（16 恒在 MEM_DEV 后 ~1s 到达，块未受影响） | bridge 对 8/16 记录继续、块确认只认 2；APK 表未覆盖 16，固件证据为准 |
 | 2026-07-29 | **SUOTA 状态 22/20 根因分层**：22=0x38000 产品头读电气失败（GPIO_MAP 引脚错）；20=读成功但非 'pR'（引脚有效、0x38000 疑为空） | GPIO 探针（max_blocks=2 安全模式）：A{00,00,06,05}→22、B{40,00,06,05}→22、C{05,06,00,40}→20；C=APK 整数 0x05060040 的 BE 字节，为唯一电气有效候选 | GPIO_MAP 采用 C（BE 序）；剩余阻断=0x38000 产品头（'pR'）缺失/无效，见下条 |
 | 2026-07-29 | **0x38000 产品头阻断为 vendor 级问题**：固件在首 0x200 缓冲处理时校验 0x38000 的 'pR' 产品头（0x07FCB4AA），无效则发 20 并中止该缓冲处理；本机疑以裸 'pQ' 直启（无产品头） | 反汇编完整校验链；固件镜像内 0x3A19 处的 70 52 系代码巧合非真产品头；MEM_INFO 读回 00000000 | 强推 END 有变砖风险（END 会写 0xAA 标志+复位，裸启兜底可恢复但需 JTAG 兜底方案）；暂缓强推，先与用户决策 |
+| 2026-07-29 | **vendor 固件目录实证**：qbsg.top /api/firmware/catalog 免认证开放，PP_da14585_4.2_CH.img 与本地镜像 sha256 完全一致（vendor OTA 镜像=本镜像，无产品头附加）；NEW 变体同样引用 0x38000 检查 | 下载比对（analysis/apk/vendor_catalog.json + vendor_PP_CH/NEW.img） | 排除"vendor 镜像含产品头"假设；阻断确在设备端 0x38000 内容，非镜像差异 |
+| 2026-07-29 | **全量烧录实证安全性论证**：产品头校验失败时所有缓冲处理在写 flash 前中止（state[0x70] 恒 0），END 仅写 0xAA 于 [state[0x60]+2]=0x0002 而该字节原本就是 0xAA（无操作），复位后裸启原固件 | 反汇编 END 路径（0x07FCB7C6-0x07FCB7E4）与缓冲写路径（0x07FCB514 依赖中止的头部处理产物 state[0x74]） | 全量跑 OTA 的最坏结果=安全空转+复位；若中途校验通过则自然转正为真实烧录。用户授权下可执行 |

analysis/apk/vendor_catalog.json

@@ -0,0 +1 @@
+{"type":"success","groups":[{"provider":"轻舞","provider_uuid":"060cc904-87b0-4614-a361-9e3b32a085a2","activation_id":"firm_213_AIOPRO","label":"2.13寸AIOPRO版","sort_order":0,"firmwares":[{"firmware_id":"HM213_AIOPRO_BOLD_V3.0.2H","name":"HM213_AIOPRO_BOLD_V3.0.2H","screen_size":"2.13","description":"2.13寸时钟日历PRO版，简体，字体加粗，高分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/5a97c816-ea00-479b-9d9f-236d6543224a.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_BOLD_V3.0.2H.img","sha256":"024a218fd1e8e0d4a83b9fed06a41a48265ddf8dde0e9935122bee09aa024761"},{"firmware_id":"HM213_AIOPRO_BOLD_V3.0.2L","name":"HM213_AIOPRO_BOLD_V3.0.2L","screen_size":"2.13","description":"2.13寸时钟日历PRO版，简体，字体加粗，低分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/045c4c49-9d0f-463a-af2a-7e4e7fef7937.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_BOLD_V3.0.2L.img","sha256":"a760c61105bf941c6ed6ef072d6f5ba9dce89b7aeac85d7ba9bf9b99cd08702d"},{"firmware_id":"HM213_AIOPRO_TRAD_BOLD_V3.0.2H","name":"HM213_AIOPRO_TRAD_BOLD_V3.0.2H","screen_size":"2.13","description":"2.13寸时钟日历PRO版，繁体，字体加粗，高分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/4a853cfd-ef48-4619-b04f-4bc3c6d7f483.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_TRAD_BOLD_V3.0.2H.img","sha256":"c04d5c866d78c79dfcbbea7d77533bc8c0531a871311cc9b0b74419b18558931"},{"firmware_id":"HM213_AIOPRO_TRAD_BOLD_V3.0.2L","name":"HM213_AIOPRO_TRAD_BOLD_V3.0.2L","screen_size":"2.13","description":"2.13寸时钟日历PRO版，繁体，字体加粗，低分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/d14b39c2-5635-418e-bc97-e469c3eac884.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_TRAD_BOLD_V3.0.2L.img","sha256":"539f597a2b3bc67ee34b576e41eebf9552c6f3884f01202666cd82bbba618c46"},{"firmware_id":"HM213_AIOPRO_TRAD_V3.0.2L","name":"HM213_AIOPRO_TRAD_V3.0.2L","screen_size":"2.13","description":"2.13寸时钟日历PRO版，繁体，常规字体，低分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/ecb53a18-48de-4b3b-ba56-586afb25a30a.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_TRAD_V3.0.2L.img","sha256":"014b7a4aaeff36923f344330f503a6ef0a1d27c28b2a48404f43a54cabd55056"},{"firmware_id":"HM213_AIOPRO_V3.0.2H","name":"HM213_AIOPRO_V3.0.2H","screen_size":"2.13","description":"2.13寸时钟日历PRO版，简体，常规字体，高分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/8dc73737-7cd6-4927-9afa-9ba6fcaba0a1.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_V3.0.2H.img","sha256":"bec30538d220ce548f5c8e1dea910967087da8b6f0acca99e6974befaa6233c0"},{"firmware_id":"HM213_AIOPRO_TRAD_V3.0.2H","name":"HM213_AIOPRO_TRAD_V3.0.2H","screen_size":"2.13","description":"2.13寸时钟日历PRO版，繁体，常规字体，高分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/f56cedb3-8a89-4a60-9a19-5596fe74b4f9.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_TRAD_V3.0.2H.img","sha256":"03696cfefa4908e4345f54774ca3e320e3df3a5854a596574a3a6dc105b70841"},{"firmware_id":"HM213_AIOPRO_V3.0.2L","name":"HM213_AIOPRO_V3.0.2L","screen_size":"2.13","description":"2.13寸时钟日历PRO版，简体，常规字体，低分","image_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/7e1a0ecd-1778-4739-b442-4b64080b5997.jpg","download_url":"/providers/060cc904-87b0-4614-a361-9e3b32a085a2/HM213_AIOPRO_V3.0.2L.img","sha256":"70863863317db3c63360119fc0ec0b309af98702a8365f36bfb9fe11a3897122"}]},{"provider":"平平","provider_uuid":"a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf","activation_id":"PP_da14585_4.2","label":"da14585芯片4.2墨水屏通用","sort_order":0,"firmwares":[{"firmware_id":"PP_da14585_4.2","name":"4.2寸三色或双色固件","screen_size":"4.2","description":"支持da14585芯片和4.2寸墨水屏","image_url":"/providers/a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf/2fcf6f0b-05d2-42f9-89a2-a49f737c27ee.jpg","download_url":"/providers/a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf/PP_da14585_4.2_CH.img","sha256":"371bfb0111707429f96c97fb189fa2e9be6429a6758c56c8fef82ca9776629a2"}]},{"provider":"平平","provider_uuid":"a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf","activation_id":"PP_da14585_4.2_NEW","label":"4.2新界面","sort_order":0,"firmwares":[{"firmware_id":"PP_da14585_4.2_NEW","name":"4.2新界面","screen_size":"4.2","description":"4.2新界面","image_url":"/providers/a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf/72198bf6-e80d-428a-8a80-c0fe5134bf19.jpg","download_url":"/providers/a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf/PP_da14585_4.2_NEW.img","sha256":"ad0d6c1b0ef7c1d69d2c49dfa396cba47d470619833db67f69612ab907ae77c2"}]},{"provider":"平平","provider_uuid":"a45e5e7a-cb08-4e53-ae1b-48b749aa0bdf","actLine truncated