WanderBulb — Family Architecture Spec (v1.0-candidate)

Product family: WanderBulb — Matter-over-Thread smart bulb family with saffron-tunable RGBWW + identity-aware obfuscation, designed to replace Hue + Sengled installs at the WanderVerse household level. Revision: v1.0-candidate Date: 2026-04-25 SOP: v2.4

---

1. Why this exists

The smart-bulb market is consolidated around two patterns:

Cloud-tethered ecosystems (Philips Hue Hub, Wyze, GE Cync) — depend on a vendor cloud, share telemetry by default, and break when the parent company shifts strategy. Hue's 2023 forced-account migration is the canonical example: hardware customers paid for stops being trustworthy when the vendor decides telemetry policy unilaterally.
Cheap commodity bulbs (Sengled, generic Tuya / Smart Life resellers) — work, but ship with weak supply-chain provenance, irregular firmware-update windows, and no identity-aware behaviors (e.g., a Sengled bulb tells the household network when it's on; a Sengled bulb doesn't randomize on/off times to obfuscate occupancy).

For a WanderVerse household — LGBTQ+ rural, DV-safehouse, BIPOC tenants in landlord-network surveillance territory, and anyone who has reason to keep their occupancy pattern private — this category has been architecturally hostile. A "smart" bulb that broadcasts on/off events to a vendor cloud + the household router is a presence beacon.

WanderBulb is the WanderVerse household lighting device. It runs Matter-over-Thread + BLE commissioning (the modern open standard), keeps all light-state telemetry on-device (no telemetry leaves the bulb), and ships with covert sleep-pattern obfuscation as an opt-in identity-aware feature: the bulb randomizes its on/off transitions within user-set windows so that a network observer cannot reconstruct a household's sleep pattern from packet timing alone.

The product thesis is concrete: a Matter + Thread smart bulb that is private by default, runs from the WanderNode Hub or any standard Matter controller, has a saffron-tunable RGBWW LED engine that hits high-CRI warm-white + the WanderVerse saffron family accent, and is Ambassador-assembled at WWP wages.

---

2. Product family overview

Tier	Device ID	Form factor	Hero feature	Retail	Ship target
WanderBulb A19	`WV-BULB-A19`	Standard E26 A19 (60 × 110 mm)	Matter-over-Thread; 800 lm RGBWW; 16-LED engine; covert obfuscation; saffron-finish base ring	$24	2027-Q3
WanderBulb Downlight	`WV-BULB-DOWN`	4-inch / 6-inch recessed canister downlight (J-Box-compatible)	Same platform + 1100 lm + UV-A optional channel + recessed thermal headroom	$49	2027-Q4

Hero image alignment

The two SKUs share the same electronics platform (Nordic nRF52840 host + 16-LED RGBWW array + isolated AC-line buck) and present identical optical behavior; the chassis differs.

A19: standard E26 base + injection-molded white optical-grade polycarbonate diffuser bulb + matte saffron anodized aluminum base ring (matches saffron family accent across WanderAlert + WanderCO + WanderDash) + matte saffron heatsink fins (visible through base ring slots). Matte-finish saffron rule applies to the visible base ring + heatsink ONLY — never to the diffuser (per task constraint; the diffuser is white optical PC for color-accurate light output).
Downlight: standard 4-inch / 6-inch IC-rated recessed canister + matte saffron anodized aluminum trim ring + the same 16-LED engine + larger heatsink + J-Box-compatible AC connection. Drop-in replacement for standard residential recessed cans (canless or canister).

Family visual identity preserved

Matte saffron base ring + heatsink (anodized aluminum; matches WanderAlert / WanderCO / WanderDash saffron accent — applied to visible metal surfaces only, not the white optical diffuser)
White optical PC diffuser (color-accurate light output; high-CRI warm-white preserves saffron accent in the room without tinting the light)
Etched Ambassador signature inside base ring (visible only when bulb is removed from socket; per family standard)
Identical optical signature across A19 + Downlight (color tuning + brightness curve match within ±2 % at any CCT setting)

---

3. Architecture summary

3.1 Family platform (shared across both tiers)

Block	Part	Notes
Host MCU	Nordic nRF52840	Matter-over-Thread + BLE 5.3 commissioning; cited from `parts.db` (router_standard, router_pro_v2, router_ultra, wandercar_family)
Alt MCU (Thread radio)	TI CC2652R7	Dual-source qualified at DVT; Thread + Zigbee radio + ARM Cortex-M4F
LED driver MCU	NXP PCA9685 16-channel PWM	12-bit per-channel; drives 16-LED engine via constant-current sink array
LED engine	16-LED RGBWW array	4× warm-white CoB + 4× cool-white + 4× red + 2× green + 2× blue + UV-A on Downlight only
Warm-white LEDs	Lumileds LUXEON CoB Warm 2700K 95 CRI	high-CRI; 4 CoB modules; data point cited from `parts.db` (security_trio LUXEON 3535L)
Cool-white LEDs	Nichia NF2W757GT-V3 6500K	4× SMD; bin-matched; data point cited from `parts.db` (Cree CLM3C-WKW reference)
Red LEDs	Cree XQ-E saffron-bin 605 nm	4×; per WanderVerse saffron-tuning rule + family LED standard from `parts.db` (Cree XQ-E saffron from wanderalert)
Green LEDs	Lumileds LUXEON Z Color 525 nm	2×
Blue LEDs	Lumileds LUXEON Z Color 470 nm	2×
UV-A LED (Downlight only)	Nichia NCSU275A 365 nm	1×; insect-trap + advisory mode
AC-DC isolated buck	TI TPS65086100 + isolation transformer	reused per family standard (cited from `parts.db`: bridge_full, bridge_mini, medical_tricorder_family, router_*, security_trio, wanderalert, wanderband, wanderbreath, wandercar_family, wanderreader, wanderspeaker_v2, wandertherm); NEW for AC-line input topology
LED current driver	TI TLC59281 16-ch constant-current	8-bit grayscale per channel; daisy-chained from PCA9685
Secure element	NXP SE051	role token + Matter device attestation cert + obfuscation policy; reused
Flash NOR	Macronix MX25R 4 MB	Matter fabric storage + obfuscation schedule storage + OTA A/B partitions
Thread antenna	PCB chip antenna (Raytac MDBT50Q-512K module passthrough)	2.4 GHz; FCC modular cert
Aluminum chassis	Anodized aluminum base ring + heatsink (matte saffron)	NEW for parts library; matches family saffron accent
Diffuser	White optical PC dome (A19) / white optical PC lens (Downlight)	NEW for parts library

3.2 What WanderBulb does NOT have

No Wi-Fi. Matter-over-Thread is the ONLY commissioning + control path. Wi-Fi adds attack surface, telemetry leak risk, and 2.4 GHz coexistence pain. Thread is the intentional architectural choice.
No camera. Categorically out of scope.
No microphone. Same.
No occupancy / motion sensor. A bulb that detects who is in the room creates the exact identity-attack surface we're building against. Out of scope. (WanderVerse occupancy lives in WanderDash + WanderHub, not in lighting endpoints.)
No vendor cloud. No telemetry to vendor. Period. Standard 0 hard rule.
No subscription. The bulb works forever once commissioned; no account, no cloud, no paywalled features.

---

4. Identity-aware operation (D-BULB-008)

Per Standard 0 (survivor / identity-aware modes), WanderBulb ships three identity-aware features:

4.1 Covert sleep-pattern obfuscation (opt-in)

A bulb that turns off precisely at 22:47 every Tuesday tells a packet observer the household goes to sleep at 22:47 on Tuesdays. Over 2-3 weeks, a sniffer on the household uplink can reconstruct sleep pattern + occupancy schedule + when the household is empty (high-value priors for stalking, harassment, residential burglary targeting LGBTQ+ households).

Obfuscation policy:

User sets a "sleep window" (e.g., 22:00-23:30) + a "wake window" (e.g., 06:00-07:30) via the companion app or WanderNode Hub admin UI
WanderBulb internally schedules the actual on/off transition within ±N minutes of the user-set time (N is configurable; default ±15 min)
The randomization is generated locally on-device (SE051-stored seed + cryptographic PRNG); no external clock dependency
The Matter event log on the bulb itself is unaffected (the user sees their actual sleep window in the app); only the on-the-wire transition timing is randomized within the user-set window
Multiple WanderBulbs in the same household can be configured to randomize independently (per-bulb seed) — observer cannot correlate them to one schedule

Why this matters: for DV-safehouse + stalker-target + LGBTQ+ rural-housing households, the difference between "bedroom light off at 22:47:03" and "bedroom light off some time between 22:32 and 23:02" is the difference between a reconstructed schedule and a noisy schedule.

4.2 No light-state telemetry leaving the device (default-on)

Matter spec permits light-state attribute reporting to the fabric controller — by default, this is local-only (the WanderNode Hub or any local Matter controller)
WanderBulb firmware refuses to participate in Matter "bridge to cloud" topologies (e.g., Apple Home → iCloud sync, Google Home → Google cloud sync) by default; user can explicitly opt-in per-bridge with dual acknowledgment
No vendor (WWP, Eisinger Holdings LLC) telemetry endpoint exists — the firmware has no embedded URL, no analytics SDK, no crash reporter that exfiltrates state
Verified at independent security audit (see GATE.md Stage-10 blocker)

4.3 Panic blackout (mesh-trigger)

A "panic blackout" capability: a single mesh trigger (from WanderAlert Pager, WanderDash door panic, or WanderNode Hub admin "panic" button) instantly turns OFF every WanderBulb in the household.

Use case: DV survivor hears intruder; presses panic button on wrist (WanderBand) or door panel (WanderDash); every WanderBulb in the home goes off in ≤200 ms — household goes dark, survivor can move under cover of darkness
Implementation: Thread mesh group-address broadcast + signed origin token (verified by SE051 + Matter ACL); only mesh-trigger sources with the household's panic-policy ACL can fire it
Restoration: any Matter controller restores normal operation; panic state does not auto-restore (intentional — the household decides when "safe" is)
Lifesafety override: if WanderCO or any WanderAlert Level-2 / Level-3 alarm is active in the same household, panic blackout is suspended — the household needs to see the exit path. WanderCO Level-2/3 wins over panic blackout.

---

5. Saffron tuning (D-BULB-009)

The "saffron-tunable RGBW" framing in the task brief is a specific WanderVerse color-science choice:

Saffron channel = the 4× Cree XQ-E saffron-bin 605 nm red LEDs in the 16-LED engine
The engine can render any RGBWW color point + an additional saffron-emphasized warm point that biases output toward the family saffron accent (605 nm peak)
"Saffron evening" preset (default 19:00-22:00 transition): biases the warm-white channel + saffron channel for a warm + family-accent-coherent room ambiance
"Cool focus" preset (default 09:00-12:00): biases cool-white for daytime focus
"Saffron alert" preset (when WanderAlert mesh fires Level-1 advisory): pulses saffron channel slowly (1 Hz; 30% intensity) — provides visual mesh-rouse without overwhelming the room

The matte-finish saffron rule (per task constraint) applies to the visible base ring + heatsink ONLY — the white optical PC diffuser is NEVER tinted saffron because tinting the diffuser would shift the rendered light spectrum and break high-CRI warm-white claims. Saffron family accent is preserved via the metal chassis surfaces and via the saffron-bin LED channel inside the engine.

---

6. Matter + Thread (D-BULB-002)

WanderBulb is a Matter device running over Thread (not Wi-Fi).

Matter spec: Matter 1.3 baseline (extended-color light cluster + on/off cluster + level-control cluster + scenes cluster + identification cluster); Matter 1.4 readiness via OTA
Thread: Thread 1.3 (full-end-device + sleepy-end-device modes selectable per install — A19 typically full-end-device since AC-powered; Downlight same)
Commissioning: BLE 5.3 commissioning (industry standard); QR code on bulb base + Matter setup code; works with Apple Home / Google Home / SmartThings / Home Assistant / WanderNode Hub
Why Matter + Thread + not Wi-Fi or Zigbee? Matter is the open spec; Thread is the open mesh; Wi-Fi has telemetry-leak + 2.4 GHz coexistence pain; Zigbee is locked to per-vendor coordinators (Hue Bridge, etc.) — Thread mesh participation works across vendors at the spec level.
Why dual-MCU (Nordic nRF52840 primary + TI CC2652R7 alt)? Nordic is the WanderVerse standard for Thread + BLE; TI is the dual-source. Both implement Matter + Thread + the OpenThread stack at parity. No vendor lock-in per Standard 7.

---

7. AC-line input (D-BULB-005)

WanderBulb is mains-powered (120 V AC US / 230 V AC EU + UK):

Topology: isolated buck-derived (TI TPS65086100 with isolation transformer + bridge rectifier + bulk cap)
Why isolated: life-safety + UL 1993 (lamp self-ballasted) cert path requires user-touch surfaces (E26 base contacts during install / removal) be safely isolated from line voltage at all reasonable fault scenarios
Power factor: PFC stage at >0.9 (EnergyStar requirement for residential lighting)
Standby power: <0.5 W (Matter-over-Thread sleepy-end-device + LED OFF)
Active power: ~9 W A19 (800 lm at 90 lm/W typical); ~13 W Downlight (1100 lm)

---

8. Compliance summary (per `COMPLIANCE.md`)

Cert	Status	Notes
UL 1993 (lamp self-ballasted)	red blocker	HARD GATE — required for any sale of US lamp product. Cert ~$25-40k per tier
EnergyStar Lamps V2.1	red blocker	HARD GATE — required for retail sale + landlord-bulk procurement; per-tier cert ~$5-10k
FCC Part 15 B	green blocker	unintentional radiator + Subpart C for Thread radio (Raytac module passthrough)
Matter cert (CSA Connectivity Standards Alliance)	red blocker	HARD GATE — required to claim "Matter device" + use Matter logo. Cert ~$8-15k bundled
Thread Group cert	green	bundled with Matter cert
CE / UKCA + EN 62560 (lamp safety EU)	yellow	required for EU sale
CE EN 55015 lighting EMC	yellow	bundled with CE RED
RoHS / REACH	green	declared
Bluetooth SIG	green	BLE 5.3 commissioning
Apple Home / Google Home interop	green	inherits from Matter cert
Title 24 (CA energy code) compliance	yellow	required for CA sale; informational

Total cert v1: ~$50-80k (UL 1993 + EnergyStar dominate; Matter + FCC + CE bundled).

---

9. Manufacturing + service summary

Ambassador assembly (Standard 1)

Tier-1 for both WanderBulb SKUs (LED engine SMT pre-assembled at EMS; Ambassador handles final-assembly + chassis + functional test + signature)
Per-unit Ambassador time:
A19: ~6 min/unit (~70 units / 8-hr day)
Downlight: ~9 min/unit (~50 units)
Ambassador signature: etched aluminum tag inside base ring; visible only when bulb is removed from socket; per family standard

Per-unit production tests

14 tests per unit (see DFM-DFA-DFT.md)
Includes calibrated integrating-sphere lumen output + CCT spectral verification + Matter commissioning test + Thread mesh interop test
AC hipot test (UL 1993 spec)
LED bin verification (per-LED spectral against Cree / Lumileds / Nichia bin spec)

7-year-parts (Standard 4)

Spare LED engines, chassis, drivers, MCUs, secure elements stocked through year 7
Year 8: STL + schematic + firmware-source release (CC BY-SA 4.0 STLs / CC BY-NC-SA 4.0 firmware)
LEDs themselves are L70-rated >25,000 hr — year-8 release is well after typical replacement life

Service plan (per `SERVICE-FLOW.md`)

2-year standard warranty + extended-warranty options
DIY: bulb screw-out + screw-in (any standard E26 socket); Downlight mounting hardware swappable
Ambassador send-back: LED engine refresh, driver swap, chassis re-anodize
Factory: PCB-level repair, secure-element re-program after major repair

---

10. Revenue + social-impact integration

60/30/10 Community Pool flow (Standard 5)

Per canonical revenue split:

60% → Ambassador wages (1099 → W-2 at revenue trigger)
10% → PrideFund (Ambassador HYSA)
30% → WWP Community Pool (Layer 1 ops ≤65%, Layer 2 Ambassador-voted ≥35%)

Donor-sponsored kits (DV-safehouse + LGBTQ-housing replacement of Hue / commodity)

A WanderVerse household replacing 8-12 Hue or Sengled bulbs is replacing 8-12 telemetry sources. Donor channel sponsors full-household replacement kits at-cost for HAVEN safehouse + 501(c)(3) LGBTQ-housing nonprofits.
Match: WWP grant-matches up to 1:1 from Community Pool

Grant-fundable

HUD HOPWA + Healthy Homes (lighting upgrades for low-income housing)
DOE Better Buildings residential program (LED replacement of incandescent + CFL)
State energy-efficiency program rebates (PG&E, Eversource, etc.) for residential LED retrofit — bulk customers can stack rebates with Ambassador-channel pricing

---

11. Feature inventory (Stage 0 sweep)

Hardware features

Matter-over-Thread + BLE 5.3 commissioning (HARD GATE — Matter cert required)
UL 1993 listed (HARD GATE — required for sale)
EnergyStar Lamps V2.1 listed (HARD GATE — required for retail + landlord-bulk)
16-LED RGBWW engine (4× warm CoB + 4× cool + 4× saffron 605 nm + 2× green + 2× blue) at 800 lm (A19) / 1100 lm (Downlight)
95 CRI warm-white at 2700K target; 90+ CRI at any CCT
UV-A optional channel on Downlight tier
Saffron channel for family-accent rendering
Matte saffron anodized aluminum base ring + heatsink (visible metal surfaces only)
Ambassador-assembled
7-year parts
CC BY-SA 4.0 STLs

Software features

Matter 1.3 baseline (extended-color light + on/off + level-control + scenes + identification clusters)
OpenThread 1.3 stack
BLE commissioning per Matter spec
WanderOS-Bulb on Zephyr (deep-sleep optimized)
Identity-aware: covert sleep-pattern obfuscation (opt-in; per-bulb seed; cryptographic randomization)
Identity-aware: zero light-state telemetry leaving device (default-on; bridge-to-cloud opt-in only)
Identity-aware: panic blackout (mesh-trigger; SE051 ACL-verified; lifesafety override)
6 default scene presets (saffron evening, cool focus, warm dim, daylight, candle, off-by-default-during-panic)
Scene + schedule local on-device (Matter scenes cluster + WanderOS extension for obfuscation)
BLE companion app commissioning (iOS + Android Matter Pairing flow)
WanderNode Hub admin web UI (household lighting fleet management)
Apple Home / Google Home / SmartThings / Home Assistant interop via Matter
Secure-element role token + Matter device attestation cert (NXP SE051)
OTA via Matter OTA Provider Cluster (signed Ed25519; A/B partitions; mesh-fragment fallback)
Local-only event log + scene history (no cloud)

Operational features

Single-bulb + multi-bulb household deployment
Donor-sponsored DV-safehouse / LGBTQ-housing whole-house Hue replacement kits via WWP Community Pool match
HUD HOPWA + DOE Better Buildings + state energy-efficiency grant deployment
Survivor-aware install advisory (covert obfuscation + panic policy briefing) — GUIDE.md §G

---

12. Risk register

#	Risk	Severity	Mitigation
1	UL 1993 + EnergyStar cert delays beyond 2027-Q2	red	Lab booking 2026-Q4; reference unit ready EVT
2	Matter cert (CSA) timeline slips	red	CSA cert lab is Matter-specific; book in 2026-Q4 alongside UL
3	Thread mesh interop with non-WanderVerse Matter controllers (Apple Home / Google Home / SmartThings / Home Assistant)	yellow	Matter cert is the gate; WWP runs interop test matrix at DVT against all 4 major controllers
4	LED CCT drift over lifetime (warm-white binning consistency)	yellow	Per-LED bin sort at incoming inspection; Ambassador integrating-sphere QC
5	AC-line isolated buck design failure at scale (UL 1993 + life-safety)	red	EE hire with lighting-product UL 1993 experience; reference design from TI + Lumileds app notes; pre-cert lab pre-scan at EVT
6	Identity-aware obfuscation breaks Matter spec compliance (Matter spec assumes deterministic event reporting)	yellow	Obfuscation only affects on-the-wire transition timing; Matter scenes + clusters report nominal user-set times; verified at Matter cert
7	Panic blackout firmware failure (does NOT fire when expected)	red	Triple-layer: Thread mesh group broadcast + SE051 ACL + firmware fallback to direct off-on-mesh-rx; independent security audit at PVT
8	Nordic nRF52840 supply disruption	yellow	TI CC2652R7 dual-source qualified at DVT
9	Lumileds / Nichia / Cree LED supply disruption	yellow	Multi-vendor LED engine; per-channel alt vendors qualified
10	Engineering hire timeline slips	red	Shared engineering pool with WanderHub + Bridge Mini; pipeline started 2026-Q3

---

13. Conflict register

Resolved per DECISIONS.md D-BULB-001 through D-BULB-010. Key conflicts:

D-BULB-001: Matte saffron finish on diffuser vs visible base ring only — RESOLVED; saffron rule applies to base ring + heatsink ONLY (per task constraint); diffuser stays white optical PC for color-accurate output
D-BULB-005: AC-line isolated buck topology choice — RESOLVED via TI TPS65086100 + isolation transformer (vs non-isolated buck which would fail UL 1993 user-touch hipot test)
D-BULB-007: UV-A channel scope — RESOLVED on Downlight only (insect-trap + advisory mode); A19 v1.0 ships RGBWW only (saves cost + cert burden + addresses lower-CRI risk if UV-A leaks)
D-BULB-008: Identity-aware features (covert obfuscation + panic blackout) — RESOLVED via SE051 ACL + Matter-spec-compliant on-the-wire-only randomization (Matter spec compliance verified pre-cert)
D-BULB-010: No Wi-Fi in v1 — RESOLVED; Matter-over-Thread is the only path; Wi-Fi adds telemetry-leak surface + coexistence pain

No software conflicts with existing WanderVerse specs.

---

14. Marketing language gate

Words we DO use:

"Matter-over-Thread smart bulb"
"Local-only smart bulb (no vendor cloud)"
"Replacement for Philips Hue + Sengled at the household level"
"Identity-aware lighting (covert obfuscation; panic blackout; opt-in)"
"High-CRI saffron-tunable RGBWW"
"Ambassador-assembled at WWP wages"

Words we do NOT use:

"Smart bulb that works without internet" (technically true but undersells Matter; replace with "Matter local-only smart bulb")
"Hue killer" — comparative claims invite reverse claims
"Privacy-first smart bulb" without substantiation — every smart-bulb vendor uses this phrase; we substantiate via independent security audit + zero-cloud architecture
"Smart bulb that hides your sleep" — covert obfuscation is opt-in survivor-pattern feature, not a marketed mass-market claim
(Style-guide-banned terms — "next-generation", "comprehensive", "comprehensive", "sub-60-second", "proven", "significant" — never used in any WanderBulb copy)

---

15. Ship discipline

v1.0 launch: 2027-Q3 A19 → 2027-Q4 Downlight — both gated by UL 1993 + EnergyStar + Matter cert
v1.1 (3 months post-ship): UX polish; companion app feature depth; first survivor-user-feedback integration; additional scene presets
v1.2 (6 months post-ship): BR30 form factor evaluation; PAR16 / GU10 evaluation
v2 (2028-2029, conditional): WanderBulb Outdoor (PAR38 floodlight); WanderBulb Strip (linear under-cabinet)

---

16. Ambassador + Community Pool integration

(verbatim from _TEMPLATES/_community-pool.md + _ambassador-signature.md + _seven-year-parts.md):

How the money flows

Every sale of a WanderBulb SKU is divided three ways:

60% pays the Ambassador who assembled the unit — a living wage for skilled hardware-assembly work
10% seeds PrideFund — community-held HYSA accruing for Ambassador-voted initiatives
30% funds the WWP Community Pool — the 501(c)(3) nonprofit. Subject to 65/35 charter rule.

Ambassador signature mark

Every WanderBulb unit carries an etched aluminum tag inside the base ring (visible only when removed from socket):

Ambassador ID (pseudo-random alphanumeric)
Assembly date
Unit serial number
LED bin reference (per-channel bin sort metadata)

Seven-year parts

Every spare part for WanderBulb is available for 7 years from ship date, via Ambassador network, at cost + 10%. Year 8: every manufacturing file is published.

What "parts" includes:

Mechanical assemblies (chassis, base ring, heatsink, diffuser, downlight trim)
All sub-boards + modules (LED engine PCBA, driver PCBA, MCU + SE051 module)
LED kits (per-channel refresh kit if any LEDs fail beyond L70)

What "parts" does NOT include:

Standard E26 base contacts (industry-standard, sourceable from any aftermarket)
Downlight J-Box mounting hardware (industry-standard)

---

This spec is the source of truth for the WanderBulb family. Companion docs (DECISIONS.md, BOM-platform.csv, BOM-modules.csv, BOM-normalized.csv, CONFIGURATOR.md, COMPATIBILITY.md, SOURCING.csv, DFM-DFA-DFT.md, THERMAL-EMC.md, COMPLIANCE.md, GUIDE.md, HW-FW.md, SERVICE-FLOW.md, GATE.md, STL-OPEN-FILES/README.md, _VALIDATION-AND-SENSOR-EXPANSION.md, _COMPETITIVE-AUDIT-2026-04-25.md, _MANIFEST.md) elaborate; this spec governs.

The full file.