WanderBulb Family — Decision Log
Running log of every keep/swap/drop decision across WanderBulb A19 + WanderBulb Downlight. Citations per entry. Lamp self-ballasted UL 1993 + EnergyStar Lamps + Matter cert + identity-aware obfuscation rigor > all else.
This document is the refinement of /tmp/draft-wanderbulb-DECISIONS.md (local-LLM draft validated 96/100) into the full SOP v2.4 decision-log artifact.
---
Stage 0 — Feature-parity sweep (2026-04-25)
- Decision: 2-tier family (WanderBulb A19 $24 / WanderBulb Downlight $49) with shared platform (Nordic nRF52840 + 16-LED RGBWW engine + AC-line isolated buck + saffron base ring + Matter-over-Thread + BLE 5.3 commissioning) + Downlight-tier addition (UV-A optional channel + larger heatsink + recessed-canister chassis).
- Source: competitive audit vs Philips Hue White & Color A19 ($39-50), Sengled Smart Wi-Fi ($12-18), Wyze Bulb Color ($14), Nanoleaf Essentials A19 Matter ($20), GE Cync Full Color A19 ($15-25), generic Tuya / Smart Life white-label commodity ($8-15). See
_COMPETITIVE-AUDIT-2026-04-25.md.
- Flags: Hue has 10+ years of pedigree + brand + Hue Hub ecosystem depth. Sengled / Wyze / GE Cync / Tuya commodities lead on price + brand; Nanoleaf Essentials Matter A19 is the closest architectural competitor (Matter-over-Thread; $20 retail). We do NOT compete on price-floor (commodity) or brand-pedigree (Hue) — we compete on (a) Matter-over-Thread + zero-cloud architecture, (b) identity-aware features (covert obfuscation + panic blackout), (c) saffron family-accent + WanderVerse mesh integration, (d) Ambassador-assembled + 60/30/10 social impact, (e) STL-open + 7-year parts.
- Lead axes: Matter local-only · identity-aware obfuscation + panic blackout · saffron family integration · subscription-free core · open STLs · 7-year parts · grant-funded plausibility (DOE Better Buildings + HUD HOPWA + state energy-rebates).
- Lag axes: brand recognition (Hue dominant) · category-lowest price (Sengled / Wyze / Tuya · scene-library polish (Hue's app has 10+ years of UX iteration) · color-rendering at extreme CCT (Hue 2200K-6500K coverage is wider than ours v1).
[rule: 60/30/10] — revenue allocation per Standard 5: 60% Ambassador wages + 10% PrideFund + 30% WWP Community Pool.
---
Stage 1 — Intake + freeze (2026-04-25)
- Device IDs assigned:
WV-BULB-A19, WV-BULB-DOWN.
- Revision frozen:
v1.0-candidate.
- Ship target locked: A19 2027-Q3 (UL 1993 + EnergyStar + Matter cert hard gate) · Downlight 2027-Q4 (+ UV-A channel cert delta).
- Entity: Eisinger Holdings LLC (hardware margin); feeds 60/30/10 Community Pool per canonical split.
- No Blueprint reference bundle for WanderBulb — spec dictated by Matter + Thread + UL 1993 + EnergyStar Lamps + identity-aware-lighting framework. Per task spec: NO Perplexity queries.
---
D-BULB-001 — 16-LED RGBWW engine architecture (Stage 0; saffron-tunable)
- Context: "Saffron-tunable RGBWW" framing in the task brief means the LED engine must render any RGBWW color point + an additional saffron-emphasized warm point that biases output toward the WanderVerse family saffron accent (605 nm peak). Standard RGBWW engines (3-4 LEDs: red + green + blue + warm-white + cool-white) cover the basic color space but render saffron as a mix of red + warm-white — which approximates 605 nm but isn't true-saffron.
- Decision 2026-04-25: Ship a 16-LED engine with explicit per-channel breakdown:
- 4× Lumileds LUXEON CoB Warm 2700K 95 CRI (warm-white channel; high-CRI baseline)
- 4× Nichia NF2W757GT-V3 6500K (cool-white channel; daylight + focus)
- 4× Cree XQ-E saffron-bin 605 nm (saffron channel; family-accent rendering — cited from
parts.db: wanderalert)
- 2× Lumileds LUXEON Z Color 525 nm (green channel)
- 2× Lumileds LUXEON Z Color 470 nm (blue channel)
- 1× Nichia NCSU275A 365 nm UV-A (Downlight only; insect-trap + advisory mode)
- Why 4 saffron LEDs (not 1 or 2): the saffron channel is the family-defining color; need enough lumen contribution to render saffron-emphasized warm at room-illumination level (not just an accent dot)
- Why 4 warm + 4 cool (not 2+2): high-CRI requires the warm + cool channels carry the bulk of the luminance; per-LED bin matching keeps CCT consistent across the bulb-to-bulb fleet
- Cost impact: 16 LEDs × ~$0.45 avg = $7.20 BOM for engine; competitive with Hue (~$8-12 LED engine cost) and above Sengled commodity (~$2-3); justifies premium pricing
- Conflict resolution: Matte-finish saffron rule (per task constraint) applies to visible base ring + heatsink ONLY — never to the diffuser. The white optical PC diffuser preserves color-accurate light output; saffron family accent is preserved via the metal chassis surfaces and the saffron-bin LED channel inside the engine. [rule: saffron]
---
D-BULB-002 — Matter-over-Thread + BLE 5.3 commissioning; NO Wi-Fi
- Context: WanderBulb is a household lighting endpoint. Three radio-architecture options: (a) Wi-Fi (commodity Sengled / Wyze / Tuya pattern), (b) Zigbee with vendor coordinator (Hue Hub pattern), (c) Matter-over-Thread (modern open-spec pattern; Apple Home / Google Home / SmartThings / Home Assistant native).
- Decision: Matter-over-Thread + BLE 5.3 commissioning. No Wi-Fi. Matter 1.3 baseline; Thread 1.3 (full-end-device default since AC-powered).
- Why no Wi-Fi: (a) Wi-Fi telemetry-leak surface is large (every commodity smart-bulb vendor's cloud breach has been Wi-Fi-attached endpoints); (b) Wi-Fi 2.4 GHz coexistence with BLE + Thread is painful; (c) Wi-Fi requires household-router credentials at commissioning — Matter QR + setup-code is more privacy-respecting; (d) Matter-over-Thread is the open-spec direction the industry is consolidating toward (Apple Home + Google Home + SmartThings + Home Assistant all support it natively as of 2024-2025).
- Why Matter (not Zigbee): Zigbee requires per-vendor coordinators (Hue Bridge, etc.) — locked ecosystem. Matter is the open spec; Thread is the open mesh; works across vendors at the spec level. The Hue 2023 forced-account migration is the case-study: customers paid for Hue hardware, then Philips changed cloud rules unilaterally. Matter-over-Thread eliminates the vendor-cloud dependency.
- Modes covered (Mode 1/2/3):
- Mode 1 standalone: physical wall switch on/off; bulb works as standard non-smart bulb if no Matter fabric is present (UL 1993 + EnergyStar baseline)
- Mode 2 industry-integrated: Matter 1.3 + Thread 1.3 (works with any Matter controller — Apple Home, Google Home, SmartThings, Home Assistant)
- Mode 3 WanderVerse-native: WanderNode Hub Matter fabric controller + identity-aware features (covert obfuscation + panic blackout) [rule: dual-mode]
---
D-BULB-003 — Host MCU: Nordic nRF52840
- Context: WanderBulb host MCU needs Matter + Thread + BLE 5.3 + cryptographic primitives + low-power modes + community SDK (Nordic / TI / Espressif are the major options). Per Standard 7 (dual-source), at least one alt must be qualified at DVT.
- Decision: Nordic nRF52840 as primary host MCU. Reused from router_standard, router_pro_v2, router_ultra, wandercar_family, bridge_full per
parts.db. Raytac MDBT50Q-512K module passthrough for FCC modular cert (saves $20-40k cert cost per region).
- Why Nordic nRF52840: (a) WanderVerse standard for Thread + BLE per
parts.db (5 prior product reuse points); (b) Nordic FAE relationship + community-driven OpenThread + Zephyr SDK; (c) Matter spec compliance is well-documented + reference-driver-supported; (d) integrated cryptographic accelerators handle Matter device-attestation cert (DAC) + Thread mesh signing.
- Dual-source: TI CC2652R7 qualified at DVT — Thread + Zigbee + ARM Cortex-M4F; pin-compatible reference board path; OpenThread + Zephyr both support both vendors at parity. [rule: dual-source]
- Why not Espressif ESP32-S3? ESP32-S3 is the WanderAlert + WanderCO + Security Trio standard (those products use Wi-Fi + BLE + LoRa). WanderBulb has NO Wi-Fi by design (per D-BULB-002), so the ESP32-S3 Wi-Fi advantage is irrelevant. Nordic + TI are the natural Thread-only choices.
---
D-BULB-004 — Saffron LED channel: Cree XQ-E saffron-bin 605 nm (4×)
- Context: WanderVerse family saffron accent is 605 nm. Cree XQ-E saffron-bin is the family-wide standard cited from
parts.db (wanderalert, wanderhub-class router_*). WanderBulb saffron channel needs sufficient lumen contribution to render saffron-emphasized warm at room-illumination level (not just an indicator-dot like wanderalert / wanderco).
- Decision: 4× Cree XQ-E saffron-bin 605 nm in the LED engine. Per-LED ~80 lm at drive current → 320 lm peak saffron channel → enough to bias engine color point without dominating warm-white channel. Drive via TI TLC59281 16-channel constant-current sink (driven by NXP PCA9685 PWM). Reused from
parts.db: wanderalert (Cree XQ-E saffron 1W reference).
- Lifetime: Cree XQ-E rated >50,000 hr L70 — far exceeds typical bulb replacement cycle.
- Cost impact: 4× Cree XQ-E saffron at ~$0.45/LED = $1.80 BOM for saffron channel. [rule: saffron]
---
D-BULB-005 — AC-line input: TI TPS65086100 + isolation transformer (UL 1993 hipot)
- Context: WanderBulb is mains-powered (120 V AC US / 230 V AC EU). UL 1993 (lamp self-ballasted) cert path requires user-touch surfaces (E26 base contacts during install / removal) be safely isolated from line voltage at all reasonable fault scenarios. Two topology choices: isolated buck (transformer + bridge rectifier + bulk cap + buck stage) or non-isolated buck (line-connected; cheaper but harder to pass UL 1993 hipot).
- Decision: Isolated buck-derived topology: bridge rectifier → bulk cap → flyback or LLC isolation transformer → secondary-side buck regulator (TI TPS65086100) → 3.3 V + 5 V + 12 V rails for MCU + LED engine + driver.
- Why isolated: (a) UL 1993 user-touch hipot at 1.5 kV / 60 s requires isolation between line + secondary; non-isolated buck typically fails this test; (b) isolated topology is the safer + EnergyStar-compatible choice; (c) PFC stage at >0.9 (EnergyStar Lamps V2.1 requirement) is easier to design at isolated-secondary; (d) reduces shock-hazard liability for user installation.
- PMIC: TI TPS65086100 reused from
parts.db (12+ prior product reuse: bridge_full, bridge_mini, medical_tricorder_family, router_standard, router_pro_v2, router_ultra, security_trio, wanderalert, wanderband, wanderbreath, wanderco, wandercar_family, wanderreader, wanderspeaker_v2, wandertherm). NEW in WanderBulb is the AC-line input topology + isolation transformer — the PMIC itself is the family standard. [rule: 7yr-parts] — TPS65086100 is the family-wide PMIC that we stock through year 7+ across all products; AC-line isolation transformer is NEW to WanderBulb but sourceable from multiple Würth / Coilcraft / Pulse vendors.
- Cost impact: isolated buck stage adds ~$2.50 BOM vs non-isolated; UL 1993 cert path is straightforward.
---
D-BULB-006 — High-CRI warm-white: Lumileds LUXEON CoB Warm 2700K 95 CRI (4×)
- Context: 95 CRI warm-white is the defining quality attribute of premium-residential lighting. Hue White & Color claims 80 CRI; Sengled commodity claims 80 CRI; Nanoleaf Essentials claims 90 CRI. Going to 95 CRI puts WanderBulb at the premium-residential ceiling.
- Decision: 4× Lumileds LUXEON CoB Warm 2700K 95 CRI as the warm-white channel. Per-LED ~250 lm at drive current → 1000 lm peak warm-white → covers A19 800 lm spec with margin + Downlight 1100 lm spec.
- Why Lumileds LUXEON CoB: (a) data point cited from
parts.db — security_trio uses LUXEON 3535L 1200 lm dimmable at $8.00 BOM; LUXEON CoB is the higher-CRI variant; (b) Lumileds is the residential-LED industry standard for high-CRI; (c) 95 CRI rating is verifiable at integrating-sphere QC at Ambassador station.
- Cost impact: 4× Lumileds LUXEON CoB at ~$0.85/LED = $3.40 BOM for warm-white channel.
- Why not all-RGBW (no white channel)? RGBW-only engines render warm-white as red + green + a bit of warm — render index <80 CRI, not premium. White channel is non-negotiable for premium-residential framing.
---
D-BULB-007 — UV-A channel: Downlight tier ONLY
- Context: UV-A (365 nm) channel is useful for two scenarios: (a) insect-trap supplemental for outdoor / kitchen-adjacent installs; (b) advisory-mode visualization (e.g., highlight a detail in a scene). UV-A LEDs cost $1.50-3.00 BOM each + add cert burden (UV exposure cert + IEC 62471 photobiological safety) + add complexity to the LED driver chain.
- Decision: UV-A channel on Downlight tier ONLY. 1× Nichia NCSU275A 365 nm UV-A. A19 v1.0 ships RGBWW only (no UV-A) — saves cost + cert burden + addresses lower-CRI risk if UV-A leaks across spectrum.
- Why Downlight only: (a) Downlight has more thermal headroom for UV-A (higher heatsink); (b) Downlight is more often kitchen-adjacent (insect-trap use case); (c) the $25 retail delta from A19 to Downlight justifies the UV-A cost adder; (d) cert burden is bounded to one SKU.
- Cert path: IEC 62471 photobiological safety (Group 0 = no risk; Group 1 = low risk; Group 2 = moderate); Nichia NCSU275A is rated to be in Group 0/1 at typical drive currents — bundled with UL 1993 lab visit.
- Cost impact: UV-A LED ~$2.20 BOM + driver channel + cert delta ~$1500 → reflected in Downlight $49 retail margin.
---
D-BULB-008 — Identity-aware features: covert obfuscation + zero telemetry + panic blackout — CONTROVERSIAL; advisory-panel gated
- Context: Per Standard 0 (identity-aware), WanderBulb must accommodate survivor populations + threat-modeled households (DV-safehouse, LGBTQ+ rural housing, BIPOC tenants in landlord-network surveillance). The Hue / Sengled / Tuya / Wyze category broadcasts on/off events to vendor cloud + the household router by default — a presence beacon. WanderBulb must be architecturally different.
- Decision: Three identity-aware features at v1.0:
Covert sleep-pattern obfuscation (opt-in)
- User sets a "sleep window" + "wake window" via companion app or WanderNode Hub admin UI
- WanderBulb internally schedules the actual on/off transition within ±N minutes (default ±15 min) of the user-set time
- Randomization generated locally on-device via SE051-stored seed + cryptographic PRNG
- Matter event log + companion app shows nominal user-set times; only on-the-wire transition timing is randomized within the user-set window
- Per-bulb seed (different bulbs randomize independently → observer cannot correlate to single schedule)
Zero light-state telemetry leaving device (default-on)
- Matter spec permits light-state attribute reporting to fabric controller — by default, WanderBulb participates in local Matter fabric only
- Firmware refuses to participate in Matter "bridge to cloud" topologies (Apple Home → iCloud sync, Google Home → Google cloud sync) by default — user can explicitly opt-in per-bridge with dual acknowledgment
- No vendor (WWP, Eisinger Holdings LLC) telemetry endpoint exists — firmware has no embedded URL, no analytics SDK, no crash reporter that exfiltrates state
- Verified at independent security audit (
GATE.md Stage-10 blocker)
Panic blackout (mesh-trigger)
- Single mesh trigger from WanderAlert Pager / WanderDash door panic / WanderNode Hub admin "panic" button → every WanderBulb in household OFF in ≤200 ms
- Use case: DV survivor hears intruder; presses panic on wrist (WanderBand) or door (WanderDash); household goes dark; survivor can move under cover
- Implementation: Thread mesh group-address broadcast + signed origin token (verified by SE051 + Matter ACL); only mesh-trigger sources with the household's panic-policy ACL can fire
- Restoration: any Matter controller restores normal operation; panic state does NOT auto-restore (intentional — household decides when "safe" is)
- Lifesafety override: if WanderCO or any WanderAlert Level-2 / Level-3 alarm is active in same household, panic blackout is suspended — household needs to see the exit path. WanderCO Level-2/3 wins over panic blackout.
- Triple-layer enforcement:
1. Firmware: panic-blackout code path verifies origin signature + Matter ACL 2. SE051: stores household panic-policy ACL (read-only after Ambassador program); firmware reads on every panic event 3. Lifesafety override: WanderCO + WanderAlert Level-2/3 alarms suppress panic blackout; verified by mesh-protocol cross-check
- Advisory panel review (Stage-10 gate):
- DV advocate panel (≥2 working DV advocates from HAVEN + national-DV-orgs)
- LGBTQ+ DV survivor panel (≥2 willing to consult under NDA, brokered through trauma-informed counsel)
- Veto rights apply to all external comms re: covert mode + panic feature framing
- Marketing language gate: covert sleep-pattern obfuscation + panic blackout NEVER mentioned in promotional copy without survivor-advocate veto right. Documented in
_MANIFEST.md §Hard gates + WANDERBULB-FAMILY-SPEC.md §14. [rule: identity-aware] [rule: zero-cloud]
---
D-BULB-009 — Saffron tuning preset family
- Context: WanderVerse family saffron accent (605 nm) is the visual identity. WanderBulb LED engine has 4× saffron channel (D-BULB-001) — the engine can render any RGBWW color point + an additional saffron-emphasized warm point.
- Decision: 6 default scene presets shipped at v1.0:
- Saffron evening (default 19:00-22:00 transition): biases warm-white + saffron channels for warm + family-accent-coherent room ambiance
- Cool focus (default 09:00-12:00): biases cool-white channel for daytime focus
- Warm dim (default 22:00-06:00): biases warm-white at 10-20% brightness for low-light navigation
- Daylight (default 12:00-15:00): balances warm + cool for color-accurate task lighting
- Candle (event-mode preset): biases saffron + warm-white at flicker pattern (slow PRNG-driven 0.5-2 Hz brightness modulation; ±10% brightness)
- Saffron alert (when WanderAlert mesh fires Level-1 advisory): pulses saffron channel slowly (1 Hz; 30% intensity) — visual mesh-rouse without overwhelming the room
- All presets local-only — stored on SE051 (encrypted) + companion app local cache; no cloud preset library
- User-customizable: any preset can be edited; users can create + share custom presets via STL-style CC BY-SA 4.0 community library at
wanderverse.com/wanderbulb/presets. [rule: saffron]
---
D-BULB-010 — Ambassador-assembled per family standard
- Context: Standard 1 mandates Ambassador-assembled hardware. WanderBulb assembly = LED engine PCBA pre-assembled at EMS (smt + CoB + driver placement) + Ambassador handles final-assembly into chassis + functional test + signature.
- Decision: Tier-1 Ambassador assembly for both SKUs. Per-unit time:
- A19: ~6 min/unit (~70 units / 8-hr day)
- Downlight: ~9 min/unit (~50 units)
- Stations needed (per
DFM-DFA-DFT.md):
- LED engine chassis-fit station
- Integrating-sphere lumen + CCT QC station (NEW; ~$8-12k bench setup)
- Matter commissioning + Thread interop test station (NEW; ~$3-5k)
- AC hipot test station (UL 1993 spec; ~$2-4k)
- Ambassador signature station (etched aluminum tag inside base ring; existing)
- Ambassador signature: etched aluminum tag inside base ring (visible only when bulb is removed from socket); per family standard. [rule: ambassador]
---
Stage 2 — Component selection summary (2026-04-25)
Per BOM-platform.csv + BOM-modules.csv. Highlights:
| Function | Part | Reuse status |
|---|
| Host MCU (2-tier shared) | Nordic nRF52840 (Raytac MDBT50Q-512K module) | Reused per `parts.db`: router_standard, router_pro_v2, router_ultra, wandercar_family, bridge_full |
| Alt MCU (dual-source) | TI CC2652R7 | NEW for parts library |
| LED PWM driver | NXP PCA9685 16-channel | NEW for parts library |
| LED constant-current sink | TI TLC59281 16-channel | NEW for parts library |
| Warm-white CoB (4×) | Lumileds LUXEON CoB Warm 2700K 95 CRI | Reused-by-pattern from `parts.db`: security_trio LUXEON 3535L |
| Cool-white SMD (4×) | Nichia NF2W757GT-V3 6500K | NEW for parts library |
| Saffron 605 nm (4×) | Cree XQ-E saffron-bin | Reused per `parts.db`: wanderalert |
| Green (2×) | Lumileds LUXEON Z Color 525 nm | NEW |
| Blue (2×) | Lumileds LUXEON Z Color 470 nm | NEW |
| UV-A (Downlight only) | Nichia NCSU275A 365 nm | NEW |
| AC-DC isolated buck PMIC | TI TPS65086100 + isolation transformer | Reused PMIC (12+ products per `parts.db`); transformer NEW |
| Secure element | NXP SE051 | Reused (wanderband + wanderalert + wanderco + security_trio) |
| Flash NOR | Macronix MX25R 4 MB | Reused |
| Thread radio module | Raytac MDBT50Q-512K | NEW |
| Chassis matte saffron anodized aluminum | Custom CNC + Type II saffron anodize | NEW |
| Diffuser white optical PC (A19) | Custom injection-molded | NEW |
| Diffuser white optical PC (Downlight) | Custom injection-molded | NEW |
See BOM-platform.csv, BOM-modules.csv, BOM-normalized.csv, SOURCING.csv for full part list + sourcing.
---
Stage 2b — Configurator axes (2026-04-25)
5 axes per tier. See CONFIGURATOR.md for full matrix. Summary:
- WanderBulb A19: chassis finish (matte saffron / charcoal / brushed) · Matter fabric (any controller) · covert obfuscation eligibility (default-off / survivor-pattern eligible — requires WWP review) · Ambassador signature · donor-pairing
- WanderBulb Downlight: all A19 axes + UV-A enable (default-off / kitchen-insect-trap-on / advisory-mode-on) + downlight trim ring color (matte saffron / matte charcoal / cream-anodize)
---
Stage 3 — Compatibility (2026-04-25)
Resolved:
- 2.4 GHz Thread + 2.4 GHz BLE 5.3 commissioning: TDM via Nordic nRF52840 builtin coexistence framework. Standard.
- AC-line input + isolated buck + LED engine: standard isolated-flyback design; PFC at >0.9 (EnergyStar) verified at EVT.
- 16-LED engine drive current sequencing: PCA9685 PWM + TLC59281 constant-current sink; per-channel 12-bit grayscale × 8-bit drive = 20-bit effective dimming range.
- LED bin matching across A19 + Downlight: per-LED bin sort at incoming inspection + Ambassador integrating-sphere QC ensures bulb-to-bulb CCT ±200 K consistency.
- Saffron-bin Cree XQ-E 605 nm: bin-matched to family-wide saffron accent (matches WanderAlert + WanderCO + WanderDash visible saffron at ±5 nm).
Deferred to Stage 5 (PCB layout):
- Thread chip antenna placement vs LED driver switching noise (RF-quiet zone enforcement)
- AC-line isolation transformer placement (creepage + clearance for UL 1993)
- Heatsink-to-LED thermal interface (thermal pad + thermal-vias)
- Diffuser optical-coupling to LED engine (uniform illumination across diffuser surface)
---
Stage 4 — Sourcing (2026-04-25, framework only)
See SOURCING.csv. Live RFQs deferred until UL 1993 cert lab engaged + engineering hire onboarded.
Critical dual-source flags:
- Nordic nRF52840 — single-source-class via Raytac module; alt = TI CC2652R7 qualified at DVT
- Lumileds LUXEON CoB Warm 95 CRI — single-OEM; alt = Cree COB-J class qualified at DVT
- Nichia NF2W757GT-V3 — single-OEM; alt = Lumileds 5630 series qualified at DVT
- Cree XQ-E saffron-bin 605 nm — single-OEM; alt = OSRAM LUW H9GP saffron-class qualified at DVT (different family-wide saffron accent at +/- 5 nm; verify at DVT)
- AC-line isolation transformer — multi-vendor (Würth / Coilcraft / Pulse Electronics / TDK) — qualified at engineering hire RFQ
---
Stage 5 — DFM/DFA/DFT (2026-04-25)
See DFM-DFA-DFT.md. Critical:
- Integrating-sphere lumen + CCT QC at Ambassador station (~$8-12k bench setup; amortized over family + future WanderVerse lighting products)
- AC hipot test fixture (UL 1993 1.5 kV / 60 s; ~$2-4k)
- Matter commissioning + Thread interop test station (~$3-5k)
- Ambassador throughput: A19 6 min · Downlight 9 min
- LED bin sort at incoming inspection — critical for bulb-to-bulb CCT consistency
---
Stage 6 — Thermal/EMC (2026-04-25)
See THERMAL-EMC.md. LED thermal management is the critical design item.
- 16-LED engine at full RGBWW + saffron drive: ~9 W A19 / ~13 W Downlight
- Aluminum heatsink (matte saffron anodized) is primary heat-spreader — must keep junction-temp <85 °C at +25 °C ambient for L70 50,000 hr lifetime
- A19: heatsink fins 30 × 50 mm × 10× = ~150 cm² surface area; passive convection
- Downlight: larger heatsink (recessed canister provides additional thermal mass + airflow)
- Operating range: 0 to +50 °C ambient (UL 1993 standard); thermal-aware firmware backoff at >+45 °C ambient
---
Stage 7 — Compliance (2026-04-25)
See COMPLIANCE.md.
Cert sequencing (target):
- UL 1993 (lamp self-ballasted) — initiated 2026-Q4, granted 2027-Q2
- EnergyStar Lamps V2.1 — initiated 2026-Q4, granted 2027-Q2 (bundled lab visit)
- Matter cert (CSA Connectivity Standards Alliance) — initiated 2026-Q4, granted 2027-Q1
- FCC Part 15 B/C — DVT 2027-Q1 (Raytac module passthrough for Subpart C)
- CE / UKCA + EN 62560 + EN 55015 — bundle with FCC test data 2027-Q2
- IEC 62471 photobiological safety (UV-A; Downlight only) — bundled with UL 1993
- Bluetooth SIG (BLE 5.3 commissioning) — DVT 2027-Q2
- RoHS / REACH — declared throughout
Total cert v1: ~$50-80k.
---
Stage 8 — Canonical BOM + GUIDE + STLs (2026-04-25)
Files produced. STL-OPEN-FILES/README.md documents CC BY-SA 4.0 release for every 3D-printable part:
- A19 diffuser variants (clear / opal / frosted)
- Downlight trim ring variants
- Ambassador-tag-holder (interior)
- Custom heatsink variants (advanced; voids UL listing if used)
---
Stage 9 — HW/FW (2026-04-25)
WanderOS-Bulb on Zephyr 3.7+ on Nordic nRF52840. Matter 1.3 baseline; Thread 1.3 (full-end-device default). Single firmware codebase for both tiers (Downlight adds UV-A driver + thermal-headroom compile-time flag). OTA via Matter OTA Provider Cluster (signed Ed25519; A/B partitions). Identity-aware features: covert obfuscation (SE051-seeded PRNG; Matter-spec-compliant on-the-wire-only randomization) + panic blackout (Thread mesh group-broadcast + SE051 ACL).
---
Stage 10 — Gate (2026-04-25)
See GATE.md. Stage-10 blockers: 1. UL 1993 cert granted (HARD GATE — any sale) 2. EnergyStar Lamps V2.1 cert granted (HARD GATE — retail + landlord-bulk) 3. Matter cert (CSA) granted (HARD GATE — Matter device claim + interop) 4. Identity-aware feature lockout independent security audit (panic blackout origin verification; covert obfuscation Matter-spec compliance; zero-telemetry firmware audit) 5. Advisory panel review (DV advocate + LGBTQ+ DV survivor panels for covert + panic feature framing) 6. FCC Part 15 + CE RED + EN 62560 + EN 55015 7. Bluetooth SIG qualification 8. IEC 62471 photobiological safety (UV-A; Downlight) 9. Title 24 (CA energy code) compliance
---
Grant-funding plausibility (decision context, not a commitment)
| Program | Why it fits | Range | Application timing |
|---|
| **DOE Better Buildings residential** | LED replacement of incandescent + CFL in low-income housing | $25k-1M | 2027 application window |
| **HUD HOPWA** | LGBTQ-housing emergency-comms + lighting upgrades | varies | rolling — pass-through |
| **State energy-efficiency rebate programs** (CA, MA, NY, CT) | per-bulb buy-down for residential LED retrofit | $1-5/bulb | rolling — bulk-customer stack |
| **HUD Healthy Homes** | lighting + ventilation upgrades (paired with WanderCO) | $25k-2M | candidate — paired |
| **VAWA housing transition pools** | DV-safehouse safety upgrades | varies | rolling — through HAVEN |
WanderBulb is NOT a grant-funded product in the sense that we depend on grants to ship — the LLC pays for v1 cert from forecast hardware revenue. Grants are an accelerator for HAVEN-safehouse + LGBTQ-housing whole-house Hue-replacement deployments + a stack-able component on landlord-channel pricing.
---
Critical open items (revalidated)
| Item | Severity | Action owner | Deadline |
|---|
| Engineering team hire (EE + FW + UL 1993 lighting-product specialist; shared with WanderHub + Bridge Mini pool) | red | Michael | NOW — 2026-Q3 start |
| UL 1993 + EnergyStar Lamps V2.1 cert lab engagement (UL direct / Intertek / TUV SUD — bundled lab visit) | red | cert team + Michael | 2026-Q4 |
| Matter cert (CSA Connectivity Standards Alliance) lab engagement | red | engineering + CSA membership | 2026-Q4 |
| Advisory panel formation (DV advocate + LGBTQ+ DV survivor panels for covert + panic features) | red | Michael + WanderSafe team + trauma-informed counsel | 2026-Q4 (pre-EVT) |
| Nordic nRF52840 + TI CC2652R7 dual-source qualification | red | engineering hire | 2027-Q1 |
| LED engine multi-vendor RFQ (Lumileds + Nichia + Cree per-channel) | yellow | engineering hire | 2027-Q1 |
| AC-line isolation transformer dual-vendor qualification (Würth / Coilcraft / Pulse / TDK) | yellow | engineering | 2027-Q1 |
| Identity-aware obfuscation independent security audit (covert PRNG seed + panic blackout origin verification + zero-telemetry firmware audit) | red | external security firm + counsel | 2027-Q1 (pre-PVT) |
| Matter cert interop testing — Apple Home + Google Home + SmartThings + Home Assistant + WanderNode Hub | red | engineering | 2027-Q2 |
| Saffron anodize finish vendor qualification (color-match across A19 + Downlight + family-wide saffron on WanderAlert + WanderCO + WanderDash) | yellow | ops + engineering | 2027-Q1 |
| Title 24 (CA energy code) compliance | yellow | cert team | 2027-Q2 |
| HAVEN safehouse + LGBTQ-housing donor program legal structuring | yellow | counsel + Michael | 2027-Q1 |
---
Non-goals (explicitly NOT shipping in v1)
- Wi-Fi support — never (per D-BULB-002); telemetry-leak surface + coexistence pain
- Vendor cloud telemetry — never (Standard 0 hard rule)
- Subscription requirement for any feature — never
- Camera in bulb — categorically out of scope
- Microphone in bulb — categorically out of scope
- Occupancy / motion sensor in bulb — categorically out of scope (occupancy lives in WanderDash + WanderHub)
- AI-routed scenes / "smart" auto-classification — never (deterministic Matter scenes only; no LLM in the lighting decision loop)
- Non-residential / commercial-fire-alarm-system architecture — out of scope; WanderBulb is residential lamp
- AC-hardwired DC-low-voltage replacement — v1 ships standard E26 base + standard recessed canister AC; DC-low-voltage path is v2 candidate
- Outdoor / wet-rated — v1 is indoor only; PAR38 outdoor floodlight is v2 candidate
- BR30 / PAR16 / GU10 form factors — v1.1 / v1.2 candidates