Release verification · 0.13.17

Release and verification files · Passing build and test run · Successful web deployment

Firmware and web assets were built from eb83437ad23f37851ee55089d0d0cfe8590d10ab.

Automated checks

• 89 browser-module tests, including custom format round trips, malformed input, upload/readback checksums, board identity checks and cancelled-install handling.
• Native and sanitizer suites, 150,000 detector fuzz inputs and 10,000 personal-theme header fuzz inputs.
• 168 compressed logo variants decoded against their original pixel CRC32.
• All five board builds and application-size checks. The release includes each profile’s memory budget.
• Gitleaks scans tracked source and Git history. This credential scan is not a comprehensive vulnerability assessment.

Connected hardware

AMOLED 1.75C, M5Stack StopWatch C152 and Spotpear are checked over USB. Tests cover application write verification, 23/23 self-tests, current time and offset, software restart, personal-theme upload/readback and hidden-slot behavior. StopWatch also receives hardware RTC readback and ticking checks. The AMOLED transfer tests include a wrong checksum and incomplete upload, both preserving the preceding theme.

Clock, timer, lap history and Time/Date/Sync settings pause scanning while time advances. Timer controls and resumed Wi-Fi/BLE reception are checked. DZ_AZ and personal-theme screenshots are actual firmware framebuffer captures. The Custom theme editor is exercised in a browser for import/export, preview controls, tab navigation and opt-in state.

Run-specific results, released binary hashes and live-flasher checks are recorded in RELEASE-VERIFICATION.json. Device updates preserve partitions, saved files and preferences. Test-created personal designs are removed before restoring the original theme, watch and daily screen.

The live web flasher's five firmware packages and new web assets match the release builds. All 13 GitHub release attachments were downloaded using the authenticated GitHub CLI and matched both the local package hashes and GitHub's SHA-256 digests.

Limits

• XIAO and Lite are build/package-tested; Lite hardware tests remain paused.
• The real web transfer and clock modules run through a local serial-stream adapter for hardware tests. A complete browser USB chooser/firmware-flash session is not hardware-tested.
• No battery-life or current-consumption percentage is claimed.
• AMOLED 1.75C and Spotpear require USB or configured Wi-Fi time recovery after full power loss. Wi-Fi setup remains deferred; live NTP recovery is not tested here.
• The StopWatch factory package is assembled from clean release segments. Factory installation through M5Burner itself and catalog publication are not verified. M5Burner status.
• Signed-out GitHub requests returned HTTP 404 for the release, repository and owner profile during final verification on October 18, 2026. Public GitHub download access could not be confirmed; the live web flasher and its firmware downloads were reachable and verified.

Earlier evidence remains attached to its release.