# Current Status

## Authority

FriiDump remains governed by the established Project Frankenstein repository
and promoted release history. Candidate11 is a development candidate derived
from candidate10; it is not yet a promoted release.

## Validated paths

- Windows/MSVC 32-bit candidate10 challenge-drive behavior remains the current
  live-validated Windows authority.
- Candidate11 compiles cleanly through Linux/CMake as a static binary.
- Native-report fixtures and schema/semantic validation pass.
- A portable XDFS/XBE metadata fixture proves title, media ID, Title ID, raw
  GameRegion, formatted region, and UTF-16-to-UTF-8 conversion.
- Linux ISO/XISO code now returns the same structured Xbox result fields used by
  native reports, summary output, hashes, and Redump verification.
- Linux GDR-8050L default output names can be derived from XBE/DMI metadata.

## Hardware-validation boundary

Candidate11 has not yet been run against a physical Xbox-capable optical drive
on Linux. Real hardware must prove no-media behavior, unlock state transitions,
metadata, controlled cancellation, exact hashes, STOP UNIT, complete XISO, and
redump-style ISO behavior before Linux support can be described as validated.

The development-only XGD1 layout and raw-ID probes remain Windows-only in this
first candidate11 increment. They are tracked as a separate Linux-port substage
and do not block ordinary user ISO/XISO validation.

## Known inherited warnings

`libfriidump/rs.c` retains an inherited right-shift-count warning. Additional
warnings visible under an explicit `-Wall -Wextra` audit predate candidate11 or
are non-fatal test-path warnings. No candidate11 portable metadata source error
or warning blocked the build.

## Campaign

After Linux user-path validation, work proceeds to exact-tag release automation,
then the FriiDump homepage/compatibility site v1.3.0, then a separately identified
MinGW investigation.

## Candidate12 correction status

Candidate12 closes the Linux GCC-4244 B101 full-dump gate and corrects runtime
DAT discovery, Linux lock-status reporting, and the Linux `--help` validation
false failure. The accepted live result is Sonic Mega Collection (US), 712880
sectors, with CRC32 `01b52739`, MD5
`85a525df1481d0ad67d8761f832dca12`, SHA-1
`06eb6d15b4d7f90ec0fed9ce9a77db41358d74ed`, and SHA-256
`30098da93f5de9ece8da44f8afdfb85cf9bcdc24d77131221e64e3038a529010`.


## Candidate16 Linux authorization status

Candidate13's live diagnostics proved that Candidate12/13 seed failures were
host-side authorization failures: vendor opcode `0xE7` returned `EPERM` before
usable drive sense, while Candidate11's working executable carried
`cap_sys_rawio=ep`.

Candidate16 makes this boundary explicit. Linux vendor-command paths preflight
effective `CAP_SYS_RAWIO`, refuse whole-process root execution, provide exact
least-privilege installation instructions, record preflight failures in native
reports, and issue STOP UNIT cleanup. The build emits a warning but does not
silently invoke `sudo` or modify file capabilities.


## Candidate16 build-hygiene status

Candidate16 preserves Candidate14 raw-I/O authorization and removes the user-side clock-skew and production long-path warning defects. The Linux validator normalizes only future source timestamps before building, and the raw-I/O preflight uses bounded path construction with a larger native-report note buffer.


## Candidate16 Linux Xbox tray-cycle status

Candidate15's first Linux Xbox smoke used a normal video DVD and proved target
selection plus raw-I/O authorization, but failed immediately at Stage 2 because
the Linux optical door remained locked while FriiDump held the device open.
Candidate16 releases the Linux `CDROM_LOCKDOOR` state before each GDR-8050L
software eject/load cycle, restores the lock after a successful load, and leaves
the door unlocked on failure for manual recovery. A physical Xbox-disc smoke is
required before the Linux Xbox gate can close.