# FriiDump 0.5.3.16-pf1-candidate21 validation

Candidate21 preserves Candidate13's seed diagnostics and Candidate12's DAT and
Linux-lock corrections while making the Linux raw-I/O requirement explicit.

## Linux build

Run from the source root:

```bash
bash ./validation/friidump-v0.5.3.16-pf1-candidate21-linux-live-validation.sh build
```

The build gate compiles FriiDump and the native-report fixtures, validates all
13 report fixtures, exercises Redump DAT discovery/matching, runs the Linux Xbox
portable contract, seed-diagnostics contract, raw-I/O parser test, and the
raw-I/O source/documentation contract.

The build deliberately does not apply file capabilities. It prints a warning
that vendor-command hardware runs require a separate capability phase.

Expected final line:

```text
FRIIDUMP CANDIDATE21 LINUX BUILD: PASS
```

## Linux raw-I/O capability

After the exact executable has been built and reviewed:

```bash
bash ./validation/friidump-v0.5.3.16-pf1-candidate21-linux-live-validation.sh capability
```

This invokes the maintained helper, applies only `cap_sys_rawio=ep`, verifies
it, and prints the executable SHA-256 and capability state.

Expected final line:

```text
FRIIDUMP CANDIDATE21 LINUX CAPABILITY: PASS
```

Rebuilding or replacing the executable clears this capability.

## Windows

Run the Candidate21 Windows validator from Windows PowerShell 5.1 with Visual
Studio 2019 Build Tools x86 available:

```powershell
powershell -NoProfile -ExecutionPolicy Bypass `
    -File .\validation\friidump-v0.5.3.16-pf1-candidate21-windows-live-validation.ps1 `
    -Phase Build `
    -SourceRoot (Get-Location).Path
```

Expected final line:

```text
FRIIDUMP CANDIDATE21 WINDOWS BUILD: PASS
```

## Live gate

A Linux vendor-command live test is valid only when its evidence records:

- normal-user identity;
- exact executable SHA-256;
- `cap_sys_rawio=ep` on that executable;
- runtime raw-I/O preflight PASS;
- selected optical device identity;
- dump or diagnostic result;
- STOP UNIT result.