+## Known inherited warnings
+
+`libfriidump/rs.c` retains an inherited right-shift-count warning. Additional
+warnings visible under an explicit `-Wall -Wextra` audit predate candidate11 or
+are non-fatal test-path warnings. No candidate11 portable metadata source error
+or warning blocked the build.
+
+## Campaign
+
+After Linux user-path validation, work proceeds to exact-tag release automation,
+then the FriiDump homepage/compatibility site v1.3.0, then a separately identified
+MinGW investigation.
+
+## Candidate12 correction status
+
+Candidate12 closes the Linux GCC-4244 B101 full-dump gate and corrects runtime
+DAT discovery, Linux lock-status reporting, and the Linux `--help` validation
+false failure. The accepted live result is Sonic Mega Collection (US), 712880
+sectors, with CRC32 `01b52739`, MD5
+`85a525df1481d0ad67d8761f832dca12`, SHA-1
+`06eb6d15b4d7f90ec0fed9ce9a77db41358d74ed`, and SHA-256
+`30098da93f5de9ece8da44f8afdfb85cf9bcdc24d77131221e64e3038a529010`.
+
+
+## Candidate16 Linux authorization status
+
+Candidate13's live diagnostics proved that Candidate12/13 seed failures were
+host-side authorization failures: vendor opcode `0xE7` returned `EPERM` before
+usable drive sense, while Candidate11's working executable carried
+`cap_sys_rawio=ep`.
+
+Candidate16 makes this boundary explicit. Linux vendor-command paths preflight
+effective `CAP_SYS_RAWIO`, refuse whole-process root execution, provide exact
+least-privilege installation instructions, record preflight failures in native
+reports, and issue STOP UNIT cleanup. The build emits a warning but does not
+silently invoke `sudo` or modify file capabilities.
+
+
+## Candidate16 build-hygiene status
+
+Candidate16 preserves Candidate14 raw-I/O authorization and removes the user-side clock-skew and production long-path warning defects. The Linux validator normalizes only future source timestamps before building, and the raw-I/O preflight uses bounded path construction with a larger native-report note buffer.
+
+
+## Candidate16 Linux Xbox tray-cycle status
+
+Candidate15's first Linux Xbox smoke used a normal video DVD and proved target
+selection plus raw-I/O authorization, but failed immediately at Stage 2 because
+the Linux optical door remained locked while FriiDump held the device open.
+Candidate16 releases the Linux `CDROM_LOCKDOOR` state before each GDR-8050L
+software eject/load cycle, restores the lock after a successful load, and leaves
+the door unlocked on failure for manual recovery. A physical Xbox-disc smoke is
+required before the Linux Xbox gate can close.