+The validated cross-flashed unit required a readable Video DVD at power-on
+before it identified as GDR-8050L `0012`. The drive remained powered and
+connected while the disc was changed to Sonic Mega Collection (US). A
+temporary host-probe quarantine prevented background Linux media discovery
+from blocking the USB/SCSI path. The host state was restored after the run.
+
+See
+[`reports/FRIIDUMP_LINUX_EXACT_RELEASE_HARDWARE_VALIDATION_0.5.3.16-pf1.md`](reports/FRIIDUMP_LINUX_EXACT_RELEASE_HARDWARE_VALIDATION_0.5.3.16-pf1.md).
+
+## Hardware-validation boundary
+
+The Linux GDR-8050L evidence validates the command path, game-view state,
+metadata, controlled partial output, cancellation, reporting, and cleanup. It
+does not by itself claim a newly completed full Original Xbox image on Linux.
+Candidate-specific validation scripts remain in `validation/` as historical,
+exact evidence tools; release builds use the maintained build entry points and
+the generic raw-I/O capability helper.
+
+## Known inherited warnings
+
+`libfriidump/rs.c` retains an inherited right-shift-count warning. Other
+explicit `-Wall -Wextra` warnings are pre-existing or non-fatal test-path
+warnings and were not silently normalized during release finalization.
+
+## Campaign
+
+Release publication uses an exact annotated tag, exact-tag Windows and Linux
+builders, immutable artifact manifests, and independent private/public
+read-back. Candidate retirement remains a separate final gate.
+
+## Candidate12 correction status
+Candidate12 closes the Linux GCC-4244 B101 full-dump gate and corrects runtime
+DAT discovery, Linux lock-status reporting, and the Linux `--help` validation
+false failure. The accepted live result is Sonic Mega Collection (US), 712880
+sectors, with CRC32 `01b52739`, MD5
+`85a525df1481d0ad67d8761f832dca12`, SHA-1
+`06eb6d15b4d7f90ec0fed9ce9a77db41358d74ed`, and SHA-256
+`30098da93f5de9ece8da44f8afdfb85cf9bcdc24d77131221e64e3038a529010`.
+
+
+## Candidate16 Linux authorization status
+
+Candidate13's live diagnostics proved that Candidate12/13 seed failures were
+host-side authorization failures: vendor opcode `0xE7` returned `EPERM` before
+usable drive sense, while Candidate11's working executable carried
+`cap_sys_rawio=ep`.
+
+Candidate16 makes this boundary explicit. Linux vendor-command paths preflight
+effective `CAP_SYS_RAWIO`, refuse whole-process root execution, provide exact
+least-privilege installation instructions, record preflight failures in native
+reports, and issue STOP UNIT cleanup. The build emits a warning but does not
+silently invoke `sudo` or modify file capabilities.
+
+
+## Candidate16 build-hygiene status
+
+Candidate16 preserves Candidate14 raw-I/O authorization and removes the user-side clock-skew and production long-path warning defects. The Linux validator normalizes only future source timestamps before building, and the raw-I/O preflight uses bounded path construction with a larger native-report note buffer.
+
+
+## Candidate16 Linux Xbox tray-cycle status
+
+Candidate15's first Linux Xbox smoke used a normal video DVD and proved target
+selection plus raw-I/O authorization, but failed immediately at Stage 2 because
+the Linux optical door remained locked while FriiDump held the device open.
+Candidate16 releases the Linux `CDROM_LOCKDOOR` state before each GDR-8050L
+software eject/load cycle, restores the lock after a successful load, and leaves
+the door unlocked on failure for manual recovery. The later Candidate21
+hardware run closed the Linux Xbox command-path gate with both game-view
+transitions, DMI capture, controlled partial output, cancellation, native
+reporting, and STOP UNIT. It did not claim a newly completed full Xbox image.