STP-HW-001 Hardware Verification Protocol
Status: Final draft prepared for handoff (pending review)
Version: 0.9
Owner: BionicLoop engineering
Prepared by: BionicLoop engineering
Reviewer: ____
Approver: ____
Decision date: ____
Effective date: ____
Baseline freeze SHA: ____
Last updated: 2026-04-06 15:20 EDT
Revision History
| Version | Date | Author | Summary of Changes |
|---|---|---|---|
| 0.1 | 2026-03-27 | Engineering | Initial hardware verification protocol draft |
| 0.9 | 2026-04-06 | BionicLoop engineering | Added handoff-ready document-control metadata for the software package |
1. Purpose
Define the protocol for real-device verification on the trial-baseline phone and live peripherals.
2. Scope
This protocol covers hardware/system behavior that cannot be closed credibly with simulator or deterministic simulation evidence alone.
Primary coverage includes:
TV-RUN-007TV-CGM-005TV-PUMP-004TV-PUMP-005TV-STATE-003- hardware/system portions of:
TV-MEAL-010TV-MEAL-011TV-ALERT-012TV-ALERT-013
3. Submission Baseline Hardware
- Phone: iPhone 17e
- CGM: Dexcom G7
- Pump: Omnipod DASH
If another device is used for exploratory work, it must not be substituted for the formal trial-baseline evidence without explicit deviation approval.
4. References
5. Roles
- Author: BionicLoop engineering
- Executor: engineering / QA / clinical test operator
- Reviewer: quality / design assurance
- Approver: submission-quality owner
6. Prerequisites
- Configured iPhone 17e with study build
- Paired/active Dexcom G7 and Omnipod DASH
- Device logging capture method available
- Alert/notification permissions configured
- Known app version, iOS version, and git SHA recorded
7. Core Hardware Scenarios
7.1 Restore / Relaunch / Reconnect
- Launch app with active paired devices.
- Force app relaunch and verify:
- pump and CGM managers restore cleanly
- no forced re-pairing
- Home cards reflect true state
- Trigger disconnect/reconnect cycles and verify recovery behavior.
7.2 Cadence / Wake / Continuity
- Run overnight or extended cadence observation.
- Verify anchored step continuity across natural wake gaps.
- Verify reset creates a fresh session.
7.3 BG and Reconnect Fallback
- Verify manual BG-driven stepping when CGM wake is absent.
- Verify BG-driven stepping when CGM wake exists but CGM is unusable.
- Verify reconnect fallback:
- only after first anchored step
- only after approved CGM-age gate
- current due step only
- no duplicate same-slot execution
- CGM regains priority when data resumes
7.4 Interruption Alerting
- Verify
Algorithm Stepping Interruptedthreshold timing. - Verify blocker-specific content under live conditions.
- Verify clear-on-recovery and clear-on-disarm/reset.
7.5 Cloud-Log Evidence Workflow
If development-support cloud logging is used for a hardware run:
- Start an
Integration Log Sessionin Home Settings before the scenario begins. - Record the displayed
test_run_idand UTC start time. - Stop the session immediately after the scenario ends.
- Include the resulting
test_run_idand UTC window in the STR package so the reviewer can retrieve the matching CloudWatch slice reproducibly.
8. Pass / Fail Criteria
- Pass when required hardware scenarios behave as specified on the iPhone 17e baseline with complete evidence capture.
- Fail when cadence, restore, fallback, or alert behavior diverges or evidence is incomplete.
9. Evidence to Capture
- device model / iOS version / app build / git SHA
- peripheral identifiers and session context as allowed
- console logs
- screenshots / screen recordings
- timestamps for scenario start/end and observed events
- if development-support cloud logging is used, also record:
test_run_id- UTC start/end
- selected upload threshold
- explicit note that the session was started before execution and stopped after execution
- STR target path:
Docs/Quality/Evidence/Formal/STR-HW-001/<run-label>/
10. Traceability
TV-* ID |
Hardware Topic |
|---|---|
TV-RUN-007 |
Reconnect fallback on live hardware |
TV-CGM-005 |
Step-interruption detection on live device |
TV-PUMP-004 |
Home pod-card live transition behavior |
TV-PUMP-005 |
Delivery-state clear via live refresh |
TV-STATE-003 |
Pump/CGM relaunch persistence without re-pair |