Integrate R10/R11 capture and duty-cycled history recovery on iPhone

[adidshaft]

Current evidence — 2026-09-23

Local, unpublished dev at 0447c592 contains the Sep 23 Mac research. Offline Swift decoders and a fused step estimator landed locally in 4a567de6; they are not wired into the production Bluetooth path. protectedStandardHRAllowsR10RealtimeFlood remains false. Mac success is not iPhone link or background acceptance.

A short no-trim Mac disconnect test recovered contiguous 1 Hz history and resumed live capture. Live R10 freezes the history read cursor; pausing live before draining avoids this. Polling the range during a drain stalled a test. Routine trim caused data loss. Raw high-rate IMU/PPG during disconnection is not stored and cannot be recovered. Firmware counter continuity is not step-accuracy proof.

Acceptance

• Review and integrate the offline decoders with public deterministic fixtures (see Restore a trustworthy repository verification suite before dev → main merge #44), retaining source/version/coverage metadata.
• Implement bounded live → pause → durable history drain/ACK → resume ownership, cancellation, timeout and reconnect handling. Never use routine trim or range polling mid-drain.
• Account separately for raw lost frames, deliberate drain pauses, recovered 1 Hz rows and unfilled gaps; do not interpolate raw streams.
• Handle firmware counter wrap/reset and avoid double credit across reconnect/replay; preserve Validate whole-day strap-only steps across live capture and disconnect recovery #21 accuracy gates.
• On a physical iPhone, prove sustained R10/R11 + standard HR, workout start/end, link recovery, and safe fallback when the stream cannot survive.
• Exercise locked/background behavior and the actual finite lease expiration separately (Gate 1 follow-up: physically exercise background lease expiration and reconnect #22).
• Attach the completed long-gap/overnight Mac analysis before claiming long-duration transport success; the Sep 23 session only establishes capture startup and short trials.

Preserve the ongoing Mac capture and the existing iPhone data. A device switch or re-pair is a separate coordinated test, not part of repository maintenance. Related: #21, #22, #23, #31, #45. No production-enable or release claim until physical acceptance.

[adidshaft]

Notes from the Mac R10/R11 pass (2026-09-23/24):

• A strap left serving history (16/00 without 14/00) stops standard 2A37 HR for the next client. Seen on iPhone after a Mac capture exited mid-drain. The app now sends one 14/00 per connection when there is no HR for 20 s and the app owns no history transfer (shouldAbortOrphanedStrapHistory); the Mac recorder never exits with a transfer open. The cause is plausible, not proven: HR resumed before the abort fired.
• Still to integrate: R10 decoder, fused step estimator, live/flush planner and power policy in AtriaBLEManager. Production still blocks 3F while waiting for compact 0x33, which the Mac pass found unrecoverable.

[adidshaft]

Progress (local dev, not pushed yet):

• Crashes/hangs from R10 streaming: watchdog (0x8BADF00D) and CPU-resource kills came from a bitwise CRC-32 running several times per ~2 KB R10 frame plus archiving every frame to disk all day. Now table-driven CRC (bit-identical, tested), and frames are archived only during an attended calibration capture. A separate 3.6 s main-thread hang (the session journal re-scoring the open gyro span on every HR sample) is memoised.
• History catch-up stuck: three causes. (1) A dry-leftover retire rule aborted real multi-thousand-record backlogs 1 s in; it now applies only to leftovers of 120 records or fewer. (2) Live 3F froze the history read cursor, so 3F/00 is now sent before 16/00. (3) Slices were one ACK every 10 min; with 600+ pending they are now timed 45 s (foreground) / 120 s (background) slices with a 30 s retry that re-enters the idle-window lane. Measured on device: 15–39 records/s per slice.
• Battery: standard 2A19 is the single displayed source while fresh; the 0x30 event (which read ~7 points lower) no longer overrides it.

🤖 Generated with Claude Code