{
  "ceiling_bracket": "(349464, 362081] bytes; round candidates 352256 / 360448",
  "emulator_validated": true,
  "flashable_gate": false,
  "hardware_boot_proven": false,
  "image_bytes": 358694,
  "image_end_address": "0x08067926",
  "over_proven_ceiling_by_bytes": 9230,
  "proven_update_size_ceiling_bytes": 349464,
  "purpose": "One flash brackets the real firmware update-image size ceiling. ACCEPTED at update-validate -> real ceiling >= 358694 bytes and the compact everything image ships. REJECTED (the update fails with 'CRC failed; installed composition remains viable' BEFORE any reboot; installed firmware keeps running) -> stay with compact subset images under 349464 bytes.",
  "role": "CEILING-PROBE -- needs-hardware-confirmation, NOT gate-passing",
  "safety": "A size rejection never touches flash. If accepted but the DSP payload fails at boot, the power-on self-test rolls back automatically (volatile DSP payload); stock recovery is one flash of the pinned 4486 container."
}