# ECP5 fabric two-input confirmation record — 2026-08-30

## Result and scope

Company-authored physical-board engineering evidence: a new fabric policy uses
two independently routed board switches: SW5-1 is physical arm and SW5-2 is a
physical confirmation input. The confirmation state can only be created by a
fresh SW5-2 transition after arm; CFS has no write path to it.

For this negative run SW5-1 remained OFF. An otherwise valid in-envelope
machine-mode request produced retained UART:

```
C,20,20
C,P
```

Decimal `20` means the fabric reported both physical disarm (bit 2) and missing
confirmation (bit 4); permit (bit 0) remained clear before and after the CPU
request. The image was JTAG-loaded into volatile SRAM only. No configuration
flash, expansion pin, product I/O or actuator was used.

## Scope

Scope: the disarmed case of the two-physical-input policy, in volatile SRAM on the ECP5 evaluation board.

## Reproducibility

The completed internal record is
`evidence/runs/2026-08-30-ecp5-fabric-confirm-negative-001/manifest.json`.
It retains frozen sources and hashes, the self-checking policy RTL test, final
bitstream, routed build report, loader log, tool versions and raw UART.