# BEEBO 407 DEPLOY IMAGE — dd-ready

Built 2026-08-31. Base: byte-identical copy of the audited stock 407 image
(`beebo_407.img`, root p2 btrfs). Original `/srv/beebo/beebo_407.img.gz`
and the audit working copy were never modified.

## Hashes

```
ff1e0631fa9e0c57ba642183dba11aa4e7a7fe4cd53baa2e4c50c9cccc74aaa4  BEEBO_407_v2.0.1_DEPLOY.img.gz     (6.4 GiB)
0503d91f58eb17e780800ca32c7c6f88f310e3163b0e10faac8b6cec749fd6d4  BEEBO_407_v2.0.1_DEPLOY.img       (15 GiB, uncompressed master)
```

## Flash (on a Linux host)

```
gunzip BEEBO_407_v2.0.1_DEPLOY.img.gz        # if using the .gz
dd if=BEEBO_407_v2.0.1_DEPLOY.img of=/dev/sdX bs=4M status=progress conv=fsync
```

Verify the card: `sha256sum /dev/sdX` (while not mounted) will differ from
the file hash if the card is larger than 15 GiB — compare with
`dd if=/dev/sdX bs=4M count=<src_blocks> | sha256sum` instead.

## What changed vs stock 407 (nothing else)

1. `/usr/lib/lv2/performance_{buffer,spectral,space,granular}.lv2` — the
   four 407-sysroot-compiled bundles (234 → 238 bundles). `.so` byte-identical
   to `/srv/beebo/407_audit/rebuilt/*.so`; GLIBC_2.17 max (space 2.27),
   image glibc 2.36.
2. `/home/debian/UI` — reversible Program FX extension:
   `show_widget.py` patched (stock byte-preserved as `show_widget.py.orig`,
   patched sha `cb9021bb…f2f6`), 8 runtime modules added, state file
   `.beebo_extension_state.json`. `pedal_hardware.py` and `ingen_wrapper.py`
   NOT modified.
3. `/home/debian/beebo_tools/` — on-device rollback/re-apply tooling.
4. `/home/debian/BEEBO_DEPLOY_NOTE.txt` — same summary as this file.

Verification evidence: `evidence/` (lv2_before/after lists, UI lists,
show_widget before-hash). p2 passed an offline `btrfs check --readonly`
(no errors) after modification.

## Rollback on device

```
/home/debian/beebo_tools/tools/rollback_beebo_extension.sh /home/debian/UI
```
removes only the 8 recorded modules and restores stock `show_widget.py`
byte-exactly; the four bundle dirs can simply be deleted.

## Claim level (strict terminology)

- Image contents: 407-SYSROOT COMPILED + HOST TESTED.
- **This image has never booted.** All on-device behaviour (audible FX,
  Ingen loading, UI rendering, encoder rev-10 polarity in the patched UI)
  is TARGET-BLOCKED until a real unit runs it.