# HLDS v178 LBA route scan report

This is an offline route-discovery run. Its purpose is to find a host-interface gate configuration that reaches the firmware READ/LBA dispatcher candidates from the v169 proof pack. v178 adds natural DFA0 latch and higher-caller probes. It does not start iSCSI and does not use Windows.

stem=smoke_v178
variants=3

| variant | rc | outcome | handler | cdb-byte PCs | assembled | +150 | cdb seen | lba state | packet state | fw source | notable hits |
|---|---:|---|---:|---:|---:|---:|---:|---:|---:|---:|---|
| `firmware_ingress_05ec_source` | 0 | PROVEN | 12 | 24 | 6 | 0 | 6 | 6 | 6 | 6 | 0x9001E4E8, 0x9001E500, 0x9001E527, 0x9001E52D, 0x9001E533, 0x9001E539, 0x9001E541 |
| `natural_dfa0_latch_tail` | 0 | PARTIAL | 0 | 0 | 0 | 0 | 0 | 6 | 6 | 0 |  |
| `firmware_caller_9001e3d6` | 0 | PARTIAL | 0 | 0 | 0 | 0 | 0 | 6 | 6 | 6 |  |

Interpretation: if all variants have zero handler/CDB-byte/assembled-LBA hits, the current packet presentation still bypasses the firmware READ dispatcher. The next fix is not another sidecar mapping; it is a lower-level packet FIFO/MMIO route model that presents CDB bytes at the firmware-visible source used by the candidate path.
