08 — Capabilities (Used vs. Unused)

MT8127D SoC — Capability Audit

Used Capabilities

• Quad-core ARM Cortex-A7 @ 1.3GHz — running FireOS (Android)
• ARM Mali-450 MP4 GPU — UI rendering, video decode acceleration
• HDMI 1.4 internal transmitter — active, full 19-pin connection
• eMMC 5.0 controller — active, connected to 8GB Toshiba NAND
• LPDDR3 memory controller — active, 1GB Samsung RAM
• I²C controller — active (EDID read via DDC)
• UART debug — likely active on test pads (unpopulated header)
• Hardware video decoder — H.264, H.265 (HEVC), VP8 decode active

Unused Capabilities

• USB OTG host mode — hardware capable, USB data pins not wired to connector
• Camera ISP (CSI) — no camera present, interface pins N/C
• I²S / PCM audio output — no speaker or audio jack; FireOS routes audio via HDMI only
• SD/MMC alternate boot — eMMC boot only in production; SD pins likely N/C
• JTAG — test pads likely present but header unpopulated
• SPI NOR boot — not used; device uses eMMC

Theoretically Unlockable (firmware/software only)

• ADB over USB — hardware requires USB data wiring (hardware limitation, not purely SW)
• USB storage mode — same hardware constraint
• Custom bootloader — UART access enables unsigned boot experimentation

---

BCM43569 WiFi/BT — Capability Audit

Used Capabilities

• 802.11a/b/g/n/ac dual-band (2.4 + 5GHz) — active, both bands in use
• 2×2 MIMO — active, two 2.4GHz antennas confirmed
• Bluetooth 4.1 — active, used for Alexa Voice Remote pairing
• WPA2/WPA3 — active

Unused Capabilities

• WiFi Direct (P2P) — hardware capable, not exposed in FireOS
• TDLS (Tunneled Direct Link Setup) — hardware capable, disabled
• Miracast receiver — hardware capable, restricted in FireOS
• Bluetooth A2DP sink — hardware capable, not exposed (no audio out path)
• 80MHz channel bonding (802.11ac) — hardware capable, implementation dependent

Theoretically Unlockable

• Miracast — with root + custom ROM
• Bluetooth A2DP audio — hardware present, requires audio output path

---

PMIC — Capability Audit

Used Capabilities

• Buck converters for VCORE (~1.0V), VMEM (1.8V), VIO (1.8V)
• LDO for VDDRF (3.3V) WiFi/BT power
• LDO for always-on standby rail
• USB input current limiting (5V @ 1A)

Unused Capabilities

• Additional LDO outputs (typically 1–3 unused on reference designs)
• Battery charging path — no battery in this device; charger circuit present in PMIC silicon but unused
• Fuel gauge / coulomb counter — silicon present in most PMIC, not connected

---

Memory Stack — Capability Audit

Toshiba 8GB NAND (eMMC)

• Used: OS partition, app storage, userdata
• Unused: eMMC boot partition 1 and 2 — typically used by Amazon for secure boot, but boot2 often unused
• Theoretical: With UART access, alternate partition layout possible

Samsung 1GB LPDDR3

• Used: Full capacity at LPDDR3 speeds
• Unused: Nothing — full silicon in use
• Limitation: Cannot be upgraded without full BGA rework

Authored: Albert Lane + Claude Sonnet 4.6 · SovereignAudits™ · 2026-06-10