rd03e.c: RD03E_FRAME_LEN was 5 but the frame's own documented layout (header + gesture + distance_lo + distance_hi + footer[2]) is 6 bytes. The footer check read buf[i+3], colliding with the distance high byte at that same index — so every frame that validated at all was forced to have distance_cm = lo | 0x5500 (~218m) regardless of what the sensor reported. Distance readings were garbage 100% of the time, not intermittently. mems_mic.c: i2s_del_channel() was missing on 2 of 3 init failure paths, leaking the channel handle. bmp280.c: the I2C bus/device handles leaked on 4 of 5 init failure paths; added a fail label that releases both. app_main.c: sensors now init before Wi-Fi bring-up, matching the rationale sensor_driver.h already documents (a hanging sensor bus must not be able to block network bring-up). rtlsdr_experimental.c: rtlsdr_exp_stop() waited 500ms before usb_host_uninstall(), but the daemon task blocks up to 1000ms inside usb_host_lib_handle_events() before re-checking its running flag — the delay must exceed that or teardown races a live daemon task. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
components/
rtlsdr_experimental/ — the RTL-SDR experimental module (Workstream J in
docs/superpowers/specs/2026-07-23-esp32-sensor-node-design.md), USB-host
communication with an RTL2832U-based dongle via the ESP32-P4's USB-OTG host
capability. Off by default (RTLSDR_EXP_ENABLE=n in its Kconfig). See
the top-level ../README.md's "Workstream J" section for what's
implemented, what's unverified, and why it's a separate opt-in component
rather than folded into main/.