diff --git a/CLAUDE.md b/CLAUDE.md
index 01a3405e3..dae233686 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -130,6 +130,8 @@ flowchart TB
 
 Keep each commit under ~100 changed files: CodeRabbit reviews the files a pushed commit changes, and past that the commit silently loses a review layer. A mechanical sweep (em-dashes, a metrics refresh) is a commit of its own, apart from behavioral fixes, so both stay reviewable.
 
+**A contributed pull request is one topic, about 400 changed lines and ten files at most**, tests included. Generated files (metrics, images, scenario observations) are a category of their own, outside the count. Past a few hundred lines a review stops catching defects (the SmartBear and Cisco review study; Google's guide on small changes), and the product owner reviews every line. Every pull request is based on main. The one exception is a step of a larger topic, which lands as its own pull request and may build on the step below it. A stacked pull request from a fork shows its parents, so it is reviewed once the one below it merges.
+
 ### Build and test
 
 Implement against [the architecture](docs/explanation/architecture/index.md) and [coding-standards.md](docs/contributing/coding-standards.md). Everything build, flash, run and monitor: [building.md](docs/how-to/building.md). Per-script reference: [MoonDeck.md](moondeck/MoonDeck.md).
@@ -179,7 +181,7 @@ On "run pre-commit": run the checks whose trigger the diff matches, report one l
 
 **A failure is something to report, not to fix and re-run.** A second run needs the words again, as much after a failure or a fix as at any other time.
 
-**The gates run once per commit.** A run costs minutes, so scope freezes at "run pre-commit": a request made during a run goes to the next commit. A change made after a run re-checks only itself, on the product owner's go. A fixed failure reruns that one check; any other change runs the checks its own diff triggers. A full rerun needs the word "restart". A cosmetic change can ride on the run it followed, since the next commit's gates check it again.
+**Each check runs once per commit.** A run costs minutes, so scope freezes at "run pre-commit": a request made during a run goes to the next commit. A change made after a run re-checks only itself, on the product owner's go. A fixed failure reruns that one check; any other change runs the checks its own diff triggers. A full rerun needs the word "restart". A cosmetic change can ride on the run it followed, since the next commit's gates check it again.
 
 ```mermaid
 flowchart LR
diff --git a/docs/assets/core/PictureService.png b/docs/assets/core/PictureService.png
new file mode 100644
index 000000000..b4cf26477
Binary files /dev/null and b/docs/assets/core/PictureService.png differ
diff --git a/docs/assets/hardware/sensors/dw3000.webp b/docs/assets/hardware/sensors/dw3000.webp
new file mode 100644
index 000000000..5c5ae1dd4
Binary files /dev/null and b/docs/assets/hardware/sensors/dw3000.webp differ
diff --git a/docs/assets/hardware/sensors/hc-sr501.webp b/docs/assets/hardware/sensors/hc-sr501.webp
new file mode 100644
index 000000000..a587d50f4
Binary files /dev/null and b/docs/assets/hardware/sensors/hc-sr501.webp differ
diff --git a/docs/assets/hardware/sensors/hlk-ld2450.webp b/docs/assets/hardware/sensors/hlk-ld2450.webp
new file mode 100644
index 000000000..46f1ccad0
Binary files /dev/null and b/docs/assets/hardware/sensors/hlk-ld2450.webp differ
diff --git a/docs/assets/hardware/sensors/mpu6050.webp b/docs/assets/hardware/sensors/mpu6050.webp
new file mode 100644
index 000000000..55bd7855f
Binary files /dev/null and b/docs/assets/hardware/sensors/mpu6050.webp differ
diff --git a/docs/assets/hardware/sensors/p4-csi-camera.webp b/docs/assets/hardware/sensors/p4-csi-camera.webp
new file mode 100644
index 000000000..56b0c26a6
Binary files /dev/null and b/docs/assets/hardware/sensors/p4-csi-camera.webp differ
diff --git a/docs/assets/hardware/sensors/vl53l0x.webp b/docs/assets/hardware/sensors/vl53l0x.webp
new file mode 100644
index 000000000..8644f8879
Binary files /dev/null and b/docs/assets/hardware/sensors/vl53l0x.webp differ
diff --git a/docs/assets/hardware/sensors/vl53l8cx.webp b/docs/assets/hardware/sensors/vl53l8cx.webp
new file mode 100644
index 000000000..116c9715f
Binary files /dev/null and b/docs/assets/hardware/sensors/vl53l8cx.webp differ
diff --git a/docs/assets/light/effects/FseqPlayerEffect.gif b/docs/assets/light/effects/FseqPlayerEffect.gif
new file mode 100644
index 000000000..35ccfaf22
Binary files /dev/null and b/docs/assets/light/effects/FseqPlayerEffect.gif differ
diff --git a/docs/assets/light/effects/FseqPlayerEffect.png b/docs/assets/light/effects/FseqPlayerEffect.png
new file mode 100644
index 000000000..9a4e9878f
Binary files /dev/null and b/docs/assets/light/effects/FseqPlayerEffect.png differ
diff --git a/docs/assets/light/effects/NetworkReceiveEffect.png b/docs/assets/light/effects/NetworkReceiveEffect.png
index 5fb8c56fa..8d0251321 100644
Binary files a/docs/assets/light/effects/NetworkReceiveEffect.png and b/docs/assets/light/effects/NetworkReceiveEffect.png differ
diff --git a/docs/assets/light/effects/PictureEffect.gif b/docs/assets/light/effects/PictureEffect.gif
new file mode 100644
index 000000000..b66eeab54
Binary files /dev/null and b/docs/assets/light/effects/PictureEffect.gif differ
diff --git a/docs/assets/light/effects/PictureEffect.png b/docs/assets/light/effects/PictureEffect.png
new file mode 100644
index 000000000..d55d94a10
Binary files /dev/null and b/docs/assets/light/effects/PictureEffect.png differ
diff --git a/docs/how-to/adding-a-stream-source.md b/docs/how-to/adding-a-stream-source.md
new file mode 100644
index 000000000..2969bffc2
--- /dev/null
+++ b/docs/how-to/adding-a-stream-source.md
@@ -0,0 +1,95 @@
+# Adding a picture or channel-data source
+
+A new way for frames to reach the lights, from a capture device, a file format or a network protocol.
+Every source is one of two families, and each family has one place where its frames land.
+So a source is small: it fetches frames and hands them over, and everything after that is already written and tested.
+
+> This assumes the desktop build and tests run: see [Building, running, flashing](building.md). A source is proven on the desktop before a board sees it.
+
+---
+
+## Which family
+
+| Your frames are | The family | Where they land | Examples |
+|---|---|---|---|
+| width × height pixels, any size | picture | [Picture service](../moonmodules/core/services.md#picture) | USB capture, a camera, a GIF, a browser tab |
+| one value per light, in wiring order or row by row | channel data | the channel-data sink | Art-Net, E1.31, DDP, an FSEQ file |
+
+A picture knows nothing of the lights: the [Picture effect](../moonmodules/light/effects.md#picture) samples it onto whatever layout the layer has, fitted, filled or stretched.
+Channel data is already per light: it is placed through the layer's mapping, or straight to the output when the sender mapped it.
+
+---
+
+## A picture source
+
+A picture source is an option of the Picture service's `source`, in `src/core/services/PictureService.h`.
+
+1. **Add the option.** Append it to the `Source` enum and its name to the `source` select, and say whether it runs in a task of its own in `kRunsInTask`.
+2. **A still picture** draws once in `prepare()`, as the test pattern does: write into the picture `prepareBuffers` sized, and set the frame.
+3. **A moving picture** comes from a task of its own, a capture or a receiver, so the render loop never waits on a device. Start the task in `prepare()` and stop it in `release()`. For each picture:
+
+```cpp
+uint8_t* px = beginWrite();          // the back picture, width x height x 3 bytes, top row first
+decodeInto(px, width, height);       // your source: a decoder writes here directly, nothing is copied
+endWrite();                          // swap it to the front and bump the generation
+```
+
+That is the whole contract.
+With room for two pictures, `beginWrite` hands out the back one and `endWrite` swaps the pointers, so effects read the front picture undisturbed and never see half of one.
+Short of memory, the service keeps one picture and locks it while you write: frames may be skipped, never torn, and its status says why.
+Effects read through `PictureService::Reader`, which holds the picture still for one gather; you never touch them.
+
+**What a picture source brings:**
+
+- its option and its row on the Picture service's spec card;
+- a unit test that drives it on the desktop with a stand-in for the device;
+- the platform seam for the device itself, with stubs on every other platform.
+
+The thread-safety of the swap is already pinned by the service's own tests, a writer task racing a reader.
+
+Sources are options of one module, so a source edits that file. When there are more than a handful, a source per file behind a small registry is the next step.
+
+---
+
+## A channel-data source
+
+A channel-data source is an effect of its own, with its own settings, that owns a `ChannelDataSink` and writes its frames into it.
+`src/light/effects/FseqPlayerEffect.h` is the template, and `NetworkReceiveEffect.h` the complete example.
+
+```cpp
+class MyFormatEffect : public EffectBase {
+public:
+    void prepare() override {
+        sink_.prepare(/*senderMapped=*/true);   // wiring order: one value per physical light
+        // open your file or socket, check its header, set a status for what you refuse
+    }
+    void tick() MM_NONBLOCKING override {
+        // read this frame and hand it over: sink_.write(offset, data, length);
+        sink_.tick();                            // the sink places a changed frame
+    }
+    bool deliversWiringOrder() const override { return sink_.wiringOrder(); }
+    void copyWiringFrame(uint8_t* out, size_t bytes, bool force) override { sink_.copyWiringFrame(out, bytes, force); }
+private:
+    ChannelDataSink sink_{*this};
+};
+```
+
+The sink does the rest: it holds the last frame so the lights keep it between frames, skips a frame that did not change, and places it.
+A frame mapped by the receiver is copied into the layer, which applies this board's wiring.
+A frame mapped by the sender, alone on its layer, goes to the output as it is, one copy on any layout.
+Beside another effect or under a modifier it is placed on the grid by the layout's positions, so a modifier transforms it.
+A source writing from a task of its own calls `write` there, which waits out at most one render copy; one that reads in `tick()` calls `write<false>`.
+
+**What a channel-data source brings:**
+
+- its effect, its settings and its spec card;
+- unit tests that write frames and check each light against what was sent, with `moondeck/run/fseq_play.py` writing reference FSEQ files and streaming them over DDP.
+
+The sink's placement on serpentine, 3D, mirrored and transposed layouts is pinned by Network Receive's tests.
+
+---
+
+## Before the pull request
+
+One topic, based on main, about 400 changed lines and ten files at most, as [the process](../contributing/principles-and-process.md) describes.
+The desktop tests pass, the source works on the board it is for, and a board without the device builds and shows a status rather than failing.
diff --git a/docs/moonmodules/core/services.md b/docs/moonmodules/core/services.md
index 162f52c04..d277e2201 100644
--- a/docs/moonmodules/core/services.md
+++ b/docs/moonmodules/core/services.md
@@ -24,8 +24,8 @@ A user-added Service: the audio source the audio-reactive effects consume. `mode
 - `micMode`: (Local, I²S targets) `I2S` for a three-wire part, `PDM` for a two-wire one.
 - `sckPin` / `wsPin` / `sdPin`: (Local, I²S targets) the bus GPIOs, unset until entered.
 - `mclkPin`: (Local, I²S targets) the master clock an ADC or codec needs; unset for a plain mic.
-- `codec`: (Local, I²S targets) `ES8311` for a mic behind that codec, else `none`.
-- `codecAddr`: (with a codec) its address on the [I2C bus](system.md#i2c-bus), in hex (`0x18`).
+- `codec`: (Local, I²S targets) `ES8311` or `ES7210` in front of the mic, else `none`.
+- `codecAddr`: its [I2C](system.md#i2c-bus) address: `0x18` (ES8311), `0x40` to `0x43` (ES7210).
 - `device`: (Local, desktop) the OS capture input, `default` following the system setting.
 - `sampleRate`: (Local) mic/ADC sample rate.
 - `levels`: (Local) who sets the display window: `manual`'s two sliders, or `automatic`, a learner.
@@ -42,6 +42,21 @@ Detail: [technical](moxygen/AudioService.md) · [the sync packet](moxygen/WLEDAu
 
 [Tests](../../reference/tests/unit-tests.md#audioservice)
 
+<a id="picture"></a>
+
+### Picture
+
+A user-added Service: the picture the [Picture effect](../light/effects.md#picture) samples onto the lights. One is active at a time, as with Audio.
+
+<img src="../../assets/core/PictureService.png" width="300" alt="Picture module controls">
+
+- `source`: `test pattern`, a test card in the layout of Philips' PM5544, at any size.
+- `width` / `height`: the picture in pixels, up to 512 a side; 64 × 48 by default.
+
+Detail: [technical](moxygen/PictureService.md)
+
+[Tests](../../reference/tests/unit-tests.md#pictureservice)
+
 <a id="osc"></a>
 
 ### OSC
diff --git a/docs/moonmodules/core/supporting.md b/docs/moonmodules/core/supporting.md
index 4a1306c84..f936082d9 100644
--- a/docs/moonmodules/core/supporting.md
+++ b/docs/moonmodules/core/supporting.md
@@ -43,7 +43,7 @@ A flat parser returns zero for a missing key, which is indistinguishable from a
 | [`ImprovOpReassembler`](moxygen/ImprovOpReassembler.md) | The state machine that reassembles a chunked operation into one buffer, with the duplicate and out-of-order guard. The platform layer owns the serial side around it. |
 | [`FirmwareImage`](moxygen/FirmwareImage.md) | Reads an image's header without the vendor framework. The layout is a fixed on-disk format, so the same bytes parse on a device and in a test. |
 | [`PinList`](moxygen/util_PinList.md) · [`HostList`](moxygen/HostList.md) | The two list parsers a board configuration needs: a pin list and a host list of addresses and names, both typed by a human into one text control. |
-| [`Addressing`](moxygen/Addressing.md) · [`HostResolver`](moxygen/HostResolver.md) | One rule for sending to many receivers, unicast, multicast or broadcast, and the cache that turns a host name into an address off the render thread. |
+| [`Addressing`](moxygen/Addressing.md) · [`HostResolver`](moxygen/HostResolver.md) | One rule for sending to many receivers, unicast, multicast or broadcast, and the cache that turns a host name into an address without blocking the render thread. |
 | [`ConfigScrape`](moxygen/ConfigScrape.md) · [`Ipv4`](moxygen/Ipv4.md) | The keys MoonBase reads out of the app's saved config without a parser, and the IPv4 parse and static-address rule both images check by. |
 | [`sha256`](moxygen/sha256.md) · [`crc`](moxygen/crc.md) | A cryptographic digest for update verification and identity, and a cheap checksum used as a fingerprint of a block of state. |
 | [`Sha1`](moxygen/Sha1.md) · [`Base64`](moxygen/Base64.md) | The two codecs the WebSocket handshake needs, the digest that standard mandates and the encoding that carries it. |
diff --git a/docs/moonmodules/light/drivers.md b/docs/moonmodules/light/drivers.md
index 11ba76a8e..41742145a 100644
--- a/docs/moonmodules/light/drivers.md
+++ b/docs/moonmodules/light/drivers.md
@@ -18,7 +18,7 @@ The block every driver card opens with, shown here on RMT LED. Added once by [`D
 
 <img src="../../assets/light/drivers/RmtLedDriver.png" width="300" alt="The shared block at the top of a driver card, here on RMT LED">
 
-- `localBrightness`: this driver's dim (0–255), multiplied with the global brightness.
+- `localBrightness`: this driver's dim (0 to 255), multiplied with the global brightness.
 - `curve`: brightness to output: `CIE 1931`, `gamma 2.2`, `gamma 2.8`, or `linear`.
 - `fixture`: the [fixture profile](supporting.md) applied per light, for order and white.
 - `whiteMode`: how W is derived, shown when the profile carries a W channel.
@@ -125,14 +125,15 @@ Detail: [technical](moxygen/PwmLightDriver.md)
 
 <img src="../../assets/light/drivers/NetworkSendDriver.png" width="300" alt="NetworkSend controls">
 
-Streams the buffer over UDP as **Art-Net**, **E1.31 / sACN** or **DDP**, one burst per frame, to Falcon/Advatek controllers, xLights and LedFx. Feeds several receivers from one driver, each its own slice. Mixed DMX fixtures and the addressing rules are in [the details below](#network-send-details).
+Streams the buffer over UDP as **Art-Net**, **E1.31 / sACN** or **DDP**, its packets paced so receivers keep up, to Falcon/Advatek controllers, xLights and LedFx. Feeds several receivers from one driver, each its own slice. Mixed DMX fixtures and the addressing rules are in [the details below](#network-send-details).
 
 - `protocol`: Art-Net / E1.31 / DDP (default Art-Net); the port follows.
 - `addressing`: unicast for all three, multicast for E1.31, broadcast for Art-Net.
 - `hosts`: the receivers, such as `192.168.1.70-74, panel-01.local`. **Blank idles.**
 - `lightsPerHost`: lights per receiver. Blank splits evenly, one number to all, a list each.
 - `universe_start`: first universe for Art-Net / E1.31, restarting per receiver. DDP ignores it.
-- `fps`: frame-rate limit (default 50, 1–120).
+- `fps`: frame-rate limit (default 50, 1 to 120).
+- `packet_gap`: µs between a frame's packets (default 500); 0 sends the frame as one burst.
 
 [Tests](../../reference/tests/unit-tests.md#networksenddriver)
 
@@ -187,7 +188,7 @@ Streams a true-shape 3D preview to the web UI as a **point list**, only the real
 
 It streams on its own WebSocket channel so a large frame never delays the control plane, and only while a viewer is watching. Moving heads show their beam. How the rate and detail trade off is in [the details below](#preview-details).
 
-- `targetFps`: the rate to aim for (default 24, 1–25). **Lower for detail, raise for smoothness.**
+- `targetFps`: the rate to aim for (default 24, 1 to 25). **Lower for detail, raise for smoothness.**
 
 [Tests](../../reference/tests/unit-tests.md#previewdriver)
 
@@ -204,7 +205,7 @@ Publishes the layer as an **NDI video source**, so OBS, Resolume, TouchDesigner
 The grid becomes the frame, one light per pixel, output correction applied, so a receiver sees what the wall sees. **Desktop only, and you install the NDI runtime yourself**; without it the driver says so and nothing else changes. See [the details below](#ndi-details).
 
 - `sourceName`: the name a receiver lists. Blank uses the device's own name.
-- `fps`: frame-rate ceiling (default 30, 1–120), declared in every frame.
+- `fps`: frame-rate ceiling (default 30, 1 to 120), declared in every frame.
 
 Detail: [technical](moxygen/NdiDriver.md)
 
@@ -218,7 +219,7 @@ Streams the layer as **H.264 over HLS** from the device's own HTTP server. Open
 
 The grid becomes the frame, output correction applied. Latency is HLS's own, **2-5 seconds**, so this is for watching rather than live-control feedback. Runs on desktop (you install ffmpeg) and on the **ESP32-P4**, which encodes in hardware. See [the details below](#hls-details).
 
-- `targetFps`: encode-rate ceiling (default 30, 1–120). Also the bandwidth knob: bitrate is derived.
+- `targetFps`: encode-rate ceiling (default 30, 1 to 120), and the bandwidth knob: bitrate follows.
 - `scale`: video pixels per light (0 = auto). Each light is a solid block, never a blur.
 - `encoder`: which ffmpeg encoder (desktop only).
 - read-only: `url` to play. The card's status line carries state, drops, or why the encoder stopped.
@@ -235,7 +236,7 @@ Streams the layer as **H.264 over RTSP**, which a player pulls rather than fetch
 
 Runs on the **ESP32-P4** and on the desktop. One encoder, so **RTSP and [HLS](#hls) run one at a time**. See [the details below](#rtsp-details).
 
-- `targetFps`: encode-rate ceiling (default 30, 1–60), which is also the keyframe interval.
+- `targetFps`: encode-rate ceiling (default 30, 1 to 60), which is also the keyframe interval.
 - `scale`: video pixels per light (0 = auto). Each light is a solid block, never a blur.
 - read-only: `url` to play. The card's status line names the connected viewer.
 
diff --git a/docs/moonmodules/light/effects.md b/docs/moonmodules/light/effects.md
index 0be273c3e..c35a8a974 100644
--- a/docs/moonmodules/light/effects.md
+++ b/docs/moonmodules/light/effects.md
@@ -1331,16 +1331,37 @@ Detail: [technical](moxygen/DemoReelEffect.md)
 
 [Tests](../../reference/tests/unit-tests.md#demoreeleffect)
 
+<a id="fseqplayer"></a>
+
+### FseqPlayer 🎞️
+
+<img src="../../assets/light/effects/FseqPlayerEffect.gif" width="300" alt="The reference sweep fseq_play writes, the show an FSEQ player plays">
+
+An FSEQ show, xLights' and Falcon Player's frame-by-frame channel data, played from a file. It lands where a sender-mapped [Network Receive](#networkreceive) stream does, so alone on its layer it reaches the lights in one copy on any layout. It reads no file yet, and its status says so: playback is the next step.
+
+- `file`: the show's path, an `.fseq` file on flash or under `/sd`.
+- `loop`: start again at the end.
+- `speed`: the playback speed, in percent of the file's step time, up to 255.
+
+Origin: MoonLight original (FSEQ v2, as Falcon Player documents it)
+
+Detail: [technical](moxygen/FseqPlayerEffect.md)
+
+[Tests](../../reference/tests/unit-tests.md#fseqplayereffect)
+
 <a id="networkreceive"></a>
 
 ### NetworkReceive 📡🌙
 
 <img src="../../assets/light/effects/NetworkReceiveEffect.gif" width="300" alt="NetworkReceive effect preview">
 
-Receives lights over UDP and writes them into the layer: the receive side for Resolume, Madrix, xLights and LedFx.
+Receives lights over UDP into the layer, from Resolume, Madrix, xLights and LedFx. Sender mapping is one copy alone on its layer, else two mappings, as the status shows. Behind a correcting sender, keep the profile in byte order, brightness 255 and the linear curve.
 
 - `universe_start`: the first incoming universe to map, mirroring the sender.
 - `channels_per_universe`: bytes each universe maps to; 510 or 512.
+- `mapped_by`: **receiver** (sent row by row) or **sender** (in wiring order).
+- `packets_per_s`: packets received in the last second, read-only.
+- `frames_per_s`: frames received in the last second, read-only.
 
 Origin: MoonLight original (E1.31 / Art-Net receive)
 
@@ -1350,6 +1371,23 @@ Detail: [technical](moxygen/NetworkReceiveEffect.md)
 
 Listens for Art-Net, E1.31 and DDP at once. The end-to-end pair with [Network Send](drivers.md).
 
+<a id="picture"></a>
+
+### Picture 🖼️ · 2D
+
+<img src="../../assets/light/effects/PictureEffect.gif" width="300" alt="Picture effect preview">
+
+The active [Picture service](../core/services.md#picture)'s picture, sampled onto the layer, so a picture of any size shows on a layout of any size. A modifier rotates, mirrors or tiles it like any effect.
+
+- `fit`: keep the aspect with bands (**fit**), cropped (**fill**), or **stretch**.
+- `sampling`: **point**, one pixel per light, or **area**, a linear-light mean.
+
+Origin: MoonLight original
+
+Detail: [technical](moxygen/PictureEffect.md)
+
+[Tests](../../reference/tests/unit-tests.md#pictureeffect)
+
 <a id="sine"></a>
 
 ### Sine 💫 · 3D
diff --git a/docs/reference/metrics/code.md b/docs/reference/metrics/code.md
index 7faa16982..153009eef 100644
--- a/docs/reference/metrics/code.md
+++ b/docs/reference/metrics/code.md
@@ -4,20 +4,20 @@ Generated by [`moondeck/check/check_code.py`](../../../moondeck/check/check_code
 
 Every function, block and file over a limit the [coding standards](../../contributing/coding-standards.md#static-checks) set. Current state only: the trend is this file's git history. The list only shrinks, per rule and in total, and a touched file clears its own rows.
 
-**1634 finding(s)** across 324 file(s). 2.68% of all lines are duplicated, 3656 lines.
+**1629 finding(s)** across 324 file(s). 2.62% of all lines are duplicated, 3654 lines.
 
 ## By rule
 
 | Rule | Findings |
 |---|---:|
 | duplicated block | 754 |
-| complex function | 302 |
-| blocking call on the render path | 193 |
-| deeply nested | 115 |
+| complex function | 301 |
+| blocking call on the render path | 191 |
+| deeply nested | 114 |
 | module type in the UI | 77 |
 | long function | 49 |
 | long parameter list | 35 |
-| large stack frame | 34 |
+| large stack frame | 33 |
 | raw allocation in light | 28 |
 | large file | 25 |
 | name spread | 22 |
@@ -45,9 +45,9 @@ Each rule is a code smell with a named move from the refactoring catalog, the ta
 | Area | Findings |
 |---|---:|
 | `test` | 560 |
-| `light` | 417 |
-| `core` | 371 |
-| `platform` | 173 |
+| `light` | 415 |
+| `core` | 367 |
+| `platform` | 174 |
 | `ui` | 80 |
 | `moondeck` | 24 |
 | `src` | 7 |
@@ -59,11 +59,11 @@ The next function worth simplifying is at the top of each file's list.
 
 | File | Findings | Worst |
 |---|---:|---|
-| `src/core/system/HttpServerModule.cpp` | 47 | `HttpServerModule::handleConnection`, complex function 123 |
+| `src/core/system/HttpServerModule.cpp` | 46 | `HttpServerModule::handleConnection`, complex function 122 |
 | `src/ui/migrate.js` | 43 | `line 29: 'I2cBusModule'`, module type in the UI 1 |
 | `src/core/moonlive/MoonLiveCompiler.cpp` | 41 | `moonlive::Parser::parseDecl`, complex function 54 |
 | `src/platform/desktop/platform_desktop.cpp` | 40 | `platform::spawnEncoderProcess`, complex function 58 |
-| `src/ui/app.js` | 35 | `app.js`, large file 9196 |
+| `src/ui/app.js` | 35 | `app.js`, large file 9199 |
 | `src/core/system/MqttModule.cpp` | 31 | `MqttModule::routePublish`, complex function 29 |
 | `src/light/drivers/ParallelLedDriver.h` | 27 | `ParallelLedDriver::reinit`, complex function 36 |
 | `src/light/drivers/PreviewDriver.h` | 27 | `PreviewDriver::buildCoordTable`, complex function 37 |
@@ -80,22 +80,22 @@ The next function worth simplifying is at the top of each file's list.
 | `test/unit/light/unit_I80Peripheral.cpp` | 19 | `lines 132-151, also in test/unit/light/unit_ParlioPeripheral.cpp:197`, duplicated block 20 |
 | `src/platform/esp32/platform_esp32_moon_i80.cpp` | 18 | `platform::createRingState`, complex function 32 |
 | `test/unit/core/unit_PinsModule.cpp` | 18 | `lines 46-57, also in test/unit/light/unit_Hub75Driver_pins.cpp:66`, duplicated block 12 |
-| `src/core/services/AudioService.h` | 17 | `AudioService in 51 files`, name spread 51 |
+| `src/core/services/AudioService.h` | 16 | `AudioService in 52 files`, name spread 52 |
 | `src/light/effects/PacmanEffect.h` | 16 | `lines 243-257, also in src/light/effects/FishTankEffect.h:244`, duplicated block 15 |
 | `src/platform/esp32/platform_esp32_ota.cpp` | 15 | `platform::otaWriteMoonBase`, complex function 33 |
 | `test/unit/light/unit_PaintBrushEffect.cpp` | 15 | `lines 44-61, also in test/unit/light/unit_GEQ3DEffect.cpp:58`, duplicated block 18 |
 | `test/unit/light/unit_SolidEffect.cpp` | 15 | `lines 9-22, also in test/unit/light/unit_FixedRectangleEffect.cpp:90`, duplicated block 14 |
 | `src/core/module/Control.cpp` | 13 | `applyControlValue`, complex function 74 |
-| `src/light/layers/Layer.h` | 13 | `Layer in 128 files`, name spread 128 |
+| `src/light/layers/Layer.h` | 13 | `Layer in 130 files`, name spread 130 |
 | `src/light/moonlive/MoonLiveBuiltins_light.h` | 13 | `moonlive::mm_light_escape`, complex function 13 |
 | `test/unit/light/unit_HlsDriver.cpp` | 13 | `lines 30-47, also in test/unit/light/unit_PanelCardDriver.cpp:22`, duplicated block 18 |
 | `test/unit/light/unit_RandomMapModifier.cpp` | 13 | `lines 116-132, also in test/unit/light/unit_BlurzEffect.cpp:49`, duplicated block 17 |
 | `src/core/system/DevicesModule.h` | 12 | `lines 73-80, also in src/core/system/DevicesModule.h:59`, duplicated block 8 |
 | `src/light/drivers/HlsDriver.h` | 12 | `lines 105-117, also in src/light/drivers/RtspDriver.h:92`, duplicated block 13 |
 | `test/unit/light/unit_RubiksCubeEffect.cpp` | 12 | `lines 60-78, also in test/unit/light/unit_RubiksCubeEffect.cpp:28`, duplicated block 19 |
+| `src/light/drivers/Drivers.h` | 11 | `Drivers in 71 files`, name spread 71 |
 | `test/unit/light/unit_ParlioPeripheral.cpp` | 11 | `lines 197-216, also in test/unit/light/unit_I80Peripheral.cpp:132`, duplicated block 20 |
 | `test/unit/light/unit_StarFieldEffect.cpp` | 11 | `lines 88-103, also in test/unit/light/unit_StarFieldEffect.cpp:13`, duplicated block 16 |
-| `src/light/drivers/Drivers.h` | 10 | `Drivers in 69 files`, name spread 69 |
 | `src/light/effects/GEQ3DEffect.h` | 10 | `lines 140-150, also in src/light/effects/GEQ3DEffect.h:113`, duplicated block 11 |
 | `src/light/effects/GameOfLifeEffect.h` | 10 | `GameOfLifeEffect::evolveAutomaton`, complex function 67 |
 | `test/unit/light/unit_BlendMap.cpp` | 10 | `lines 285-291, also in test/unit/light/unit_BlendMap.cpp:214`, duplicated block 7 |
@@ -104,7 +104,7 @@ The next function worth simplifying is at the top of each file's list.
 | `src/core/services/OscModule.h` | 9 | `OscModule::handle`, deeply nested 5 |
 | `src/core/system/ControlModule.h` | 9 | `ControlModule::moveListRow`, complex function 15 |
 | `src/core/system/MoonStatsModule.h` | 9 | `buildMoonStatsReport`, long parameter list 11 |
-| `src/light/drivers/PanelCardDriver.h` | 9 | `lines 187-195, also in src/light/drivers/NetworkSendDriver.h:210`, duplicated block 9 |
+| `src/light/drivers/PanelCardDriver.h` | 9 | `lines 187-195, also in src/light/drivers/NetworkSendDriver.h:225`, duplicated block 9 |
 | `src/platform/esp32/platform_esp32_i80.cpp` | 9 | `platform::createState`, complex function 27 |
 | `test/unit/light/unit_ParallelLedDriver_swap.cpp` | 9 | `lines 176-184, also in test/unit/light/unit_ParallelLedDriver_swap.cpp:112`, duplicated block 9 |
 | `src/core/system/WiFiModule.h` | 8 | `lines 352-359, also in src/light/drivers/FixtureProfilesModule.h:245`, duplicated block 8 |
@@ -123,12 +123,12 @@ The next function worth simplifying is at the top of each file's list.
 | `src/platform/esp32/platform_esp32_hub75.cpp` | 7 | `platform::hub75Init`, complex function 32 |
 | `src/platform/esp32/platform_esp32_rmt.cpp` | 7 | `platform::rmtWs2812LoopbackFrame`, complex function 31 |
 | `test/js/ui-ws-scheme.test.mjs` | 7 | `lines 10-22, also in test/js/ui-render-guard.test.mjs:13`, duplicated block 13 |
-| `test/unit/core/unit_NetworkModule.cpp` | 7 | `lines 556-564, also in test/unit/core/unit_NetworkModule.cpp:190`, duplicated block 9 |
+| `test/unit/core/unit_NetworkModule.cpp` | 7 | `lines 595-603, also in test/unit/core/unit_NetworkModule.cpp:211`, duplicated block 9 |
 | `test/unit/light/unit_NdiDriver.cpp` | 7 | `lines 29-46, also in test/unit/light/unit_PanelCardDriver.cpp:22`, duplicated block 18 |
 | `test/unit/light/unit_PlasmaEffect.cpp` | 7 | `lines 24-39, also in test/unit/light/unit_MetaballsEffect.cpp:22`, duplicated block 16 |
 | `src/core/system/FirmwareUpdateModule.h` | 6 | `FirmwareUpdateModule in 13 files`, name spread 13 |
 | `src/light/drivers/FixtureProfilesModule.h` | 6 | `lines 245-252, also in src/core/system/WiFiModule.h:352`, duplicated block 8 |
-| `src/light/drivers/NetworkSendDriver.h` | 6 | `NetworkSendDriver::tick, line 190`, large stack frame 1760 |
+| `src/light/drivers/NetworkSendDriver.h` | 6 | `lines 225-233, also in src/light/drivers/PanelCardDriver.h:187`, duplicated block 9 |
 | `src/platform/desktop/moonlive_asm_x86_64.cpp` | 6 | `lines 557-564, also in src/platform/desktop/moonlive_asm_x86_64.cpp:515`, duplicated block 8 |
 | `src/platform/esp32/platform_esp32_improv.cpp` | 6 | `platform::improvTask`, complex function 22 |
 | `src/platform/esp32/platform_esp32_parlio.cpp` | 6 | `lines 278-287, also in src/platform/esp32/platform_esp32_i80.cpp:426`, duplicated block 10 |
@@ -172,7 +172,6 @@ The next function worth simplifying is at the top of each file's list.
 | `src/light/drivers/ParallelSlots.h` | 4 | `encodeWs2812ShiftData`, complex function 19 |
 | `src/light/drivers/RmtLedDriver.h` | 4 | `line 382: if (!frame_) frame_ = static_cast<uint8_t*>(platform::alloc(`, raw allocation in light 1 |
 | `src/light/effects/NebulaEffect.h` | 4 | `NebulaEffect::data`, complex function 27 |
-| `src/light/effects/NetworkReceiveEffect.h` | 4 | `platform::UdpSocket::recvFrom in tick`, blocking call on the render path 1 |
 | `src/light/effects/PolarNoiseEffect.h` | 4 | `lines 100-110, also in src/light/effects/TunnelEffect.h:96`, duplicated block 11 |
 | `src/light/effects/SpriteCast.h` | 4 | `lines 59-67, also in src/light/effects/SpaceInvadersEffect.h:436`, duplicated block 9 |
 | `src/light/effects/TrailsEffect.h` | 4 | `TrailsEffect::writeWide`, deeply nested 4 |
@@ -188,7 +187,7 @@ The next function worth simplifying is at the top of each file's list.
 | `test/unit/light/unit_Layer_extrude.cpp` | 4 | `lines 155-168, also in test/unit/light/unit_Layer_extrude.cpp:124`, duplicated block 14 |
 | `test/unit/light/unit_Layer_live_modifier.cpp` | 4 | `lines 96-105, also in test/unit/light/unit_RainbowEffect.cpp:69`, duplicated block 10 |
 | `test/unit/light/unit_NetworkSendDriver_no_alloc_in_loop.cpp` | 4 | `lines 49-59, also in test/unit/light/unit_NetworkSendDriver_no_alloc_in_loop.cpp:18`, duplicated block 11 |
-| `test/unit/light/unit_NetworkSendDriver_packet.cpp` | 4 | `lines 344-352, also in test/unit/light/unit_NetworkSendDriver_packet.cpp:290`, duplicated block 9 |
+| `test/unit/light/unit_NetworkSendDriver_packet.cpp` | 4 | `lines 346-354, also in test/unit/light/unit_NetworkSendDriver_packet.cpp:292`, duplicated block 9 |
 | `test/unit/light/unit_ParallelSlots.cpp` | 4 | `lines 522-532, also in test/unit/light/unit_ParallelSlots.cpp:493`, duplicated block 11 |
 | `test/unit/light/unit_PraxisEffect.cpp` | 4 | `lines 9-21, also in test/unit/light/unit_RandomMapModifier.cpp:115`, duplicated block 13 |
 | `test/unit/light/unit_fluid.cpp` | 4 | `lines 160-169, also in test/unit/light/unit_TrailsEffect.cpp:54`, duplicated block 10 |
@@ -196,17 +195,16 @@ The next function worth simplifying is at the top of each file's list.
 | `src/core/moonlive/moonlive_lower.h` | 3 | `moonlive::lowerWith`, complex function 85 |
 | `src/core/services/GamepadService.h` | 3 | `lines 108-130, also in src/core/services/InfraredService.h:113`, duplicated block 23 |
 | `src/core/system/AccessPointModule.h` | 3 | `platform::UdpSocket::recvFrom in tick20ms`, blocking call on the render path 1 |
-| `src/core/system/HttpServerModule.h` | 3 | `HttpServerModule in 18 files`, name spread 18 |
+| `src/core/system/HttpServerModule.h` | 3 | `HttpServerModule in 19 files`, name spread 19 |
 | `src/core/system/PinsModule.h` | 3 | `PinsModule::PinListSource::collect`, deeply nested 5 |
 | `src/core/util/HostList.h` | 3 | `parseHostList`, complex function 27 |
-| `src/core/util/HostResolver.h` | 3 | `HostResolver::pass`, deeply nested 4 |
 | `src/core/util/math16.h` | 3 | `lines 373-378, also in src/core/util/math8.h:94`, duplicated block 6 |
 | `src/light/drivers/Hub75Driver.h` | 3 | `Hub75Driver::prepare`, complex function 11 |
 | `src/light/effects/AuroraEffect.h` | 3 | `lines 132-140, also in src/light/effects/TunnelEffect.h:92`, duplicated block 9 |
 | `src/light/effects/PongEffect.h` | 3 | `PongEffect::render`, complex function 15 |
 | `src/light/effects/SolidEffect.h` | 3 | `SolidEffect::static_cast<lengthType>`, complex function 36 |
-| `src/light/layouts/GridLayout.h` | 3 | `GridLayout in 85 files`, name spread 85 |
-| `src/module_types.cpp` | 3 | `registerModuleTypes`, long function 150 |
+| `src/light/layouts/GridLayout.h` | 3 | `GridLayout in 87 files`, name spread 87 |
+| `src/module_types.cpp` | 3 | `registerModuleTypes`, long function 153 |
 | `src/platform/desktop/moonlive_asm_arm64.cpp` | 3 | `lines 35-40, also in src/platform/esp32/moonlive_asm_riscv.cpp:34`, duplicated block 6 |
 | `src/platform/esp32/moonlive_asm_xtensa.cpp` | 3 | `lines 483-489, also in src/platform/esp32/moonlive_asm_riscv.cpp:297`, duplicated block 7 |
 | `src/platform/teensy/platform_teensy_ota.cpp` | 3 | `platform::otaWriteStream`, complex function 16 |
@@ -237,11 +235,11 @@ The next function worth simplifying is at the top of each file's list.
 | `src/light/drivers/DriverBase.h` | 2 | `line 167: if (!wire_) wire_ = static_cast<uint8_t*>(platform::alloc(by`, raw allocation in light 1 |
 | `src/light/drivers/Hub75Slots.h` | 2 | `hub75Encode`, complex function 20 |
 | `src/light/drivers/MoonI80Peripheral.h` | 2 | `MoonI80Peripheral::busInitRing`, complex function 12 |
-| `src/light/effects/BeatRipplesEffect.h` | 2 | `BeatRipplesEffect::renderSurface`, complex function 12 |
 | `src/light/effects/BreakoutEffect.h` | 2 | `BreakoutEffect::move`, complex function 20 |
 | `src/light/effects/FreqSawsEffect.h` | 2 | `FreqSawsEffect::for`, deeply nested 5 |
 | `src/light/effects/LinesEffect.h` | 2 | `LinesEffect::if`, deeply nested 5 |
 | `src/light/effects/MetaballsEffect.h` | 2 | `lines 73-84, also in src/light/effects/SpiralEffect.h:79`, duplicated block 12 |
+| `src/light/effects/NetworkReceiveEffect.h` | 2 | `NetworkReceiveEffect::drainSockets`, complex function 11 |
 | `src/light/effects/NoiseEffect.h` | 2 | `NoiseEffect in 23 files`, name spread 23 |
 | `src/light/effects/PlasmaEffect.h` | 2 | `lines 82-92, also in src/light/effects/SpiralEffect.h:78`, duplicated block 11 |
 | `src/light/effects/PulseEffect.h` | 2 | `PulseEffect::for`, deeply nested 5 |
@@ -259,10 +257,11 @@ The next function worth simplifying is at the top of each file's list.
 | `src/platform/esp32/moonlive_asm_riscv.h` | 2 | `lines 74-91, also in src/platform/esp32/moonlive_asm_xtensa.h:79`, duplicated block 18 |
 | `src/platform/esp32/moonlive_emit_riscv.cpp` | 2 | `lines 52-57, also in src/platform/esp32/moonlive_emit_riscv.cpp:25`, duplicated block 6 |
 | `src/platform/teensy/moonlive_asm_thumb2.cpp` | 2 | `lines 67-72, also in src/platform/esp32/moonlive_asm_xtensa.cpp:190`, duplicated block 6 |
+| `src/platform/teensy/platform_teensy.cpp` | 2 | `lines 769-777, also in src/platform/esp32/platform_esp32_usb_midi.cpp:254`, duplicated block 9 |
 | `test/js/ui-midi-bridge.test.mjs` | 2 | `lines 4-16, also in test/js/ui-gamepad-bridge.test.mjs:4`, duplicated block 13 |
 | `test/unit/core/unit_AudioService_sync.cpp` | 2 | `lines 313-322, also in test/unit/core/unit_AudioService_sync.cpp:269`, duplicated block 10 |
 | `test/unit/core/unit_DevicesModule_hue.cpp` | 2 | `lines 63-69, also in test/unit/core/unit_DevicesModule_hue.cpp:42`, duplicated block 7 |
-| `test/unit/core/unit_HttpServerModule_sdcard.cpp` | 2 | `lines 421-426, also in test/unit/core/unit_HttpServerModule_sdcard.cpp:411`, duplicated block 6 |
+| `test/unit/core/unit_HttpServerModule_sdcard.cpp` | 2 | `lines 376-381, also in test/unit/core/unit_HttpServerModule_sdcard.cpp:366`, duplicated block 6 |
 | `test/unit/core/unit_OscPacket.cpp` | 2 | `lines 179-186, also in test/unit/core/unit_OscPacket.cpp:14`, duplicated block 8 |
 | `test/unit/core/unit_SystemModule.cpp` | 2 | `lines 117-123, also in test/unit/core/unit_SystemModule.cpp:51`, duplicated block 7 |
 | `test/unit/core/unit_moonlive_spill.cpp` | 2 | `lines 162-172, also in test/unit/core/unit_moonlive_spill.cpp:136`, duplicated block 11 |
@@ -277,7 +276,7 @@ The next function worth simplifying is at the top of each file's list.
 | `test/unit/light/unit_MoonLiveMotion.cpp` | 2 | `lines 209-214, also in test/unit/light/unit_MoonLiveMotion.cpp:118`, duplicated block 6 |
 | `test/unit/light/unit_MoonLiveParticles.cpp` | 2 | `lines 158-163, also in test/unit/light/unit_MoonLiveParticles.cpp:142`, duplicated block 6 |
 | `test/unit/light/unit_MoonLiveScriptResolve.cpp` | 2 | `lines 90-97, also in test/unit/light/unit_MoonLiveScriptResolve.cpp:78`, duplicated block 8 |
-| `test/unit/light/unit_NetworkReceiveEffect_protocols.cpp` | 2 | `lines 23-44, also in test/unit/light/unit_NetworkReceiveEffect.cpp:18`, duplicated block 22 |
+| `test/unit/light/unit_NetworkReceiveEffect_protocols.cpp` | 2 | `lines 23-44, also in test/unit/light/unit_NetworkReceiveEffect.cpp:23`, duplicated block 22 |
 | `test/unit/light/unit_NoiseEffect.cpp` | 2 | `lines 33-48, also in test/unit/light/unit_PolarLut_equivalence.cpp:40`, duplicated block 16 |
 | `test/unit/light/unit_Scroll.cpp` | 2 | `lines 6-20, also in test/unit/light/unit_Splat.cpp:6`, duplicated block 15 |
 | `test/unit/light/unit_SineEffect.cpp` | 2 | `lines 22-30, also in test/unit/light/unit_DistortionWavesEffect.cpp:26`, duplicated block 9 |
@@ -288,14 +287,14 @@ The next function worth simplifying is at the top of each file's list.
 | `moondeck/check/check_nonblocking.py` | 1 | `lines 30-40, also in moondeck/check/check_footprint.py:31`, duplicated block 11 |
 | `moondeck/ci/verify_version.py` | 1 | `lines 39-45, also in moondeck/scenario/run_scenario.py:33`, duplicated block 7 |
 | `moondeck/docs/build_docs.py` | 1 | `lines 43-49, also in moondeck/scenario/run_scenario.py:33`, duplicated block 7 |
-| `moondeck/docs/screenshot_modules.py` | 1 | `screenshot_modules.py`, large file 1227 |
+| `moondeck/docs/screenshot_modules.py` | 1 | `screenshot_modules.py`, large file 1248 |
 | `moondeck/moondeck.py` | 1 | `moondeck.py`, large file 2696 |
 | `moondeck/moontube/mtmeasure.py` | 1 | `lines 42-49, also in moondeck/moontube/mtnarrate.py:91`, duplicated block 8 |
 | `moondeck/moontube/mtnarrate.py` | 1 | `lines 91-98, also in moondeck/moontube/mtmeasure.py:42`, duplicated block 8 |
 | `moondeck/moontube/mtrun.py` | 1 | `mtrun.py`, large file 1711 |
-| `moondeck/scenario/run_live_scenario.py` | 1 | `run_live_scenario.py`, large file 1677 |
-| `mooninstaller/install-orchestrator.js` | 1 | `install-orchestrator.js`, large file 1386 |
-| `mooninstaller/install.js` | 1 | `install.js`, large file 1553 |
+| `moondeck/scenario/run_live_scenario.py` | 1 | `run_live_scenario.py`, large file 1789 |
+| `mooninstaller/install-orchestrator.js` | 1 | `install-orchestrator.js`, large file 1473 |
+| `mooninstaller/install.js` | 1 | `install.js`, large file 1610 |
 | `src/core/module/Control.h` | 1 | `sanitizeHostname`, complex function 16 |
 | `src/core/moonlive/MoonLive.h` | 1 | `moonlive::MoonLive::addDeclaredControl`, complex function 16 |
 | `src/core/moonlive/MoonLiveIr.h` | 1 | `moonlive::IrProgram::push`, complex function 12 |
@@ -303,11 +302,12 @@ The next function worth simplifying is at the top of each file's list.
 | `src/core/services/AudioLevel.h` | 1 | `computeLevel`, complex function 14 |
 | `src/core/services/MoonLiveService.h` | 1 | `moonlive::MoonLive::runValue in tick20ms`, blocking call on the render path 1 |
 | `src/core/services/OscPacket.h` | 1 | `osc::parse`, complex function 32 |
-| `src/core/services/Services.h` | 1 | `Services in 14 files`, name spread 14 |
+| `src/core/services/Services.h` | 1 | `Services in 16 files`, name spread 16 |
 | `src/core/system/FileManagerModule.cpp` | 1 | `platform::filesystemUsed in tick1s`, blocking call on the render path 1 |
 | `src/core/system/FilesystemModule.h` | 1 | `FilesystemModule in 25 files`, name spread 25 |
 | `src/core/util/Addressing.h` | 1 | `sendAddressed`, complex function 11 |
 | `src/core/util/CaptivePortal.h` | 1 | `captive::dnsReply`, complex function 21 |
+| `src/core/util/HostResolver.h` | 1 | `HostResolver::lookup`, complex function 13 |
 | `src/core/util/ImprovFrame.h` | 1 | `ImprovFrameParser::feed`, complex function 22 |
 | `src/core/util/RtpMidi.h` | 1 | `rtpmidi::findList`, complex function 11 |
 | `src/core/util/color.h` | 1 | `rgbToHueSat`, complex function 12 |
@@ -316,6 +316,7 @@ The next function worth simplifying is at the top of each file's list.
 | `src/light/drivers/I80Peripheral.h` | 1 | `I80Peripheral::validateBusFatal`, complex function 14 |
 | `src/light/drivers/NdiDriver.h` | 1 | `platform::ndiSendFrame in tick`, blocking call on the render path 1 |
 | `src/light/effects/BallpitEffect.h` | 1 | `lines 80-85, also in src/light/effects/FireworksEffect.h:83`, duplicated block 6 |
+| `src/light/effects/BeatRipplesEffect.h` | 1 | `BeatRipplesEffect::splash`, complex function 12 |
 | `src/light/effects/DemoReelEffect.h` | 1 | `DemoReelEffect::advance in tick`, blocking call on the render path 1 |
 | `src/light/effects/DistortionWavesEffect.h` | 1 | `lines 65-75, also in src/light/effects/SpiralEffect.h:79`, duplicated block 11 |
 | `src/light/effects/FireworksEffect.h` | 1 | `lines 83-88, also in src/light/effects/BallpitEffect.h:80`, duplicated block 6 |
@@ -332,7 +333,7 @@ The next function worth simplifying is at the top of each file's list.
 | `src/light/layers/Effects.h` | 1 | `Effects in 77 files`, name spread 77 |
 | `src/light/layouts/CubeLayout.h` | 1 | `lines 81-88, also in src/light/layouts/GridLayout.h:43`, duplicated block 8 |
 | `src/light/layouts/HumanSizedCubeLayout.h` | 1 | `HumanSizedCubeLayout::placeLights`, complex function 21 |
-| `src/light/layouts/Layouts.h` | 1 | `Layouts in 109 files`, name spread 109 |
+| `src/light/layouts/Layouts.h` | 1 | `Layouts in 111 files`, name spread 111 |
 | `src/light/layouts/PanelLayout.h` | 1 | `lines 54-69, also in src/light/layouts/PanelsLayout.h:64`, duplicated block 16 |
 | `src/light/layouts/PanelsLayout.h` | 1 | `lines 64-79, also in src/light/layouts/PanelLayout.h:54`, duplicated block 16 |
 | `src/light/layouts/SphereLayout.h` | 1 | `SphereLayout::forEachShellPoint`, deeply nested 4 |
@@ -348,9 +349,8 @@ The next function worth simplifying is at the top of each file's list.
 | `src/platform/esp32/platform_esp32_i2s.cpp` | 1 | `platform::audioMicInit`, complex function 11 |
 | `src/platform/esp32/platform_esp32_sdmmc.cpp` | 1 | `platform::mountCard`, complex function 13 |
 | `src/platform/esp32/platform_esp32_tasks.cpp` | 1 | `platform::taskSnapshot`, complex function 12 |
-| `src/platform/esp32/platform_esp32_usb_midi.cpp` | 1 | `lines 254-262, also in src/platform/teensy/platform_teensy.cpp:723`, duplicated block 9 |
-| `src/platform/platform.h` | 1 | `platform.h`, large file 1441 |
-| `src/platform/teensy/platform_teensy.cpp` | 1 | `lines 723-731, also in src/platform/esp32/platform_esp32_usb_midi.cpp:254`, duplicated block 9 |
+| `src/platform/esp32/platform_esp32_usb_midi.cpp` | 1 | `lines 254-262, also in src/platform/teensy/platform_teensy.cpp:769`, duplicated block 9 |
+| `src/platform/platform.h` | 1 | `platform.h`, large file 1453 |
 | `src/platform/teensy/platform_teensy_gpio_dma.cpp` | 1 | `lines 311-316, also in src/platform/esp32/platform_esp32_parlio.cpp:287`, duplicated block 6 |
 | `src/platform/teensy/platform_teensy_improv.cpp` | 1 | `platform::improvProvisioningInit`, long parameter list 9 |
 | `src/ui/install-picker.js` | 1 | `install-picker.js`, large file 1048 |
@@ -376,7 +376,7 @@ The next function worth simplifying is at the top of each file's list.
 | `test/unit/light/unit_GridLayout.cpp` | 1 | `lines 8-21, also in test/unit/light/unit_SingleColumnLayout.cpp:12`, duplicated block 14 |
 | `test/unit/light/unit_Layer_persistence.cpp` | 1 | `lines 45-51, also in test/unit/light/unit_TextEffect.cpp:18`, duplicated block 7 |
 | `test/unit/light/unit_Layer_phase_animation.cpp` | 1 | `lines 77-85, also in test/unit/light/unit_RandomMapModifier.cpp:115`, duplicated block 9 |
-| `test/unit/light/unit_NetworkReceiveEffect.cpp` | 1 | `lines 18-39, also in test/unit/light/unit_NetworkReceiveEffect_protocols.cpp:23`, duplicated block 22 |
+| `test/unit/light/unit_NetworkReceiveEffect.cpp` | 1 | `lines 23-44, also in test/unit/light/unit_NetworkReceiveEffect_protocols.cpp:23`, duplicated block 22 |
 | `test/unit/light/unit_ParallelLedDriver_doublebuffer.cpp` | 1 | `lines 93-104, also in test/unit/light/unit_ParallelLedDriver_pinexpander.cpp:94`, duplicated block 12 |
 | `test/unit/light/unit_Rings241Layout.cpp` | 1 | `lines 18-30, also in test/unit/light/unit_SingleColumnLayout.cpp:19`, duplicated block 13 |
 | `test/unit/light/unit_SpaceInvadersEffect.cpp` | 1 | `lines 13-20, also in test/unit/light/unit_SpritePopulation.cpp:23`, duplicated block 8 |
diff --git a/docs/reference/metrics/docgen.md b/docs/reference/metrics/docgen.md
index 06ec75cbb..0488a0655 100644
--- a/docs/reference/metrics/docgen.md
+++ b/docs/reference/metrics/docgen.md
@@ -4,9 +4,9 @@ Generated by [`moondeck/check/check_docgen.py`](../../../moondeck/check/check_do
 
 Every place the generated documentation breaks the shape [the standards](../../contributing/documentation-standards.md#the-card) define. Current state only: the trend is this file's git history. The list only shrinks.
 
-**0 error(s)** and **3736 warning(s)** across 434 page(s).
+**0 error(s)** and **3711 warning(s)** across 429 page(s).
 
-**5511 appendix line(s)** after `@moreinfo`. This only falls as well: a cleanup cuts first, and moves only what neither the code, the test name nor the spec says.
+**5496 appendix line(s)** after `@moreinfo`. This only falls as well: a cleanup cuts first, and moves only what neither the code, the test name nor the spec says.
 
 An error is in a file that generates a documentation page, a header or a catalog page, so the finding is a defect in what gets published and it fails the gate. A warning is worth fixing without being worth stopping a commit for: any finding in an implementation file, which publishes nothing, and the rules still staged as counts in a header too, the over-wide line and the appendix section nothing refers to. Both are counted here, because a warning nobody sees is a warning nobody fixes.
 
@@ -16,12 +16,12 @@ The split is temporary. It stages the sweep rather than ranking the two kinds of
 
 | Rule | Errors | Warnings |
 |---|---:|---:|
-| over-wide comment lines | 0 | 1568 |
-| split paragraphs | 0 | 1278 |
-| appendix sections nothing refers to | 0 | 355 |
+| over-wide comment lines | 0 | 1566 |
+| split paragraphs | 0 | 1267 |
+| appendix sections nothing refers to | 0 | 348 |
 | multi-line comment blocks | 0 | 311 |
-| over-long sentences | 0 | 81 |
-| over-wide doc lines | 0 | 76 |
+| over-long sentences | 0 | 79 |
+| over-wide doc lines | 0 | 73 |
 | member deep dives | 0 | 67 |
 
 ## By documentation area
@@ -30,16 +30,16 @@ The unit a sweep runs in: one summary page and the headers it owns, as the [hier
 
 | Summary page | Errors | Warnings |
 |---|---:|---:|
-| `(tests, no card)` | 0 | 2030 |
+| `(tests, no card)` | 0 | 2025 |
 | `platform/index.md` | 0 | 658 |
-| `light/effects.md` | 0 | 251 |
-| `core/system.md` | 0 | 138 |
-| `core/supporting.md` | 0 | 132 |
+| `light/effects.md` | 0 | 242 |
+| `core/system.md` | 0 | 134 |
+| `core/supporting.md` | 0 | 131 |
 | `light/power-functions.md` | 0 | 122 |
-| `light/drivers.md` | 0 | 97 |
+| `light/drivers.md` | 0 | 98 |
 | `core/services.md` | 0 | 88 |
-| `light/supporting.md` | 0 | 64 |
 | `light/layouts.md` | 0 | 59 |
+| `light/supporting.md` | 0 | 57 |
 | `light/moonlive.md` | 0 | 49 |
 | `light/modifiers.md` | 0 | 47 |
 | `(unassigned)` | 0 | 1 |
@@ -50,7 +50,7 @@ Per area, since that is the unit a sweep runs in: the files ranked, then the rul
 
 ### (tests, no card)
 
-**0 error(s)** and **2030 warning(s)** across 162 file(s).
+**0 error(s)** and **2025 warning(s)** across 163 file(s).
 
 | Findings | File | |
 |---:|---|---|
@@ -64,9 +64,9 @@ Per area, since that is the unit a sweep runs in: the files ranked, then the rul
 | 48 | `test/unit/light/unit_Effects_gridsweep.cpp` | warning |
 | 46 | `test/unit/light/unit_ParallelSlots.cpp` | warning |
 | 45 | `test/unit/core/unit_FilesystemModule_persistence.cpp` | warning |
-| 1-44 each | *152 more warning files, 1281 findings* | |
+| 1-44 each | *153 more warning files, 1276 findings* | |
 
-By rule, warnings: 1350 over-wide comment lines, 253 split paragraphs, 196 multi-line comment blocks, 80 over-long sentences, 76 over-wide doc lines, 67 member deep dives, 8 appendix sections nothing refers to.
+By rule, warnings: 1350 over-wide comment lines, 253 split paragraphs, 196 multi-line comment blocks, 78 over-long sentences, 73 over-wide doc lines, 67 member deep dives, 8 appendix sections nothing refers to.
 
 ### platform/index.md
 
@@ -90,7 +90,7 @@ By rule, warnings: 321 split paragraphs, 214 over-wide comment lines, 114 multi-
 
 ### light/effects.md
 
-**0 error(s)** and **251 warning(s)** across 69 file(s).
+**0 error(s)** and **242 warning(s)** across 67 file(s).
 
 | Findings | File | |
 |---:|---|---|
@@ -104,13 +104,13 @@ By rule, warnings: 321 split paragraphs, 214 over-wide comment lines, 114 multi-
 | 5 | `src/light/effects/DemoReelEffect.h` | warning |
 | 5 | `src/light/effects/FireworksEffect.h` | warning |
 | 5 | `src/light/effects/FreqMatrixEffect.h` | warning |
-| 1-5 each | *59 more warning files, 188 findings* | |
+| 1-5 each | *57 more warning files, 179 findings* | |
 
-By rule, warnings: 170 split paragraphs, 81 appendix sections nothing refers to.
+By rule, warnings: 164 split paragraphs, 78 appendix sections nothing refers to.
 
 ### core/system.md
 
-**0 error(s)** and **138 warning(s)** across 30 file(s).
+**0 error(s)** and **134 warning(s)** across 28 file(s).
 
 | Findings | File | |
 |---:|---|---|
@@ -124,13 +124,13 @@ By rule, warnings: 170 split paragraphs, 81 appendix sections nothing refers to.
 | 7 | `src/core/system/DevicesModule.h` | warning |
 | 7 | `src/core/system/ImprovProvisioningModule.h` | warning |
 | 7 | `src/core/system/MqttModule.h` | warning |
-| 1-6 each | *20 more warning files, 49 findings* | |
+| 1-6 each | *18 more warning files, 45 findings* | |
 
-By rule, warnings: 99 split paragraphs, 34 appendix sections nothing refers to, 4 over-wide comment lines, 1 multi-line comment blocks.
+By rule, warnings: 97 split paragraphs, 34 appendix sections nothing refers to, 2 over-wide comment lines, 1 multi-line comment blocks.
 
 ### core/supporting.md
 
-**0 error(s)** and **132 warning(s)** across 31 file(s).
+**0 error(s)** and **131 warning(s)** across 30 file(s).
 
 | Findings | File | |
 |---:|---|---|
@@ -144,9 +144,9 @@ By rule, warnings: 99 split paragraphs, 34 appendix sections nothing refers to,
 | 6 | `src/core/util/FirmwareImage.h` | warning |
 | 6 | `src/core/util/LightOutput.h` | warning |
 | 6 | `src/core/util/PinList.h` | warning |
-| 1-5 each | *21 more warning files, 59 findings* | |
+| 1-5 each | *20 more warning files, 58 findings* | |
 
-By rule, warnings: 91 split paragraphs, 41 appendix sections nothing refers to.
+By rule, warnings: 90 split paragraphs, 41 appendix sections nothing refers to.
 
 ### light/power-functions.md
 
@@ -170,7 +170,7 @@ By rule, warnings: 78 split paragraphs, 44 appendix sections nothing refers to.
 
 ### light/drivers.md
 
-**0 error(s)** and **97 warning(s)** across 16 file(s).
+**0 error(s)** and **98 warning(s)** across 16 file(s).
 
 | Findings | File | |
 |---:|---|---|
@@ -183,10 +183,10 @@ By rule, warnings: 78 split paragraphs, 44 appendix sections nothing refers to.
 | 4 | `src/light/drivers/FixtureProfilesModule.h` | warning |
 | 3 | `src/light/drivers/HlsDriver.h` | warning |
 | 3 | `src/light/drivers/MoonI80Peripheral.h` | warning |
-| 3 | `src/light/drivers/RmtLedDriver.h` | warning |
-| 1-3 each | *6 more warning files, 12 findings* | |
+| 3 | `src/light/drivers/NetworkSendDriver.h` | warning |
+| 1-3 each | *6 more warning files, 13 findings* | |
 
-By rule, warnings: 49 split paragraphs, 48 appendix sections nothing refers to.
+By rule, warnings: 51 split paragraphs, 47 appendix sections nothing refers to.
 
 ### core/services.md
 
@@ -208,26 +208,6 @@ By rule, warnings: 49 split paragraphs, 48 appendix sections nothing refers to.
 
 By rule, warnings: 64 split paragraphs, 24 appendix sections nothing refers to.
 
-### light/supporting.md
-
-**0 error(s)** and **64 warning(s)** across 14 file(s).
-
-| Findings | File | |
-|---:|---|---|
-| 9 | `src/light/layers/BlendMap.h` | warning |
-| 7 | `src/light/layers/Layer.h` | warning |
-| 7 | `src/light/layers/MappingLUT.h` | warning |
-| 7 | `src/light/util/FixtureChannels.h` | warning |
-| 6 | `src/light/util/DdpPacket.h` | warning |
-| 5 | `src/light/layers/Buffer.h` | warning |
-| 5 | `src/light/layers/Effects.h` | warning |
-| 4 | `src/light/util/ArtNetPacket.h` | warning |
-| 4 | `src/light/util/RtpH264.h` | warning |
-| 3 | `src/light/util/light_types.h` | warning |
-| 1-2 each | *4 more warning files, 7 findings* | |
-
-By rule, warnings: 35 split paragraphs, 29 appendix sections nothing refers to.
-
 ### light/layouts.md
 
 **0 error(s)** and **59 warning(s)** across 16 file(s).
@@ -248,6 +228,26 @@ By rule, warnings: 35 split paragraphs, 29 appendix sections nothing refers to.
 
 By rule, warnings: 53 split paragraphs, 6 appendix sections nothing refers to.
 
+### light/supporting.md
+
+**0 error(s)** and **57 warning(s)** across 13 file(s).
+
+| Findings | File | |
+|---:|---|---|
+| 9 | `src/light/layers/BlendMap.h` | warning |
+| 7 | `src/light/layers/Layer.h` | warning |
+| 7 | `src/light/util/FixtureChannels.h` | warning |
+| 6 | `src/light/util/DdpPacket.h` | warning |
+| 5 | `src/light/layers/Buffer.h` | warning |
+| 5 | `src/light/layers/Effects.h` | warning |
+| 4 | `src/light/util/ArtNetPacket.h` | warning |
+| 4 | `src/light/util/RtpH264.h` | warning |
+| 3 | `src/light/util/light_types.h` | warning |
+| 2 | `src/light/util/E131Packet.h` | warning |
+| 1-2 each | *3 more warning files, 5 findings* | |
+
+By rule, warnings: 31 split paragraphs, 26 appendix sections nothing refers to.
+
 ### light/moonlive.md
 
 **0 error(s)** and **49 warning(s)** across 19 file(s).
diff --git a/docs/reference/metrics/prose.md b/docs/reference/metrics/prose.md
index f53799ae5..d0a3201c2 100644
--- a/docs/reference/metrics/prose.md
+++ b/docs/reference/metrics/prose.md
@@ -9,14 +9,14 @@ This number is the debt behind that gate, and it RATCHETS: a rise fails the chec
 docgen.md does. A comment is prose wherever it lives, so a `//` in the web interface and a
 `#` in a script are counted beside a `///` in a header.
 
-**2859 finding(s)** across 365 file(s).
+**2847 finding(s)** across 361 file(s).
 
 | rule | findings |
 |---|---|
-| `MoonLight.EmDash` | 1461 |
-| `MoonLight.Weasel` | 676 |
+| `MoonLight.EmDash` | 1455 |
+| `MoonLight.Weasel` | 671 |
 | `MoonLight.SentenceLength` | 426 |
-| `MoonLight.Temporal` | 211 |
+| `MoonLight.Temporal` | 210 |
 | `MoonLight.Spelling` | 42 |
 | `MoonLight.SelfReference` | 30 |
 | `MoonLight.NegatedHeading` | 13 |
@@ -28,13 +28,13 @@ docgen.md does. A comment is prose wherever it lives, so a `//` in the web inter
 | `moondeck/MoonDeck.md` | 239 |
 | `moondeck/moondeck.py` | 156 |
 | `docs/how-to/home-automation.md` | 117 |
-| `mooninstaller/install-orchestrator.js` | 93 |
 | `docs/tutorials/build-your-own-moonmodules.md` | 92 |
 | `moondeck/moondeck_ui/app.js` | 92 |
+| `mooninstaller/install-orchestrator.js` | 91 |
 | `docs/how-to/building.md` | 78 |
 | `moondeck/check/check_clang_query.py` | 73 |
-| `mooninstaller/install.js` | 69 |
 | `src/ui/app.js` | 69 |
+| `mooninstaller/install.js` | 68 |
 | `src/ui/install-picker.js` | 55 |
 | `moondeck/docs/gen_api.py` | 53 |
 | `src/ui/preview3d.js` | 49 |
diff --git a/docs/reference/metrics/repo-health.json b/docs/reference/metrics/repo-health.json
index d416e3fee..b17e60763 100644
--- a/docs/reference/metrics/repo-health.json
+++ b/docs/reference/metrics/repo-health.json
@@ -1,44 +1,44 @@
 {
-  "commit": "ce37ca46",
+  "commit": "f487420a",
   "flash": {
-    "esp32s3-n16r8": 2438784,
-    "esp32": 2353056,
-    "esp32p4rev1-eth": 2364160,
-    "esp32p4rev1-eth-wifi": 2523840,
-    "esp32s3-n8r8": 2438784,
-    "esp32s31": 2694736,
-    "esp32-16mb": 2353248,
+    "esp32s3-n16r8": 2452928,
+    "esp32": 2258576,
+    "esp32p4rev1-eth": 2396368,
+    "esp32p4rev1-eth-wifi": 2623840,
+    "esp32s3-n8r8": 2437792,
+    "esp32s31": 2744032,
+    "esp32-16mb": 2356048,
     "esp32-eth": 1681040,
     "esp32-wrover": 1843760,
     "qemu": 1383648,
     "esp32p4rev3-eth": 2231792,
-    "esp32s3-zero": 2225840,
+    "esp32s3-zero": 2224816,
     "esp32-pico": 2107168,
-    "desktop-macos": 2356920,
+    "desktop-macos": 2382040,
     "desktop-windows": 1925120,
     "esp32c3": 2335072,
     "desktop-linux": 2548000,
-    "esp32s3-n32r16": 2438000,
-    "teensy41": 1266668
+    "esp32s3-n32r16": 2475808,
+    "teensy41": 1271788
   },
   "measured": {
-    "esp32p4rev1-eth": "2026-10-13",
+    "esp32p4rev1-eth": "2026-10-14",
     "esp32s31": "2026-10-13",
-    "esp32": "2026-10-13",
+    "esp32": "2026-10-14",
     "esp32-pico": "2026-09-09",
-    "esp32s3-n16r8": "2026-10-13",
+    "esp32s3-n16r8": "2026-10-14",
     "esp32s3-n8r8": "2026-10-13",
     "esp32s3-zero": "2026-10-13",
     "esp32-16mb": "2026-10-13",
-    "esp32p4rev1-eth-wifi": "2026-10-13",
+    "esp32p4rev1-eth-wifi": "2026-10-14",
     "esp32-eth": "2026-09-11",
     "esp32p4rev3-eth": "2026-10-13",
-    "desktop-macos": "2026-10-13",
+    "desktop-macos": "2026-10-14",
     "desktop-windows": "2026-09-30",
     "esp32c3": "2026-10-10",
     "desktop-linux": "2026-10-12",
-    "esp32s3-n32r16": "2026-10-13",
-    "teensy41": "2026-10-13"
+    "esp32s3-n32r16": "2026-10-14",
+    "teensy41": "2026-10-14"
   },
   "perf": {
     "esp32": {
@@ -50,9 +50,9 @@
       "Control_a_palette_preset_changes_only_the_palette": {
         "desktop-macos": {
           "p50": 8,
-          "p95": 324,
-          "n": 31,
-          "last": "2026-10-12"
+          "p95": 14,
+          "n": 32,
+          "last": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "p50": 2073,
@@ -127,10 +127,10 @@
       },
       "State_one_document_adds_an_effect_with_its_controls": {
         "desktop-macos": {
-          "p50": 4,
-          "p95": 387,
-          "n": 30,
-          "last": "2026-10-12"
+          "p50": 7,
+          "p95": 8,
+          "n": 32,
+          "last": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "p50": 2505,
@@ -319,6 +319,52 @@
           "last": "2026-10-11"
         }
       },
+      "NetworkReceive_two_boards": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "p50": 30612,
+          "p95": 33261,
+          "n": 2,
+          "last": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "p50": 11930,
+          "p95": 21562,
+          "n": 2,
+          "last": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "p50": 37919,
+          "p95": 38723,
+          "n": 3,
+          "last": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "p50": 15741,
+          "p95": 22861,
+          "n": 6,
+          "last": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "p50": 3402,
+          "p95": 3402,
+          "n": 1,
+          "last": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "p50": 5022,
+          "p95": 6680,
+          "n": 2,
+          "last": "2026-10-14"
+        }
+      },
+      "NetworkSend_one_sender_many_receivers": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "p50": 3847,
+          "p95": 3980,
+          "n": 2,
+          "last": "2026-10-14"
+        }
+      },
       "perf_full": {
         "desktop-macos": {
           "p50": 256,
@@ -546,9 +592,9 @@
       "Drivers_output_and_brightness": {
         "desktop-macos": {
           "p50": 7,
-          "p95": 15,
+          "p95": 9,
           "n": 32,
-          "last": "2026-10-12"
+          "last": "2026-10-14"
         },
         "desktop-windows": {
           "p50": 4,
@@ -580,7 +626,7 @@
           "p50": 7,
           "p95": 10,
           "n": 32,
-          "last": "2026-10-12"
+          "last": "2026-10-14"
         },
         "desktop-windows": {
           "p50": 4,
@@ -592,9 +638,9 @@
       "Effects_swap_while_running": {
         "desktop-macos": {
           "p50": 1,
-          "p95": 2,
+          "p95": 1,
           "n": 32,
-          "last": "2026-10-12"
+          "last": "2026-10-14"
         },
         "desktop-windows": {
           "p50": 4,
@@ -623,10 +669,10 @@
       },
       "Effects_teardown_under_a_running_pipeline": {
         "desktop-macos": {
-          "p50": 7,
-          "p95": 18,
+          "p50": 8,
+          "p95": 15,
           "n": 32,
-          "last": "2026-10-12"
+          "last": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "p50": 9080,
@@ -656,9 +702,9 @@
       "Layers_stack_and_blend_live": {
         "desktop-macos": {
           "p50": 267,
-          "p95": 355,
+          "p95": 309,
           "n": 32,
-          "last": "2026-10-12"
+          "last": "2026-10-14"
         }
       },
       "Layouts_resize_reallocates_live": {
@@ -666,7 +712,7 @@
           "p50": 10,
           "p95": 19,
           "n": 32,
-          "last": "2026-10-13"
+          "last": "2026-10-14"
         },
         "desktop-windows": {
           "p50": 93,
@@ -696,9 +742,9 @@
       "Modifiers_reshape_the_mapping": {
         "desktop-macos": {
           "p50": 7,
-          "p95": 11,
+          "p95": 10,
           "n": 32,
-          "last": "2026-10-13"
+          "last": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "p50": 10350,
@@ -728,9 +774,9 @@
       "Palettes_a_script_drives_the_effects": {
         "desktop-macos": {
           "p50": 7,
-          "p95": 74,
+          "p95": 11,
           "n": 32,
-          "last": "2026-10-13"
+          "last": "2026-10-14"
         }
       }
     },
@@ -742,13 +788,13 @@
           "p50": 7,
           "p95": 10,
           "n": 32,
-          "last": "2026-10-12"
+          "last": "2026-10-14"
         },
         "Layouts_resize_reallocates_live": {
           "p50": 10,
           "p95": 19,
           "n": 32,
-          "last": "2026-10-13"
+          "last": "2026-10-14"
         }
       }
     },
@@ -776,54 +822,54 @@
     }
   },
   "loc": {
-    "core": 30056,
-    "light": 31265,
-    "platform": 21118,
-    "ui": 12470,
-    "test": 67258,
-    "moondeck": 31290
+    "core": 30403,
+    "light": 31876,
+    "platform": 21635,
+    "ui": 12473,
+    "test": 68328,
+    "moondeck": 31610
   },
   "comments": {
     "core": {
-      "lines": 6425,
-      "ratio": 0.237
+      "lines": 6486,
+      "ratio": 0.236
     },
     "light": {
-      "lines": 7512,
-      "ratio": 0.27
+      "lines": 7597,
+      "ratio": 0.268
     },
     "platform": {
-      "lines": 4133,
-      "ratio": 0.219
+      "lines": 4172,
+      "ratio": 0.216
     },
     "ui": {
-      "lines": 3470,
+      "lines": 3471,
       "ratio": 0.295
     },
     "test": {
-      "lines": 7114,
+      "lines": 7193,
       "ratio": 0.122
     },
     "moondeck": {
-      "lines": 4933,
-      "ratio": 0.18
+      "lines": 4942,
+      "ratio": 0.178
     }
   },
   "tests": {
-    "cases": 2515,
-    "scenarios": 30
+    "cases": 2555,
+    "scenarios": 32
   },
   "docs": {
-    "md_files": 156,
-    "md_lines": 33332,
-    "plans_files": 48,
-    "backlog_lines": 3399,
+    "md_files": 161,
+    "md_lines": 34209,
+    "plans_files": 50,
+    "backlog_lines": 3393,
     "lessons_lines": 532,
-    "claude_md_lines": 285
+    "claude_md_lines": 287
   },
   "complexity": {
-    "functions": 4989,
-    "over_threshold": 354,
+    "functions": 5087,
+    "over_threshold": 353,
     "worst_ccn": 128
   }
 }
diff --git a/docs/reference/metrics/repo-health.md b/docs/reference/metrics/repo-health.md
index 0e4206943..11986bfc0 100644
--- a/docs/reference/metrics/repo-health.md
+++ b/docs/reference/metrics/repo-health.md
@@ -1,6 +1,6 @@
 # Repo health
 
-Measured at `ce37ca46`. Generated by [`moondeck/check/repo_health.py`](../../../moondeck/check/repo_health.py) on every KPI-gate run. **Do not edit by hand.**
+Measured at `f487420a`. Generated by [`moondeck/check/repo_health.py`](../../../moondeck/check/repo_health.py) on every KPI-gate run. **Do not edit by hand.**
 
 Current state only; the trend is this file's git history (`git log -p docs/reference/metrics/repo-health.md`). Nothing here fails a build: the numbers make growth visible, the judgment stays human.
 
@@ -9,29 +9,29 @@ Current state only; the trend is this file's git history (`git log -p docs/refer
 | Metric | v6.0.0 | Now | Change |
 |---|---:|---:|---:|
 | flash desktop-linux | - | 2,488 KB | new |
-| flash desktop-macos | 1,963 KB | 2,302 KB | +338.7 KB (+17.3%) |
-| flash esp32 | 2,061 KB | 2,298 KB | +236.7 KB (+11.5%) |
-| flash esp32-16mb | 2,012 KB | 2,298 KB | +286.0 KB (+14.2%) |
+| flash desktop-macos | 1,963 KB | 2,326 KB | +363.2 KB (+18.5%) |
+| flash esp32 | 2,061 KB | 2,206 KB | +144.5 KB (+7.0%) |
+| flash esp32-16mb | 2,012 KB | 2,301 KB | +288.8 KB (+14.4%) |
 | flash esp32c3 | - | 2,280 KB | new |
-| flash esp32p4rev1-eth | 2,022 KB | 2,309 KB | +287.0 KB (+14.2%) |
-| flash esp32p4rev1-eth-wifi | 2,304 KB | 2,465 KB | +161.1 KB (+7.0%) |
+| flash esp32p4rev1-eth | 2,022 KB | 2,340 KB | +318.5 KB (+15.8%) |
+| flash esp32p4rev1-eth-wifi | 2,304 KB | 2,562 KB | +258.7 KB (+11.2%) |
 | flash esp32p4rev3-eth | 2,025 KB | 2,179 KB | +154.2 KB (+7.6%) |
-| flash esp32s3-n16r8 | 2,111 KB | 2,382 KB | +270.1 KB (+12.8%) |
-| flash esp32s3-n32r16 | - | 2,381 KB | new |
-| flash esp32s3-n8r8 | 2,038 KB | 2,382 KB | +343.4 KB (+16.8%) |
-| flash esp32s3-zero | 1,977 KB | 2,174 KB | +196.9 KB (+10.0%) |
-| flash esp32s31 | 2,395 KB | 2,632 KB | +236.2 KB (+9.9%) |
-| flash teensy41 | - | 1,237 KB | new |
+| flash esp32s3-n16r8 | 2,111 KB | 2,395 KB | +284.0 KB (+13.4%) |
+| flash esp32s3-n32r16 | - | 2,418 KB | new |
+| flash esp32s3-n8r8 | 2,038 KB | 2,381 KB | +342.4 KB (+16.8%) |
+| flash esp32s3-zero | 1,977 KB | 2,173 KB | +195.9 KB (+9.9%) |
+| flash esp32s31 | 2,395 KB | 2,680 KB | +284.3 KB (+11.9%) |
+| flash teensy41 | - | 1,242 KB | new |
 | tick Effects_pipeline_builds_and_renders (desktop-macos) | 7 µs | 7 µs | +0 (+0.0%) |
 | tick Layouts_resize_reallocates_live (desktop-macos) | 12 µs | 10 µs | -2 (-16.7%) |
-| lines core | 22,299 | 30,056 | +7,757 (+34.8%) |
-| lines light | 31,054 | 31,265 | +211 (+0.7%) |
-| lines platform | 16,798 | 21,118 | +4,320 (+25.7%) |
-| lines ui | 11,394 | 12,470 | +1,076 (+9.4%) |
-| lines test | 57,759 | 67,258 | +9,499 (+16.4%) |
-| lines moondeck | 29,325 | 31,290 | +1,965 (+6.7%) |
-| unit tests | 2,120 | 2,515 | +395 (+18.6%) |
-| scenarios | 21 | 30 | +9 (+42.9%) |
+| lines core | 22,299 | 30,403 | +8,104 (+36.3%) |
+| lines light | 31,054 | 31,876 | +822 (+2.6%) |
+| lines platform | 16,798 | 21,635 | +4,837 (+28.8%) |
+| lines ui | 11,394 | 12,473 | +1,079 (+9.5%) |
+| lines test | 57,759 | 68,328 | +10,569 (+18.3%) |
+| lines moondeck | 29,325 | 31,610 | +2,285 (+7.8%) |
+| unit tests | 2,120 | 2,555 | +435 (+20.5%) |
+| scenarios | 21 | 32 | +11 (+52.4%) |
 
 Against the release `v6.0.0`, the fixed point a user compares with; the tables below compare against the last commit. A firmware not rebuilt since `v6.0.0` is left out, and a measure the release did not record yet, such as the code report, joins from the next one.
 
@@ -39,25 +39,25 @@ Against the release `v6.0.0`, the fixed point a user compares with; the tables b
 
 | Target | Flash | Capacity | Used | Built |
 |---|---:|---:|---:|:--:|
-| desktop-linux | 2,488 KB | - | - | carried 1d |
-| desktop-macos | 2,302 KB (+448 B) ⚠ | - | - | yes |
-| desktop-windows | 1,880 KB | - | - | **STALE 13d** |
-| esp32 | 2,298 KB | 2,496 KB | 92% | carried 0d |
-| esp32-16mb | 2,298 KB | 4,096 KB | 56% | carried 0d |
-| esp32-eth | 1,642 KB | 2,496 KB | 66% | **STALE 32d** |
-| esp32-pico | 2,058 KB | 3,072 KB | 67% | **STALE 34d** |
+| desktop-linux | 2,488 KB | - | - | carried 2d |
+| desktop-macos | 2,326 KB (−144 B) ✓ | - | - | yes |
+| desktop-windows | 1,880 KB | - | - | **STALE 14d** |
+| esp32 | 2,206 KB (−192 B) ✓ | 2,496 KB | 88% | yes |
+| esp32-16mb | 2,301 KB | 4,096 KB | 56% | carried 1d |
+| esp32-eth | 1,642 KB | 2,496 KB | 66% | **STALE 33d** |
+| esp32-pico | 2,058 KB | 3,072 KB | 67% | **STALE 35d** |
 | esp32-wrover | 1,801 KB | 2,496 KB | 72% | carried (age?) |
-| esp32c3 | 2,280 KB | 2,496 KB | 91% | carried 3d |
-| esp32p4rev1-eth | 2,309 KB | 4,096 KB | 56% | carried 0d |
-| esp32p4rev1-eth-wifi | 2,465 KB | 4,096 KB | 60% | carried 0d |
-| esp32p4rev3-eth | 2,179 KB | 4,096 KB | 53% | carried 0d |
-| esp32s3-n16r8 | 2,382 KB | 4,096 KB | 58% | yes |
-| esp32s3-n32r16 | 2,381 KB | 4,096 KB | 58% | yes |
-| esp32s3-n8r8 | 2,382 KB | 3,072 KB | 78% | yes |
-| esp32s3-zero | 2,174 KB | 2,496 KB | 87% | yes |
-| esp32s31 | 2,632 KB | 4,096 KB | 64% | carried 0d |
+| esp32c3 | 2,280 KB | 2,496 KB | 91% | carried 4d |
+| esp32p4rev1-eth | 2,340 KB (−368 B) ✓ | 4,096 KB | 57% | yes |
+| esp32p4rev1-eth-wifi | 2,562 KB | 4,096 KB | 63% | yes |
+| esp32p4rev3-eth | 2,179 KB | 4,096 KB | 53% | carried 1d |
+| esp32s3-n16r8 | 2,395 KB (−192 B) ✓ | 4,096 KB | 58% | yes |
+| esp32s3-n32r16 | 2,418 KB (+1,008 B) ⚠ | 4,096 KB | 59% | yes |
+| esp32s3-n8r8 | 2,381 KB | 3,072 KB | 77% | carried 1d |
+| esp32s3-zero | 2,173 KB | 2,496 KB | 87% | carried 1d |
+| esp32s31 | 2,680 KB | 4,096 KB | 65% | carried 1d |
 | qemu | 1,351 KB | - | - | carried (age?) |
-| teensy41 | 1,237 KB (−1 KB) ✓ | 3,456 KB | 36% | yes |
+| teensy41 | 1,242 KB | 3,456 KB | 36% | yes |
 
 `Built: yes` was measured this run. `carried (age?)` was not rebuilt either and predates this record, so its age is unknown: it dates itself on the next build. `carried Nd` was NOT rebuilt and its number is N days old, so an absent delta says nothing about the change. **STALE** marks a carry older than 7 days: the number has gone unchecked long enough that growth will surface later as one jump, blamed on whichever commit happens to rebuild that target. `Used` is against the app slot in the firmware's own partition table.
 
@@ -65,17 +65,19 @@ Against the release `v6.0.0`, the fixed point a user compares with; the tables b
 
 | Target | Net | New | Removed | Grown | Shrunk | Other | Since |
 |---|---:|---:|---:|---:|---:|---:|---|
-| esp32s3-n16r8 | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | `ce37ca46` |
-| esp32s3-n32r16 | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | `ce37ca46` |
-| esp32s3-n8r8 | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | `ce37ca46` |
-| esp32s3-zero | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | `ce37ca46` |
+| esp32 | -0.2 KB | +0.4 KB | -0.8 KB | +0.2 KB | -0.1 KB | +0.1 KB | `f487420a` |
+| esp32p4rev1-eth | -0.4 KB | +0.4 KB | -0.8 KB | +0.2 KB | -0.2 KB | +0.1 KB | `f487420a` |
+| esp32p4rev1-eth-wifi | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | +0.0 KB | `f487420a` |
+| esp32s3-n16r8 | -0.2 KB | +0.2 KB | -0.5 KB | +0.2 KB | -0.1 KB | +0.1 KB | `f487420a` |
+| esp32s3-n32r16 | +1.0 KB | +2.5 KB | -1.7 KB | +0.5 KB | -0.7 KB | +0.3 KB | `f487420a` |
 
 Largest moves:
 
-- **esp32s3-n16r8**: none
-- **esp32s3-n32r16**: none
-- **esp32s3-n8r8**: none
-- **esp32s3-zero**: none
+- **esp32**: `mm::ChannelDataSink::copyIntoLayer(mm::Layer const*, bool)` -471 B, `mm::ChannelDataSink::copyIntoLayer(mm::Layer const*)` +439 B, `mm::MappingLUT::gatherFromPhysical(unsigned char*, unsigned ` -262 B, `mm::ControlModule::defineControls()` -48 B, `mm::platform::sleepUs(mm::platform::WorkerTask&, unsigned lo` +48 B
+- **esp32p4rev1-eth**: `mm::ChannelDataSink::copyIntoLayer(mm::Layer const*, bool)` -454 B, `mm::ChannelDataSink::copyIntoLayer(mm::Layer const*)` +398 B, `mm::MappingLUT::gatherFromPhysical(unsigned char*, unsigned ` -386 B, `mm::platform::sleepUs(mm::platform::WorkerTask&, unsigned lo` +98 B, `mm::TetrixEffect::defineControls()` -80 B
+- **esp32p4rev1-eth-wifi**: none
+- **esp32s3-n16r8**: `mm::ChannelDataSink::copyIntoLayer(mm::Layer const*, bool)` -278 B, `mm::MappingLUT::gatherFromPhysical(unsigned char*, unsigned ` -254 B, `mm::ChannelDataSink::copyIntoLayer(mm::Layer const*)` +251 B, `mm::PanelCardDriver::release()` -63 B, `void mm::NetworkReceiveEffect::drainSockets<true>()` +51 B
+- **esp32s3-n32r16**: `mm::PictureService::cardCircle(float, float)` -965 B, `mm::NetworkReceiveEffect::tick()` -364 B, `_ZN2mm13ModuleFactory12registerTypeINS_13PreviewDriverEEEbPK` +330 B, `mm::PreviewDriver::PreviewDriver()` -316 B, `mm::MappingLUT::gatherFromPhysical(unsigned char*, unsigned ` -254 B
 
 What this commit's flash went to, symbol by symbol against the measurement at `Since`. New is new functionality, removed and shrunk are what a cleanup saved, and other is what no symbol owns, such as merged strings and alignment. A rename reads as removed plus new, which the largest moves expose.
 
@@ -84,37 +86,39 @@ What this commit's flash went to, symbol by symbol against the measurement at `S
 | Target | Tick | FPS |
 |---|---:|---:|
 | desktop-linux | 5 µs | 200,000 |
-| desktop-macos | 7 µs | 142,857 |
+| desktop-macos | 7 µs (+1 µs) ⚠ | 142,857 (−23,809) ⚠ |
 | desktop-windows | 4 µs | 250,000 |
 | esp32 | 1,716 µs | 582 |
 
 ### Scenario tick by target (p50 of each sample window)
 
-| Scenario | desktop-macos | desktop-windows | esp32 | esp32s3-n16r8 | esp32p4rev1-eth | esp32s31 | esp32-eth | esp32-eth-wifi | teensy41 | desktop-docker-arm64 | esp32p4rev1-eth-wifi |
-|---|---|---|---|---|---|---|---|---|---|---|---|
-| Aurora_fps | 1,549 | 6,015 ? | 217,295 ? | 188,782 ? | 83,632 ? | 87,613 ? | - | - | 33,192 ? | 7,532 ? | 1,942,284 ? |
-| Control_a_palette_preset_changes_only_the_palette | 8 | - | - | 2,073 | - | - | - | - | - | - | - |
-| Drivers_output_and_brightness | 7 | 4 ? | - | 8,690 ? | - | - | - | - | 2,144 ? | 218 ? | - |
-| Effects_pipeline_builds_and_renders | 7 | 4 ? | - | - | - | - | - | - | - | - | - |
-| Effects_swap_while_running | 1 | 4 ? | - | 10,000 ? | - | - | - | - | 2,167 | 287 ? | - |
-| Effects_teardown_under_a_running_pipeline | 7 | 17 ? | - | 9,080 | - | - | - | - | 2,159 ? | 482 ? | - |
-| Firmware_reports_what_is_running | 29 | 1,827 ? | - | 8,659 ? | - | - | - | - | 2,142 ? | 215 ? | - |
-| Fluid_solver | 218 | 685,902 ? | 45,974 ? | 102,058 ? | 71,150 ? | 66,874 ? | - | - | 14,853 ? | 3,371 ? | 761,768 ? |
-| GridLayout_resize | 120 | 219 ? | 1,352 ? | 18,414 ? | 7,218 ? | 8,919 ? | 95,771 ? | 82,231 ? | 1,521 ? | 2,005 ? | 6,735,719 ? |
-| Layers_stack_and_blend_live | 267 | - | - | - | - | - | - | - | - | - | - |
-| Layouts_resize_reallocates_live | 10 | 93 ? | - | 32,399 ? | - | - | - | - | 7,788 ? | 579 ? | - |
-| Modifiers_reshape_the_mapping | 7 | 29 ? | - | 10,350 ? | - | - | - | - | 2,165 ? | 273 ? | - |
-| Network_hardware_reconfigures_live | 21 ? | 2,834 ? | - | 8,692 ? | - | - | - | - | 2,147 ? | 237 ? | - |
-| Palettes_a_script_drives_the_effects | 7 | - | - | - | - | - | - | - | - | - | - |
-| State_one_document_adds_an_effect_with_its_controls | 4 | - | - | 2,505 ? | - | - | - | - | - | - | - |
-| perf_full | 256 | 592 ? | 5,313 | 25,340 ? | 11,711 ? | 13,373 ? | - | - | 6,797 ? | 2,438 ? | 5,469,660 ? |
-| perf_light | 16 | 35 ? | 2,510 | 3,044 | 1,117 ? | 1,378 ? | - | - | 662 ? | 780 ? | 5,385,763 ? |
-| peripheral_grid_sweep | 257 | 649 ? | 5,766 | 70,668 ? | 11,495 ? | 12,273 ? | - | - | 6,618 ? | 2,577 ? | 1,673,544 ? |
-| peripheral_switch | 4 | 9 ? | 425 | 2,307 | 2,570 ? | 2,990 ? | - | - | 111 ? | 341 ? | 773,191 ? |
+| Scenario | desktop-macos | desktop-windows | esp32 | esp32s3-n16r8 | esp32p4rev1-eth | esp32s31 | esp32-eth | esp32-eth-wifi | teensy41 | desktop-docker-arm64 | esp32p4rev1-eth-wifi | host=esp32p4rev1-eth sender=esp32p4rev1-eth | host=esp32p4rev1-eth sender=esp32s3-n16r8 | host=esp32s3-n16r8 sender=esp32p4rev1-eth | host=esp32s3-n16r8 sender=esp32s3-n16r8 | host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth | host=teensy41 sender=esp32p4rev1-eth | host=teensy41 sender=esp32s3-n16r8 |
+|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+| Aurora_fps | 1,549 | 6,015 ? | 217,295 ? | 188,782 ? | 83,632 ? | 87,613 ? | - | - | 33,192 ? | 7,532 ? | 1,942,284 ? | - | - | - | - | - | - | - |
+| Control_a_palette_preset_changes_only_the_palette | 8 | - | - | 2,073 | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
+| Drivers_output_and_brightness | 7 | 4 ? | - | 8,690 ? | - | - | - | - | 2,144 ? | 218 ? | - | - | - | - | - | - | - | - |
+| Effects_pipeline_builds_and_renders | 7 | 4 ? | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
+| Effects_swap_while_running | 1 | 4 ? | - | 10,000 ? | - | - | - | - | 2,167 | 287 ? | - | - | - | - | - | - | - | - |
+| Effects_teardown_under_a_running_pipeline | 8 | 17 ? | - | 9,080 | - | - | - | - | 2,159 ? | 482 ? | - | - | - | - | - | - | - | - |
+| Firmware_reports_what_is_running | 29 | 1,827 ? | - | 8,659 ? | - | - | - | - | 2,142 ? | 215 ? | - | - | - | - | - | - | - | - |
+| Fluid_solver | 218 | 685,902 ? | 45,974 ? | 102,058 ? | 71,150 ? | 66,874 ? | - | - | 14,853 ? | 3,371 ? | 761,768 ? | - | - | - | - | - | - | - |
+| GridLayout_resize | 120 | 219 ? | 1,352 ? | 18,414 ? | 7,218 ? | 8,919 ? | 95,771 ? | 82,231 ? | 1,521 ? | 2,005 ? | 6,735,719 ? | - | - | - | - | - | - | - |
+| Layers_stack_and_blend_live | 267 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
+| Layouts_resize_reallocates_live | 10 | 93 ? | - | 32,399 ? | - | - | - | - | 7,788 ? | 579 ? | - | - | - | - | - | - | - | - |
+| Modifiers_reshape_the_mapping | 7 | 29 ? | - | 10,350 ? | - | - | - | - | 2,165 ? | 273 ? | - | - | - | - | - | - | - | - |
+| NetworkReceive_two_boards | - | - | - | - | - | - | - | - | - | - | - | 15,741 | 11,930 ? | 37,919 ? | 30,612 ? | - | 3,402 ? | 5,022 ? |
+| NetworkSend_one_sender_many_receivers | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | 3,847 ? | - | - |
+| Network_hardware_reconfigures_live | 21 ? | 2,834 ? | - | 8,692 ? | - | - | - | - | 2,147 ? | 237 ? | - | - | - | - | - | - | - | - |
+| Palettes_a_script_drives_the_effects | 7 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
+| State_one_document_adds_an_effect_with_its_controls | 7 | - | - | 2,505 ? | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
+| perf_full | 256 | 592 ? | 5,313 | 25,340 ? | 11,711 ? | 13,373 ? | - | - | 6,797 ? | 2,438 ? | 5,469,660 ? | - | - | - | - | - | - | - |
+| perf_light | 16 | 35 ? | 2,510 | 3,044 | 1,117 ? | 1,378 ? | - | - | 662 ? | 780 ? | 5,385,763 ? | - | - | - | - | - | - | - |
+| peripheral_grid_sweep | 257 | 649 ? | 5,766 | 70,668 ? | 11,495 ? | 12,273 ? | - | - | 6,618 ? | 2,577 ? | 1,673,544 ? | - | - | - | - | - | - | - |
+| peripheral_switch | 4 | 9 ? | 425 | 2,307 | 2,570 ? | 2,990 ? | - | - | 111 ? | 341 ? | 773,191 ? | - | - | - | - | - | - | - |
 
 Microseconds. `?` marks a cell backed by fewer than 4 samples, which is a first impression rather than a percentile; several are months old and were captured during a network reconfigure, so they read as whole milliseconds. `-` means that target has never run that scenario.
 
-**Coverage: 108/209 cells measured (51%), 27 of them with 4+ samples (12%).** The blanks are the point: a regression on a target that has never run a scenario cannot be DETECTED in it, and the target cannot be compared against the others. Filling the matrix means running the scenario suite on each bench board, which is a standing task rather than a one-off.
+**Coverage: 115/378 cells measured (30%), 28 of them with 4+ samples (7%).** The blanks are the point: a regression on a target that has never run a scenario cannot be DETECTED in it, and the target cannot be compared against the others. Filling the matrix means running the scenario suite on each bench board, which is a standing task rather than a one-off.
 
 ### desktop-macos: isolated scenarios (p50 of the sample window)
 
@@ -138,36 +142,36 @@ These build a bare pipeline with no optional modules, so a change here is a chan
 
 | Area | Lines | Comments | Comment share |
 |---|---:|---:|---:|
-| core | 30,056 (+19) ⚠ | 6,425 | 23.7 % |
-| light | 31,265 (−35) ✓ | 7,512 | 27.0 % (+0.1 %) ⚠ |
-| platform | 21,118 (−357) ✓ | 4,133 | 21.9 % (+0.3 %) ⚠ |
-| ui | 12,470 (−9) ✓ | 3,470 | 29.5 % |
-| test | 67,258 (+11) ⚠ | 7,114 | 12.2 % |
-| moondeck | 31,290 (+3) ⚠ | 4,933 | 18.0 % |
+| core | 30,403 | 6,486 | 23.6 % |
+| light | 31,876 (−39) ✓ | 7,597 | 26.8 % (+0.1 %) ⚠ |
+| platform | 21,635 (+14) ⚠ | 4,172 | 21.6 % |
+| ui | 12,473 | 3,471 | 29.5 % |
+| test | 68,328 (+18) ⚠ | 7,193 | 12.2 % |
+| moondeck | 31,610 (+15) ⚠ | 4,942 | 17.8 % |
 
 ## Tests
 
 | Kind | Count |
 |---|---:|
-| unit cases | 2,515 |
-| scenarios | 30 |
+| unit cases | 2,555 (+1) ✓ |
+| scenarios | 32 |
 
 ## Complexity
 
 | Metric | Value |
 |---|---:|
-| functions | 4,989 (+4) ✓ |
-| over threshold | 354 |
+| functions | 5,087 (−3) ⚠ |
+| over threshold | 353 |
 | worst CCN | 128 |
 
 ## Documentation
 
 | Metric | Value |
 |---|---:|
-| markdown files | 156 (−1) ✓ |
-| markdown lines | 33,332 (−42) ✓ |
-| plan files | 48 |
-| backlog lines | 3,399 (+6) ⚠ |
+| markdown files | 161 |
+| markdown lines | 34,209 (+8) ⚠ |
+| plan files | 50 |
+| backlog lines | 3,393 |
 | lessons lines | 532 |
-| CLAUDE.md lines | 285 |
+| CLAUDE.md lines | 287 |
 
diff --git a/docs/reference/testing.md b/docs/reference/testing.md
index 21752995c..3707e6698 100644
--- a/docs/reference/testing.md
+++ b/docs/reference/testing.md
@@ -271,6 +271,16 @@ The runner puts the computer back on that network whatever happens.
 uv run moondeck/scenario/run_live_scenario.py --host MM-Bench.local --network Home --name scenario_AccessPoint_first_setup_from_its_own_network
 ```
 
+#### Several boards
+
+A scenario naming `"boards": ["sender", ...]` drives those boards too, each mapped to a device by `--board NAME=HOST`; it is skipped while one is missing. A step with `"device": "<name>"` runs on that board, as an `apply_state`, a `set_control` or a `measure`. Every step's strings fill `{host}` and `{<name>}` with the boards' addresses, so a sender's `hosts` points at its receivers. Each board is restored from its own snapshot, before the device under test. The observations are keyed by the whole combination, such as `host=esp32s3-n16r8 sender=esp32p4rev1-eth`, so a WiFi pair and an Ethernet pair keep apart.
+
+A `measure` step's `read` list names extra values to report: `"Module.control"` from the state, `"Module.tick"` for a module's tick time, or `"fps"`; `"<name>:"` in front reads another board, such as `"sender:fps"`. The run ends with one row per such step, which is what a sweep is read from.
+
+```bash
+uv run moondeck/scenario/run_live_scenario.py --host 192.168.1.158 --board sender=192.168.1.156 --name scenario_NetworkReceive_two_boards
+```
+
 ### Scenario modes (construct vs mutate)
 
 Every scenario carries a top-level `mode` field that says what shape the scenario expects the world to be in. Two values:
diff --git a/docs/tutorials/how-moonlight-works.md b/docs/tutorials/how-moonlight-works.md
index 6c99bd1ca..0231f3d6b 100644
--- a/docs/tutorials/how-moonlight-works.md
+++ b/docs/tutorials/how-moonlight-works.md
@@ -156,6 +156,8 @@ The rest the module declares about itself:
 | 🦅 | a named contributor, credited on the module |
 | 🎵 volume · 🎶 frequency | it listens: one note reacts to how LOUD the room is, two to WHICH notes are playing |
 | 📡 | it takes its picture from the network |
+| 🖼️ | it samples the Picture service's picture |
+| 🎞️ | it plays a recorded show from a file |
 | 🎯 | it aims moving heads |
 | 👾 | pixel art: the games and sprites |
 | 🧬 | a simulation: the picture emerges from cells evolving off their own last frame, rather than being drawn |
diff --git a/docs/work/future/backlog-core.md b/docs/work/future/backlog-core.md
index be92f428f..06bca1a73 100644
--- a/docs/work/future/backlog-core.md
+++ b/docs/work/future/backlog-core.md
@@ -492,18 +492,6 @@ Both surfaced while bringing up MoonBase Ethernet on the migrated Olimex; neithe
 
 ## ESP32 performance and memory
 
-### Uploads to a Teensy run at about 20 KB/s (2026-10-13)
-
-An upload to the Teensy 4.1 moves about 20 KB/s whether it lands on internal flash or the SD card, against 300 KB/s to a classic ESP32 over Ethernet, and a 100 KB upload to internal flash once failed after 19 s.
-Downloads run at 354 KB/s, so the receive side is the bottleneck: most likely lwIP's TCP receive window in QNEthernet's configuration, which caps the bytes in flight per round trip.
-Measure the window first, then raise it within the Teensy's RAM, which the Layer buffers also need.
-
-### Host names on the Teensy (2026-10-13)
-
-HostResolver looks names up on a task of its own, and the Teensy has none: `spawnPinnedTask` refuses, so a host given by name in NetworkSend, OSC, Audio or MIDI waits forever, and its `resolveHost` blocks for its whole timeout.
-On a board with one loop the textbook shape is a query that does not block: QNEthernet's `DNSClient::getHostByName` takes a callback, so a new platform seam starts a lookup and a tick collects the answer.
-Until then an address works, and a name should say it cannot resolve rather than wait.
-
 ### LEDs on the Teensy flash white, then the board resets (2026-10-13)
 
 Five times in one session, the 64-light strip on the Teensy 4.1 bench board went full white, and the board restarted with reset reason `UNKNOWN`, no fault mark and no watchdog: a supply dip, which a full-white strip on USB power explains.
diff --git a/docs/work/future/backlog-light.md b/docs/work/future/backlog-light.md
index f0099bbbe..92440bcb4 100644
--- a/docs/work/future/backlog-light.md
+++ b/docs/work/future/backlog-light.md
@@ -155,6 +155,12 @@ Record before and after in performance.md per target.
 
 ## Drivers
 
+### An identity correction is one copy (2026-10-14)
+
+Every driver runs `Correction::apply` on every light, even when the correction changes nothing: brightness 255 (global and local), the linear curve, a fixture profile whose channels match the layer's, and no dimmer, white or motion channels.
+The hottest-path rule says that case is a copy: `Correction` knows at rebuild whether it is the identity, and a driver that sends its buffer whole (Network Send, the panel cards) copies the layer's bytes instead of looking each one up.
+The default CIE curve is not the identity at 255, so the skip applies only with the linear curve. It applies to every driver once the sender already sends the output's byte order; network and panel drivers then send one copy, while LED strips still encode bits but drop the per-byte lookup and reordering.
+
 ### Drivers' palette and fixture-profile lists, sent once rather than in every view (2026-10-13)
 
 Drivers is the largest root in the state, 35 KB of the Teensy's view where Services is 10 KB, and two lists are 25 KB of it, mostly repetition.
diff --git a/docs/work/present/Plan-20261010 - Teensy 4.1.md b/docs/work/present/Plan-20261010 - Teensy 4.1.md
index d3b455369..8783a9be5 100644
--- a/docs/work/present/Plan-20261010 - Teensy 4.1.md	
+++ b/docs/work/present/Plan-20261010 - Teensy 4.1.md	
@@ -113,8 +113,8 @@ The three risks, all settled on the board: the fifth argument (`ctrls`) arrives
 1. ✅ **A flat image beside the HEX.** The build also writes `MoonLight.bin` (`objcopy -O binary --gap-fill 0xff`, since erased flash reads 0xFF where objcopy fills 0x00), and the release ships `firmware-<fw>-v<ver>.bin` beside the `.hex`. The HEX stays for `teensy_loader_cli` and PJRC's loader, which read only Intel HEX; both new writers take raw bytes at an offset. Verified on the desktop: every byte of the `.bin` matches the HEX and the 40 gap bytes read 0xFF; CI runs on the next push.
 2. ✅ **One firmware list for every platform.** `firmwares.json` rows gain a `platform` field (`esp32`, `teensy`, `desktop`, and the [small boards](../../reference/hardware/small-boards.md)' families as their ports arrive), generated from one registry, `moondeck/build/firmwares.py`, that `build_esp32.py`, `build_teensy.py`, `repo_health.py` and the workflows read rather than restating it; that removes four of today's five copies of the Teensy list. The release matrix and the manifest test select their platform from it, and CMake takes the Ethernet driver as an option instead of restating the names. Verified: `check_firmwares` (16 variants), `test_host --python` and `--js`, and both Teensy images built with the right driver; CI runs on the next push.
 3. ✅ **Updates by upload on the Teensy** (`platform_teensy_ota.cpp`). `otaWriteStream` stages the image in the free program flash above the running one, from the next 64 KB boundary up to the LittleFS area, so it fits while the two images together fit 6.75 MB. It refuses a HEX file, an image without the boot header and image vector table, and an image whose variant mark (`MoonLight image for <firmware>;`) names another firmware or is missing. `reboot()` then copies the staged image over the program from ITCM, every NVIC source and SysTick off and WDOG1 fed, in 64 KB blocks, skipping the blocks the two images share, and resets. The core's flash routines are the primitives; FlasherX was not needed, and its 16 KB reserve would have let the copy erase LittleFS. `http_fetch_to_ota` refuses with "no TLS on this board", since GitHub serves release assets over HTTPS only. Verified on the bench (W5500 build): a HEX, the other variant and a text file each refused with no reboot; four updates by `curl` with the settings intact, one changing 16 of 19 blocks including the boot header, the new build stamp showing after each; 1.2 MB staged in about 33 s, back up 8 to 12 s later; an upload from the Firmware card in the UI, verified by the PO, whose overlay says "Writing to flash…" with a pulsing bar through each erase pause, since the board reads nothing from the network while it erases; and by the PO, the cable pulled within seconds of "Rebooting…" on an image differing in 16 of 19 blocks: the board stayed dark, and the web installer's program-button install brought it back with its settings and effect intact.
-4. ✅ **The installer and the device UI see the Teensy.** `generate_manifest.py` reads the firmware registry and writes a Teensy manifest as one part, the `.bin` at offset 0, under the family `Teensy 4.1`, which `build_teensy.py` adds to the registry's one family vocabulary; the release generates a manifest for every shipping firmware, and the installer preview stages the built Teensy images. `deviceModels.json` gains "Teensy 4.1" and "Teensy 4.1-NE + W5500", and `check_devices` checks every `chip` against that vocabulary and every listed firmware against the registry and its family. The installer reads the port's USB ids before any ESP32 handshake and reports a Teensy as found (`16C0:0483`). `/api/firmware/url` answers 501 on a device without TLS, and the Firmware card then downloads the release's `.bin` from its Pages copy, which allows a cross-origin read, and uploads it. Verified: the manifest test covers every platform, `check_devices` fires on a wrong family, the JS and Python suites pass, the bench board answers 501, and a headless browser drove the card's URL install on the W5500 board with the image served by the installer preview in place of Pages: downloaded, uploaded, rebooted, settings intact. Still to verify once a release carries the Teensy images: the same from a real release's Pages copy.
-5. **The installer flashes a Teensy** (built, awaiting the bench). `teensy-writer.js` speaks HalfKay as `teensy_loader_cli` does: a running board enters the bootloader through a 134-baud Web Serial open, then 1088-byte reports, each a 64-byte header carrying the block's offset and 1024 bytes of image, block 0 first with a 45 s allowance since it erases the chip, blank blocks after it skipped, and a boot report to finish. A board held in its bootloader by the program button is offered after a canceled port pick ("Teensy not listed?"), the one moment it is needed, so the port row keeps one way in. Either way the browser's chooser opens straight from the Install click while that click still counts, and the page's own step, saying what to do, opens it when the click has expired or the user cancels; every install picks the bootloader once, since Chrome does not remember the grant (`chrome://settings/content/hidDevices` lists nothing after a pick), although the bootloader reports a USB serial number (`001E0D21`, the board's serial in hex; ioreg) and only lacks a product name, so why is open. The orchestrator picks the writer by the manifest's `chipFamily` before touching the device, so each next port adds a writer and nothing else: the RP2040, the RP2350 and the XIAO nRF52840 boot into a UF2 bootloader that shows a USB drive, so one UF2 writer serves all of them (PICOBOOT over WebUSB for the Picos as the direct route). After the boot the installer finds the re-enumerated serial port, reads `MM_IP` and `MM_DEVICE` for the success link, and with **Apply device defaults** sends the catalog state as APPLY_OP frames over it: the Teensy's USB serial listener (`platform_teensy_improv.cpp`, polled from the module's tick through `improvPoll`) takes that one command through the core helper `improvApplyOp`, which the ESP32's listener now shares. **Erase chip first** zeroes the settings' LittleFS superblock pair (offset 0x6C0000) after the image, so the firmware formats it at boot; the bootloader erases only the program area otherwise. Verified on the bench: the zeroed superblocks through `teensy_loader_cli` reset a marker setting to the defaults with the board booting normally, and an APPLY_OP document over USB serial got its acknowledgement and changed a setting; the unit tests pin the shared handler. Still to verify by the PO in the browser: an install with both boxes ticked. Verified so far: a node test pins the report layout, the skipped blocks, the boot report and the refused images, and that writing the reports onto erased flash reproduces the image; and on the bench by the PO, from the local installer preview, installs of the W5500 board's firmware from the program button, reached through the "Teensy not listed?" hint, and from a running board, with no button press, the browser's chooser opening straight from the Install click, the settings intact, each ending on the board's IP and `.local` links; the program-button path asks one click to grant the board's serial port, which the browser then remembers. Chrome lists the bootloader as "Unknown device (16C0:0478)". Still to verify: `teensy41` once a regular 4.1 arrives.
+4. ✅ **The installer and the device UI see the Teensy.** `generate_manifest.py` reads the firmware registry and writes a Teensy manifest as one part, the `.bin` at offset 0, under the family `Teensy 4.1`, which `build_teensy.py` adds to the registry's one family vocabulary; the release generates a manifest for every shipping firmware, and the installer preview stages the built Teensy images. `deviceModels.json` gains "Teensy 4.1" and "Teensy 4.1-NE + W5500", and `check_devices` checks every `chip` against that vocabulary and every listed firmware against the registry and its family. The installer reads the port's USB ids before any ESP32 handshake and reports a Teensy as found (`16C0:0483`). `/api/firmware/url` answers 501 on a device without TLS, and the Firmware card then downloads the release's `.bin` from its Pages copy, which allows a cross-origin read, and uploads it. Verified: the manifest test covers every platform, `check_devices` fires on a wrong family, the JS and Python suites pass, the bench board answers 501, and a headless browser drove the card's URL install on the W5500 board with the image served by the installer preview in place of Pages: downloaded, uploaded, rebooted, settings intact. Verified by the PO on 2026-10-13 from the first release carrying the Teensy images, `6.1.0-dev.87`: a network update from the Firmware card, the image fetched from the release's Pages copy.
+5. **The installer flashes a Teensy** (built, awaiting the bench). `teensy-writer.js` speaks HalfKay as `teensy_loader_cli` does: a running board enters the bootloader through a 134-baud Web Serial open, then 1088-byte reports, each a 64-byte header carrying the block's offset and 1024 bytes of image, block 0 first with a 45 s allowance since it erases the chip, blank blocks after it skipped, and a boot report to finish. A board held in its bootloader by the program button is offered after a canceled port pick ("Teensy not listed?"), the one moment it is needed, so the port row keeps one way in. Either way the browser's chooser opens straight from the Install click while that click still counts, and the page's own step, saying what to do, opens it when the click has expired or the user cancels; every install picks the bootloader once, since Chrome does not remember the grant (`chrome://settings/content/hidDevices` lists nothing after a pick), although the bootloader reports a USB serial number (`001E0D21`, the board's serial in hex; ioreg) and only lacks a product name, so why is open. The orchestrator picks the writer by the manifest's `chipFamily` before touching the device, so each next port adds a writer and nothing else: the RP2040, the RP2350 and the XIAO nRF52840 boot into a UF2 bootloader that shows a USB drive, so one UF2 writer serves all of them (PICOBOOT over WebUSB for the Picos as the direct route). After the boot the installer finds the re-enumerated serial port, reads `MM_IP` and `MM_DEVICE` for the success link, and with **Apply device defaults** sends the catalog state as APPLY_OP frames over it: the Teensy's USB serial listener (`platform_teensy_improv.cpp`, polled from the module's tick through `improvPoll`) takes that one command through the core helper `improvApplyOp`, which the ESP32's listener now shares. **Erase chip first** zeroes the settings' LittleFS superblock pair (offset 0x6C0000) after the image, so the firmware formats it at boot; the bootloader erases only the program area otherwise. Verified on the bench: the zeroed superblocks through `teensy_loader_cli` reset a marker setting to the defaults with the board booting normally, and an APPLY_OP document over USB serial got its acknowledgement and changed a setting; the unit tests pin the shared handler. Still to verify by the PO in the browser: an install with both boxes ticked. Verified so far: a node test pins the report layout, the skipped blocks, the boot report and the refused images, and that writing the reports onto erased flash reproduces the image; and on the bench by the PO, from the local installer preview, installs of the W5500 board's firmware from the program button, reached through the "Teensy not listed?" hint, and from a running board, with no button press, the browser's chooser opening straight from the Install click, the settings intact, each ending on the board's IP and `.local` links; the program-button path asks one click to grant the board's serial port, which the browser then remembers. Chrome lists the bootloader as "Unknown device (16C0:0478)". Verified by the PO on 2026-10-13: an install of `6.1.0-dev.87` from the published installer at moonmodules.org, the board coming up with its defaults. Still to verify: `teensy41` once a regular 4.1 arrives.
 6. Optional, once: the desktop builds join the same list (`platform: desktop`), replacing the installer's hand-written asset pattern, which misses `linux-arm64` and `.deb`.
 
 **Once steps 3 to 5 ship in a release: tell PJRC.** Paul Stoffregen, PJRC's founder and the author of the Teensy core, HalfKay and `teensy_loader_cli`, reads forum.pjrc.com. A post there announces a Teensy firmware installed from the browser with no tools and updated over Ethernet from its own page, and asks two things: why Chrome does not keep the bootloader's grant although HalfKay reports a serial number, and whether HalfKay could report a product name, so browsers stop listing it as "Unknown device".
@@ -140,8 +140,9 @@ The three risks, all settled on the board: the fifth argument (`ctrls`) arrives
 | <img src="../../assets/hardware/boards/aps6404l-psram.webp" width="80" alt="APS6404L PSRAM"> | [PSRAM APS6404L 8 MB](https://www.tinytronics.nl/en/components/ics-and-microcontroller-chips/ics/aps6404l-3sqr-psram-8mb-sop8) (AP Memory) | Optional, once a layout outgrows the RAM | Tinytronics €3 |
 
 **After the phases: offer the patches upstream.** The files in `teensy/patches/` fix upstream code, so each goes back to its maintainer once the port is done, which lets the patch files go.
-- `teensy_loader_cli-match-own-devices.patch`: a pull request to PaulStoffregen/teensy_loader_cli, fixing its open issue #60 ("Error opening HID Manager" on macOS) at the cause. The macOS HID manager matches every HID device, keyboards included, which needs the Input Monitoring permission; matching only the bootloader and the rebootor needs none.
+- `teensy_loader_cli-match-own-devices.patch`: ✅ opened 2026-10-13 as [PaulStoffregen/teensy_loader_cli#96](https://github.com/PaulStoffregen/teensy_loader_cli/pull/96), from the fork `ewowi/teensy_loader_cli`, fixing its open issue #60 ("Error opening HID Manager" on macOS) at the cause. The macOS HID manager matches every HID device, keyboards included, which needs the Input Monitoring permission; matching only the bootloader and the rebootor needs none. Reproduced on macOS 27.0.1 before opening it: master waits forever with the board in its bootloader, the patched build flashes it. The patch file goes once Paul merges it.
 - `QNEthernet-w5500-bounded-waits.patch` and `QNEthernet-tcp-snd-buf-overridable.patch`: pull requests to ssilverman/QNEthernet. The first bounds the W5500 driver's waits on the chip at 20 ms, which ended the device's freezes; the second lets a build set `TCP_SND_BUF`, as it already can `MEM_SIZE` and `TCP_WND`.
+- `QNEthernet-recv-window-on-read.patch`: a pull request to ssilverman/QNEthernet, after a reproduction with a plain QNEthernet sketch. QNEthernet reopens the receive window when it copies data into its buffer rather than when the sketch reads it, so a fast sender overruns the buffer and lwIP drops what follows: a 1 MB upload took 30 s with 35% retransmitted, and 4.8 s with none once the window reopens on read.
 - `QNEthernet-mdns-nsec.patch`: an issue with the patch to ssilverman/QNEthernet, asking whether it belongs in QNEthernet's lwIP copy or in lwIP's patch tracker first. lwIP's mDNS responder sends no NSEC answer (still a TODO on lwIP master), so a build without IPv6 leaves a client's AAAA question unanswered and a `.local` lookup waits 5 s; the patch answers it per RFC 6762 §6.1.
 
 ## What the core already handles
diff --git a/docs/work/present/Plan-20261013 - Audio reactive live performance.md b/docs/work/present/Plan-20261013 - Audio reactive live performance.md
new file mode 100644
index 000000000..4480076a3
--- /dev/null
+++ b/docs/work/present/Plan-20261013 - Audio reactive live performance.md	
@@ -0,0 +1,126 @@
+# Plan: audio-reactive live performance, each band member drives the lights
+
+Draft for the product owner's approval. A band plays, and the lights answer each musician separately: a drum hit splashes, a key pressed on a MIDI keyboard lights its own spot and fades when the key is released, a bass line or a voice moves its own part of the rig, and moving heads follow each musician across the stage. Today the lights hear the whole mix through one microphone and react to it as one signal.
+
+## The design basis
+
+The core backlog already analyzed this, and the plan follows its conclusions rather than reopening them ([backlog-core: notes as an effect input, the rest of the band, everything as MIDI](../future/backlog-core.md)):
+
+- **Notes are performance data, not control-surface input.** A desk sets controls; a keyboard's notes are read by an effect, which decides what a note means, the way it reads audio.
+- **Two frames, kept separate.** A `MidiFrame` carries what arrived as notes; an `AudioFrame` per analyzed channel carries what arrived as sound. A per-band onset never pretends to be a note-on with a fake pitch and velocity.
+- **MIDI first.** Electronic drums, MIDI keyboards, hex-pickup guitars and pitch-to-MIDI voice boxes all speak MIDI, so the transport alone reaches most of a band with no analysis.
+- **The frame budget bounds on-device analysis:** one analyzed mono input costs about 8 ms per tick on a P4, so a board analyzes one or two channels, not a band.
+
+## The bench instrument
+
+An **Akai MPK261**: 61 semi-weighted keys, 16 RGB-backlit pads, 8 knobs, 8 faders and 8 buttons, sustain and expression pedal inputs, and USB MIDI that needs no driver, with a 5-pin MIDI out besides. One instrument covers both first effects: the keys for step 2, the pads as a drum kit for step 3, and its knobs and faders reach the control surface through MIDI learn.
+
+## What exists
+
+- **`MidiService`** with three transports: the browser (Web MIDI), the board's own USB port (USB MIDI host, on the ESP32-S3 and P4 images), and the network (RTP-MIDI), plus `share` to pass a USB device on to the network. It decodes two desk profiles, Mackie Control and the Akai APC40 mkII, onto the control surface.
+- **`AudioService`** publishing an `AudioFrame` per block: level, sixteen bands, the dominant frequency, spectral flux and `onset`, the block a hit was detected, which effects read through `latestFrame()` and MoonLive scripts through builtins. `BeatRipplesEffect` already splashes on `onset`.
+- **Layers, layouts and modifiers,** which already give each musician a place: one layer per band member, placed on its own part of the rig.
+- **The MovingHead effect and fixture profiles,** which already aim heads: pan and tilt per fixture, in formations, from the profiles' Pan and Tilt roles.
+- **The input-mapping plan's sensors** ([input mapping and scripted sensors](Plan-20260901%20-%20Input%20mapping%20and%20scripted%20sensors%20(partial).md)): a PIR, a VL53L0X distance sensor, a VL53L8CX zone grid and an MPU6050, on the I2C seam that plan builds.
+
+## The shape
+
+**One band member is one layer.** An effect in that layer listens to one source, a MIDI channel or an audio channel, and draws only that musician; the layer's opacity, blend mode and modifiers place and mix it. A band is a stack of layers, so no new composition mechanism exists.
+
+**MIDI by the book.** A stage gives each instrument its own MIDI channel, so a channel select on the effect is the routing. Drums follow the General MIDI percussion map, so a kit means something with no setup: note 36 a kick, 38 a snare, 42 a closed hi-hat, 49 a crash, the same numbers every electronic kit sends on channel 10.
+
+**The `MidiFrame`,** published by `MidiService` from any transport, in the `AudioFrame`'s publish-and-read shape:
+
+- per channel, which of the 128 notes are held and how hard (velocity);
+- the note starts and ends since the last frame as ordered events, each with its channel, pitch and velocity, so two hits of the same pitch between frames stay two and a note shorter than a frame still fires;
+- pitch bend, modulation and sustain per channel;
+- the MIDI clock's beat phase when a clock runs.
+
+An effect opts in, as audio effects do, and on a board with no MIDI it sees an empty frame and draws its idle state.
+
+**Latency is the requirement that decides the design.** A light that trails the hit by more than a few tens of milliseconds looks late on stage. A note-on reaches the next frame, so at 100 frames a second the render adds at most 10 ms. USB MIDI on the board is the shortest path; the browser and WiFi RTP-MIDI add jitter, and the plan measures each rather than guessing.
+
+## Steps
+
+Each step ends in something verified on the bench.
+
+### 1. Notes reach effects
+
+- `MidiService` publishes the `MidiFrame` from every transport, alongside its desk profiles, which stay as they are.
+- MoonLive gains builtins for it (a note's velocity, whether it is held, whether it started this frame), so a script reacts to notes the way it reacts to `level` and `bands`.
+- Unit tests pin the frame: notes started and ended between two frames, two note-on and note-off cycles of one pitch between frames read as four events in order, a note shorter than a frame, running status, a note-on with velocity 0 read as a note-off.
+- Verify with the PO's Akai MPK261 over the board's USB port and over the browser.
+
+### 2. A keyboard lights per key
+
+- **`KeysEffect`:** each held note lights its own position along the layer, velocity sets the brightness, and a released note decays over a `release` time; sustain holds it. The note range follows a `low` and `high` setting, so a 25-key controller and an 88-key piano both span the layer.
+- Verify on the MPK261's 61 keys: chords, fast runs, the sustain pedal, and the latency from key to light, measured with slow-motion video.
+
+### 3. Drums splash
+
+- **`DrumsEffect`:** each General MIDI drum fires its own shape: the kick a pulse from the floor, the snare a burst, the hi-hat a sparkle, a crash a wash over the layer. Velocity sets the size and brightness; a hit's shape is a splash with a decay, not a held light.
+- Verify on the MPK261's 16 pads, which send notes like a drum kit, then on an electronic kit. The pads are RGB-lit, so the way back can light each pad with its splash's color, as the APC40 profile already lights its pads.
+
+### 4. A band on the rig
+
+- A demo preset: a keys layer and a drums layer side by side on one installation, each listening to its own channel.
+- Several boards on one stage take the same notes through `share` and RTP-MIDI, so every board sees every musician.
+- Verify with two instruments playing at once.
+
+### 5. Acoustic drums
+
+Two routes, the first needing no code:
+
+- **Drum triggers:** clip-on triggers into a trigger module send MIDI, so steps 1 to 3 already cover an acoustic kit.
+- **Per-band onsets** in `AudioService`: the single `onset` fires on any hit, so a kick and a snare look alike. An onset per band group (low for the kick, mid and high for the snare and cymbals) separates them from the bands already computed. Best with a direct out or an aux send from the mixer giving the kit alone.
+- Verify with a kit, or a recorded kit track, through one microphone or line input.
+
+### 6. Analog instruments, an investigation
+
+Decided per instrument, cheapest first:
+
+| Instrument | Route by the book | On the device |
+|---|---|---|
+| Guitar | a hex pickup or a guitar-to-MIDI converter: MIDI, so steps 1 and 2 cover it | strummed chords are polyphonic transcription, out of scope |
+| Bass, lead lines | a pitch-to-MIDI pedal | monophonic pitch tracking (YIN) on one clean channel, as a `pitch` in that channel's `AudioFrame` |
+| Voice | a pitch-to-MIDI box | pitch plus loudness envelope on one clean channel |
+| Any instrument, loudness only | a direct out or aux send | the existing level and bands on its own channel |
+
+The on-device column needs a second audio channel: the multi-channel front-ends the [audio roadmap](../future/audio-dsp-roadmap.md) anticipates, such as a 4-channel TDM codec (the ES7210 on the Waveshare RGB-Matrix board) or line inputs from the mixer. The budget allows one or two analyzed channels per board.
+
+### 7. Follow the musicians
+
+Automated follow spots split the job in two, by the book: **tracking** delivers each performer's position in stage coordinates, and **aiming** turns a position into pan and tilt per fixture, from the fixture's position and its mounting, which is the inverse kinematics behind every console's XYZ focus. Between them sits an open standard for live position data, **PosiStageNet (PSN)**, a UDP multicast protocol that professional trackers and media servers speak.
+
+- **A position frame,** in the shape of the audio and MIDI frames: tracked targets, each with an ID and stage coordinates, published by a tracking service from whatever sensor feeds it.
+- **The MovingHead effect gains a `follow` formation:** each head aims at a target instead of sweeping, from its position in the layout plus two mounting settings (floor or truss, and which way is forward).
+- **A pixel effect that follows a target:** a glow under the singer on an LED floor or wall, from the same frame.
+- **One musician per layer** carries over: the singer's layer follows target 1, the guitarist's target 2.
+
+The sensors, from what is listed to what a stage needs:
+
+| Picture | Sensor | Gives | Fit for a stage | Price |
+|---|---|---|---|---|
+| <img src="../../assets/hardware/sensors/hc-sr501.webp" width="80" alt="HC-SR501 PIR"> | [PIR, HC-SR501](https://www.tinytronics.nl/en/sensors/motion/ir-pyroelectric-infrared-pir-motion-sensing-detector-module) | presence, about 3 to 7 m | wakes a show, follows no one | Tinytronics €3.50 |
+| <img src="../../assets/hardware/sensors/vl53l0x.webp" width="80" alt="VL53L0X"> | [VL53L0X distance](https://www.tinytronics.nl/en/sensors/distance/vl53l0x-time-of-flight-tof-distance-sensor) | one distance, up to about 1.2 m | one person on one axis: a walkway, a lectern | Tinytronics €5.75 |
+| <img src="../../assets/hardware/sensors/vl53l8cx.webp" width="80" alt="VL53L8CX"> | [VL53L8CX zone grid](https://eckstein-shop.de/Pololu-VL53L8CX-Time-of-Flight-8x8-Zone-Distance-Sensor-Carrier-with-Voltage-Regulators-400cm-Max-EN) (Pololu) | 8 × 8 depth zones, about 4 m | coarse position of one or two people on a small stage | Eckstein €23.95 |
+| <img src="../../assets/hardware/sensors/mpu6050.webp" width="80" alt="MPU6050"> | [MPU6050, worn](https://www.tinytronics.nl/en/sensors/acceleration-rotation/mpu-6050-accelerometer-and-gyroscope-3-axis-module-3.3v-5v) | orientation | a gesture, not a position | Tinytronics €8.75 |
+| <img src="../../assets/hardware/sensors/hlk-ld2450.webp" width="80" alt="HLK-LD2450"> | [mmWave radar, HLK-LD2450](https://www.tinytronics.nl/en/sensors/motion/hi-link-hlk-ld2450-24ghz-radar-sensor-module-with-bluetooth) | up to 3 targets with x and y, about 6 m, UART | the cheapest real tracker, working in darkness and haze | Tinytronics €7.00 |
+| <img src="../../assets/hardware/sensors/dw3000.webp" width="80" alt="DWM3000EVB"> | [UWB, Qorvo DWM3000EVB](https://www.digikey.nl/nl/products/detail/qorvo/DWM3000EVB/24367408) | about 10 cm, with anchors and a tag per performer | how professional radio trackers work | DigiKey €31.34 per node |
+| | [PosiStageNet in](https://posistage.net/) | positions from a professional system | MoonLight joining a rig that already tracks | free, open protocol, MIT-licensed SDK |
+| <img src="../../assets/hardware/sensors/p4-csi-camera.webp" width="80" alt="OV5647 camera"> | [A camera on the P4](https://www.tinytronics.nl/en/raspberry-pi/raspberry-pi-compatible-camera-5mp-v1.3) (OV5647, MIPI-CSI) | person detection | later, with the [streams](Plan-20261013%20-%20Streams%2C%20every%20frame%20from%20outside.md) work | Tinytronics €8.00 |
+
+**On order (2026-10-13): two HLK-LD2450 kit B** from Hi-Link's own store, each with a USB-to-serial adapter, a Bluetooth antenna and a cable. The adapter lets the radar be tried on a computer with Hi-Link's tool before the UART seam exists: targets, range and zone exclusion on day one. Two units answer the stage questions: whether two 24 GHz radars side by side interfere, and how their targets merge where their views overlap.
+
+The order: the radar first, which needs a UART seam the platform does not have yet; PosiStageNet in second, which is UDP and needs no new seam; the ToF zone grid as the indoor alternative once the input-mapping plan's I2C step lands and a VL53L8CX read is measured that does not stall the render task: an 8 × 8 frame over I2C is large, so the candidates are SPI, a lower ranging rate, or reading on a task off the render core. Verify with a person walking the bench stage and the heads following.
+
+## Open questions
+
+- **Does a note decay in the frame or in the effect?** The proposal: the frame carries held notes and edges only, and each effect owns its own decay, since a splash and a held key want different curves.
+- **One board for the band, or a board per musician?** RTP-MIDI makes both possible; the first gig decides.
+- **How far on-device analysis goes** before the musicians' own converters are the better answer, measured per instrument in step 6.
+- **Which tracker for the first stage:** the mmWave radar covers a small stage for the price of a sensor; UWB is the accurate route and the larger build.
+
+## What it removes
+
+Nothing in code: it adds a MIDI frame, a position frame, two effects and a follow formation on the existing transports and fixtures, plus the UART seam the radar needs. In the docs, the three backlog sections it is built from (notes as an effect input, the rest of the band, everything as MIDI) leave the backlog once this plan is approved, since a plan is where an item goes when it is picked.
diff --git a/docs/work/present/Plan-20261013 - Streams, every frame from outside.md b/docs/work/present/Plan-20261013 - Streams, every frame from outside.md
new file mode 100644
index 000000000..ffb637fc5
--- /dev/null
+++ b/docs/work/present/Plan-20261013 - Streams, every frame from outside.md	
@@ -0,0 +1,438 @@
+# Plan: streams, every frame from outside, one model
+
+Plan, for the product owner's approval; started as an analysis on 2026-10-13, when three pull requests by Gohnnyman (#138 a backlight effect and VideoService, #139 USB video capture, #140 backlight wiring) arrived the same week TouchMyLight announced an FSEQ player for a 20 × 20 × 20 cube (on #134). Read one by one they look like unrelated features: a TV backlight, a capture card, a show player. Read from MoonLight's architecture they are the same thing: a stream of frames arriving from outside the device. This plan models that once, by the textbook, so cameras, video, files, the network and the browser become combinations of a few parts rather than a feature each.
+
+## The textbook model: three independent axes
+
+Every media framework separates the same three questions: GStreamer, FFmpeg, Media Foundation and Video4Linux all do. Where do the bytes come from, how are they encoded, and what shape is the frame? Each axis varies on its own.
+
+| Axis | Values in MoonLight's world |
+|---|---|
+| **Transport** | a file on flash or the SD card, the network (UDP, TCP, the browser's WebSocket), USB, a camera port (MIPI-CSI) |
+| **Format** | raw RGB, PPM, GIF, MJPEG, FSEQ, the DDP, Art-Net and E1.31 framings; H.264 on the way out |
+| **Geometry** | a picture (width × height), a light list (N lights, mapped by the sender), a volume (width × height × depth) |
+
+A source is then a transport plus a decoder, delivering frames with a small descriptor: the geometry, the pixel format and the frame's time. An output is an encoder plus a transport. Everything users ask for is a combination:
+
+| What users ask for | Transport | Format | Geometry |
+|---|---|---|---|
+| An xLights show (FSEQ) | SD file | FSEQ | light list |
+| Network Receive today | UDP | DDP, Art-Net, E1.31 | light list |
+| A GIF animation | flash or SD file | GIF | picture |
+| An HDMI grabber (#139) | USB | MJPEG | picture |
+| A camera on the P4 | MIPI-CSI | raw, through the image processor | picture |
+| A screen shared from a browser tab | WebSocket | raw or DDP | picture or light list |
+| A volumetric show for a cube | SD file | FSEQ | volume, or a light list placed in 3D |
+| HLS and RTSP (shipped) | HTTP, RTSP | H.264 | picture |
+| Recording | SD file | FSEQ | light list |
+
+## How it lands on what MoonLight has: two families
+
+The three axes describe any stream, and they do not make every stream one module. The standard is **one module model with typed data:** GStreamer gives every source the same element model and types each output (`video/x-raw` and `audio/x-raw` connect only to their own kind), and TouchDesigner, the most general tool here, separates its operators by data type, CHOPs for channels (DMX In, Art-Net, MIDI In, audio) and TOPs for textures (video, files, capture). MoonLight's module model is that element model: every source is a MoonModule with one lifecycle. On top of it, two families exist in the industry and in MoonLight, each with its own semantics, and they meet in the layer.
+
+| | Channel data, the pixel protocols | Pictures |
+|---|---|---|
+| Live in | Network Receive: Art-Net, sACN (E1.31), DDP | capture: USB, MIPI-CSI, a browser tab |
+| Recorded in | FSEQ playback | GIF, image sequences |
+| Out | Network Send, FSEQ recording | HLS and RTSP, HDMI |
+| Data | values mapped by the sender | width × height pixels |
+| Into a layer by | placement through the layout | sampling per light |
+
+**Channel data is a protocol family, not a decoder.** Art-Net, sACN and DDP carry universes and channels, discovery (ArtPoll), sync packets, priorities and merging between senders, and Network Receive and Network Send are the two halves of the family. An FSEQ file is a recording of exactly that data, which is why Falcon Player plays FSEQ and outputs sACN. So FSEQ joins this family as a sibling of Network Receive, not as a decoder in a generic stream source.
+
+**Transports and files carry the same channel data.** Art-Net, E1.31 and DDP are transports, the data cut into packets to send live; FSEQ is a file format, the same data stored frame by frame with a step time to play later. So the family is one channel-data sink (staging, hold-last-frame, `mapped_by`, the placement, the counters) fed by sources: the network transports, and files from the SD card, a USB stick or flash, where the storage is a detail of the file source. Art-Net "from the SD card" is a recorded stream stored as FSEQ, as Falcon Player records it; FSEQ does not travel as a stream, Falcon Player copies the file to its remotes. Recording is the bridge: a live stream in, an FSEQ file out, written from the drivers' output.
+
+**Pictures are their own family:** a picture source publishing frames, and an effect that samples them per light. `VideoService` from #138 is that source, renamed for what it is.
+
+**What the families share, and only that:**
+
+1. **Light-list placement:** writing values mapped by the sender into the layer through the layout. FSEQ needs it, and so does Network Receive for frames mapped by the sender (below). One helper, two users.
+2. **The timing rule:** live (the newest frame wins) or recorded (the clock picks the frame), below.
+3. **The layer:** both families end as an effect in a layer, so they compose with effects, blend modes and modifiers.
+
+Two rules keep the picture side small enough for a microcontroller, where GStreamer's generality would not fit:
+
+- **Decoders always deliver RGB888,** so nothing negotiates formats.
+- **The picture descriptor stays a handful of fields:** size, frame time, live or recorded, and the tone curve a picture carries so the sampler averages light rather than bytes.
+
+## Mapped by the receiver or by the sender
+
+Network Receive copies channel k into logical cell k of its layer, and the layer's mapping then carries each logical cell to its physical light, so it follows the pipeline like any effect. Whether that is right depends on who mapped the frame, and the industry uses two conventions:
+
+| Sender sends | Examples | Copied into the layer by index |
+|---|---|---|
+| **Mapped by the receiver:** row by row like a picture (raster order), expecting the receiver to apply its own wiring | image-based tools that leave the wiring to the controller | correct: the layer's mapping applies this board's serpentine or 3D wiring once |
+| **Mapped by the sender:** arranged in the order the lights are wired (wiring order), because the sender did the mapping itself | xLights, FSEQ files, Falcon Player, pixel-mapping software with a fixture patch, MoonLight's own Network Send (it sends driver output) | mapped twice: the sender already applied the wiring and the layer applies it again, so a serpentine panel gets every other row reversed |
+
+On a plain grid without modifiers the two conventions coincide, which is why the difference stays invisible on simple setups.
+
+**So Network Receive gains a `mapped_by` setting,** `receiver` or `sender`, naming who maps the frame onto the wiring, `receiver` being the default:
+
+- **Mapped by the receiver** is today's copy, unchanged, so nothing changes for anyone using it now.
+- **Mapped by the sender** places channel k through the light-list placement, which is the inverse of the layout's mapping, before the layer's modifiers: composed with the layout, the two cancel, so channel k reaches physical light k, while a mirror or a rotation still transforms the frame and it still blends.
+- **FSEQ is always mapped by the sender,** since xLights writes it that way, so the FSEQ effect uses the placement without a setting, through the channel-data sink it shares with Network Receive.
+
+**The hot path stays as fast as today.** Network Receive is on it: at 16,000 lights and 40 frames a second every per-light step counts. The placement follows the rule the layer's mapping already follows, which keeps no table at all when logical order equals physical order (`hasLUT()` false):
+
+- **Orders coincide** (a plain grid, no modifiers): the placement is a `memcpy`, zero cost over today.
+- **Orders differ** (serpentine, 3D, a mapped layout): a per-light gather through the table, where the copy by index would have mapped twice.
+- **Only on new data,** as today: a frame without new packets costs nothing.
+
+A measurement gates it: `run_live_scenario` on the S3 with Network Receive on a large grid, before and after, in both the identity and the serpentine case; an identity path that moves at all does not merge.
+
+One more option exists for a single feed that must be the absolute fastest: writing straight into the drivers' output, bypassing the layer, which is what WLED's realtime override does. It gives up blending, modifiers and composition, so it is not the default; it is a setting to add only when a user needs it.
+
+## Real time and not real time
+
+Streams split a second way, by who sets the pace, and the split is the textbook one between live and on-demand media.
+
+| | Live (real time) | Recorded (not real time) |
+|---|---|---|
+| Examples | Network Receive, USB and CSI capture, a browser tab, MIDI-driven content | FSEQ, GIF and image sequences from flash or SD, a baked show |
+| Who sets the pace | the sender: a frame arrives when it arrives | the device's clock: it pulls the frame the timeline asks for |
+| Late or missing frames | the newest frame wins and an old one is dropped, never queued, since a queued frame is a late frame | none: the next frame is read ahead, one frame of buffer at most |
+| Seek, loop, pause | not possible | the frame index comes from the clock, so they are arithmetic |
+| Sync across boards | each board shows what it receives | clock sync: every board computes the same frame index from the shared clock |
+| What it costs | latency, which the design keeps to one frame | storage bandwidth, which the design keeps to one frame per tick |
+
+Each source states which kind it is, so its effect knows whether to show the newest frame or the frame the clock asks for. The transport decides it: a socket, a USB grabber and a camera are live; a file is recorded. A file can also be played live, at the pace of a sender elsewhere, which is how a recording replays exactly what arrived.
+
+Not real time also names a third case that never reaches the device as a stream: **authoring**. Baking a picture or a video into FSEQ for a layout runs in the browser at whatever speed it takes, and only its result plays in real time.
+
+## Modifiers and the single pass
+
+A small device cannot run a PC pipeline, where each stage hands a full frame to the next. MoonLight never does: geometry is composed into coordinates at prepare time, and each frame does one pass.
+
+- **Modifiers are coordinate folds,** composed into the layer's mapping table at prepare (`Layer::rebuildLUT`). Mirror, rotate, tile and multiply change where a logical cell lands, never the pixels; an animated modifier remaps coordinates per frame (`modifyLive`), still without an intermediate frame.
+- **Effects write colors for their own logical cells** into one buffer per layer, and the mapping table carries them to the physical lights.
+
+The textbook name is inverse mapping: compose every transform into one coordinate function, then sample the source once per output pixel. A GPU fragment shader works this way, and so does OpenCV's `remap` with a precomputed table.
+
+**Both families follow that rule, so their consumers are effects, not modifiers.** Sampling is what an effect does: a color for its own coordinates, read from a decoded frame instead of computed from a formula.
+
+- **At prepare** each builds a small table, as the layer builds its mapping: the picture effect maps each logical cell to a source pixel or, for area sampling, a source rectangle; the light-list placement maps light k to the logical cell it lands in, which is the physical-to-logical fold the layer's mapping build already computes.
+- **Per frame** each does one gather into the layer buffer, and the existing mapping does the rest.
+
+**Modifiers stay the one home for geometry transforms** and apply to a stream like any effect, as the architecture already says: the same RotateModifier rotates Fire, Noise or a network-received frame. So the picture effect has no rotate, mirror, scroll or offset of its own. It keeps only what belongs to sampling: fitting or stretching the picture onto the grid, point or area averaging, and the edge depth a backlight samples at.
+
+**The picture side keeps the same budget:** decoding runs off the render tick, the effect does one gather per frame, and area sampling is capped per zone so a large source never costs a read per source pixel.
+
+**The one full frame is the decoded picture,** the texture the shader samples, and it is an input rather than a stage: the P4's JPEG hardware decodes whole frames and a GIF composes onto a canvas, so a decoder produces it anyway. Channel data needs none: an FSEQ or DDP frame is written into the layer buffer through the placement table as it is read.
+
+**What it removes.** The backlight stops being an effect of its own and becomes the picture effect's area sampler. Network Receive keeps its protocol family and gains sender mapping as a second convention, at no cost in the identity case. FSEQ reuses Network Receive's placement instead of growing its own. No stage holds a frame of its own, and no geometry option is duplicated inside an effect.
+
+```mermaid
+flowchart TB
+    subgraph CH["<b>Channel data</b>: mapped by the sender"]
+        direction LR
+        nr["<b>Network Receive</b><br/>Art-Net, sACN, DDP"]
+        fseq["<b>FSEQ playback</b><br/>from /sd<br/><i>TouchMyLight</i>"]
+    end
+    subgraph PIC["<b>Pictures</b>: width × height"]
+        direction LR
+        cap["<b>capture</b><br/>USB <i>#139</i>, CSI, browser tab"]
+        gif["<b>GIF, sequences</b><br/>flash, /sd"]
+        ps["<b>picture source</b><br/>test pattern<br/><i>#138</i>"]
+    end
+    place["<b>light-list placement</b><br/>through the layout"]
+    samp["<b>picture effect</b><br/>sampled per light<br/>backlight <i>#138</i>"]
+    mix["<b>Layers</b>: effects, opacity, blend modes, modifiers"]
+    map["<b>Layouts</b>: 2D, 3D, backlight.mll <i>#140</i>"]
+    subgraph OUT["<b>Out</b>"]
+        direction LR
+        drv["<b>LED drivers</b><br/>color trim <i>#139</i>"]
+        ns["<b>Network Send</b>"]
+        rec["<b>FSEQ recording</b>"]
+        hls["<b>HLS, RTSP</b>"]
+        hdmi["<b>HDMI</b><br/>ESP32-P4-PC"]
+    end
+    browser["<b>Browser</b>: converts and bakes<br/>at authoring time"]
+
+    nr --> place
+    fseq --> place
+    cap --> ps
+    gif --> ps
+    ps --> samp
+    place --> mix
+    samp --> mix
+    mix --> map
+    map --> drv
+    map --> ns
+    map --> rec
+    map --> hls
+    map --> hdmi
+    browser -.-> gif
+    browser -.-> fseq
+
+    classDef shipped fill:#1f4d3d,stroke:#5fb89a,color:#fff
+    classDef pr fill:#2d3561,stroke:#7b88c9,color:#fff
+    classDef planned fill:#4d3d1f,stroke:#c9a95f,color:#fff
+    classDef proposal fill:#3d2d61,stroke:#a07bc9,color:#fff
+    class nr,mix,ns,hls shipped
+    class ps,samp,cap,map,drv pr
+    class fseq planned
+    class place,gif,rec,hdmi,browser proposal
+    style CH fill:none,stroke:#888
+    style PIC fill:none,stroke:#888
+    style OUT fill:none,stroke:#888
+```
+
+Green ships today, blue is an open pull request, gold is planned by a contributor, purple is this plan's proposal. The diagram is configuration, not runtime stages: each family does a single gather into its layer, then the existing mapping. Everything from the layers down already exists.
+
+## Where MoonLight stands among the tools
+
+The tools look different, but they share this pipeline and put their weight in different places.
+
+| Tool | Weight on | Runs on |
+|---|---|---|
+| Resolume | video clips in layers, pixel mapping to fixtures | PC |
+| TouchDesigner | a general dataflow graph, anything to anything | PC |
+| MADRIX | LED pixels: generative effects, layers, a 2D and 3D patch, media and capture, many outputs, record and replay on a standalone player | PC, standalone nodes |
+| xLights with Falcon Player | sequencing offline, playback standalone | PC, Raspberry Pi |
+| Hyperion, HyperHDR | capture to LED zones | Raspberry Pi, PC |
+| WLED | effects on segments, a realtime override | ESP32 |
+
+MoonLight is closest to MADRIX: generative effects, layers, 2D and 3D layouts and many outputs. The difference is that it runs on the controller itself. MADRIX's media, capture, and record-for-standalone-playback are what this stream model adds. The position is MADRIX-class pixel control, embedded, which no tool in the list occupies.
+
+## What WLED did, and where it stopped
+
+Checked 2026-10-13 against WLED main and WLED-MM.
+
+- **One picture format, decoded on the device.** The Image effect (Aircoookie, PR #3835, finished by netmindz, shipped in WLED 16.0, May 2026) plays a GIF from the internal file system, up to 320 × 320, with about 24 KB of decoder RAM (bitbank2's AnimatedGIF). It scales by nearest neighbor, decodes one image at a time across all segments, and redraws only changed pixels, which upsets brightness limiting. WLED-MM backported it.
+- **Every conversion in the browser.** DedeHai's PixelForge (PR #4982, WLED 16.0) crops, scales and encodes a GIF in the page and uploads it; Video Lab turns video into GIFs, Pixel Paint draws on the matrix, Font Factory makes scrolling-text fonts.
+- **No capture on the device.** The only video path is a browser page streaming DDP over the WebSocket (DedeHai, PR #4997). Hyperion does all backlight processing on a computer and drives WLED over DDP.
+- **FSEQ: five attempts, none merged** (#2413, #3551, #4570, #5641 open since May 2026). They bolted playback onto the realtime override, which replaces effects rather than composing with them, and each bundled an SD driver, a player, a UI and Falcon Player sync in one pull request. Recording was planned and never built.
+- **SD** is a usermod nothing in core reads.
+
+ESPixelStick, the reference small-device FSEQ player, plays uncompressed FSEQ v2 with sparse ranges from SD, floors the step at 25 ms, takes the frame index from a monotonic clock plus a sync offset, and seeks per frame, which keeps looping and sync trivial.
+
+What it teaches: GIF first among picture formats, decoded per source rather than in one global decoder; conversion as browser pages; the layer as the home of every stream, which is exactly where WLED's FSEQ attempts went wrong; FSEQ starting where ESPixelStick stops. New beyond WLED: a stream composing in layers on any layout, 3D included; area sampling in linear light; capture decoded on the device; recording; synchronized playback across boards; the SD card as a first-class file store.
+
+## Browser and device
+
+One rule decides the split, and MoonLight already follows it where the device cannot do a job (the Firmware card's download for a board without TLS, MoonCloud's outbox, scripts fetched from GitHub by the page): **what must run with no browser open belongs on the device; what happens once, with a person at the screen, belongs in the browser.** In the stream model the browser is one more transport, and an authoring tool.
+
+| Tier | Where | Examples |
+|---|---|---|
+| Authoring: once, a person present | browser | crop, scale and convert images; video to GIF or to FSEQ; fonts; an xLights model imported as a layout |
+| Live, a browser as the source | the browser samples, the device displays | a screen (`getDisplayMedia`), a webcam or a video in a tab, streamed over the existing WebSocket |
+| Run time: autonomous | device | effects, playback from flash or SD, USB and CSI capture, sync, recording, a show running for days |
+
+**The browser can bake for this layout.** It already knows every light's position, since it draws them in the preview. So it can do the expensive part once, sampling a picture or a video per light with the area filter in linear light, and write the result as an FSEQ file. The device then plays it with the same cheap light-list path as an xLights show, on any layout, with no decoder.
+
+| | Baked in the browser (FSEQ) | Decoded on the device (GIF) |
+|---|---|---|
+| Device cost | lowest: read and copy | decode and sample every frame |
+| Follows a layout change | no: bake again | yes |
+| Storage | large: 8000 lights at 40 fps is about 1 MB/s, so SD only | small: fits in flash |
+
+A live browser source costs bandwidth, lights × 3 bytes × fps: about 60 KB/s for a 600-light TV frame at 30 fps, too much for 8000 lights over WiFi. USB and CSI capture run with no browser, so they belong on the device. A TV's picture from a set-top box or console never passes through a computer, so a backlight following it needs the grabber on the board (#139).
+
+## 3D layouts
+
+TouchMyLight's cube is the first user, so 3D works from the start.
+
+- **A light list is mapped by the sender, and carries no positions.** An FSEQ frame holds values in the order xLights numbers the model's lights, the order the outputs drive them. Copied into the layer by index, it is mapped twice wherever the layer's order differs from the wiring, as on a cube (see mapped by the receiver or by the sender, above). The light-list placement puts light k at the coordinate the layout gives light k, and the layer's mapping carries it back to that physical light: correct on 1D, 2D and 3D layouts, and still composing with layers and modifiers. The user-side requirement is the one every FSEQ player has: the MoonLight layout and the xLights model number their lights the same way.
+- **A picture reaches a 3D layout by projection:** each light samples the picture at its position seen along one axis, the planar projection media servers use.
+- **A volume is the native 3D stream:** a frame per depth slice, copied straight into a 3D layer.
+
+## The P4 and its codecs
+
+The P4's hardware video codec encodes H.264 but does not decode it; its JPEG codec works both ways. So video arrives as MJPEG from a grabber, raw from a camera, or baked in the browser, while video leaves through the H.264 encoder HLS already drives.
+
+**One board carries every piece.** The Olimex ESP32-P4-PC (February 2026, on the PO's bench) has HDMI and MIPI-DSI out, a MIPI-CSI camera connector, four USB 2.0 host ports, a microSD slot, Ethernet with PoE and 32 MB of PSRAM: capture in, HDMI out and FSEQ from the card on one P4. HDMI out is also the textbook way to feed commercial LED walls: Novastar and Colorlight sending cards take HDMI or DVI as their input.
+
+## What each contribution becomes
+
+| Contribution | In the plan |
+|---|---|
+| `VideoService` (#138) | the picture source, renamed for what it is |
+| #138's backlight effect | the picture effect's area sampler, edge depth among its settings |
+| USB capture (#139, first commit) | a picture source's USB transport and MJPEG decoder, behind the platform seam, in the P4 images with room |
+| Per-die trim (#139, second commit) | a separate idea: output calibration in fixture profiles and correction, judged against a 3×3 correction matrix |
+| Backlight wiring (#140) | a layout: Hyperion's classic layout, xLights' frame models |
+| FSEQ player (TouchMyLight) | its own thin effect beside Network Receive, both on one channel-data sink (staging, hold-last-frame, `mapped_by`, the placement, the counters); a third user later records a live stream to FSEQ |
+| Network Receive (shipped) | kept as the pixel-protocol family, gaining a `mapped_by` setting: `receiver` as today, `sender` through the light-list placement |
+
+## What we do not do, and what we do differently
+
+The work follows the idea, not the pull requests: a contribution lands where it fits the plan, in the shape the plan gives it.
+
+**Not part of the idea:**
+
+| What | From | Why not |
+|---|---|---|
+| The backlight as an effect of its own | #138 | it is one sampler setting of the picture effect; a card of its own duplicates the picture path |
+| PPM as a user format | #138 | chosen only for want of a software JPEG decoder; GIF covers that need with the tools users already own, and PPM stays a test fixture |
+| HDR tone curves (PQ, HLG) | #114, partly #138 | no planned source delivers HDR; the descriptor carries sRGB or linear until one does |
+| Video decoding beyond MJPEG on the device (H.264, software JPEG) | implied by "video" | the browser bakes video into GIF or FSEQ; the device decodes only what its hardware decodes |
+| FSEQ extras up front: zstd, `.xlz` archives, FPP Connect upload, FPP MultiSync | the pattern of WLED's attempts | the bundling that stalled all five of them; uncompressed v2 first, each extra on a measurement or a user who needs it |
+| One module for every transport and data type | the first draft of this plan | the standard is one module model with typed data, as GStreamer and TouchDesigner do; MoonModule is that model, and a single module would flatten the pixel protocols' semantics (universes, discovery, sync, priorities) |
+| A cap on the current a frame draws, a WiFi TX-power cache | #114 riders | not this idea; already dropped |
+
+**In a different shape:**
+
+| What | As proposed | Instead |
+|---|---|---|
+| Who builds the groundwork | the contributor shapes `VideoService` and the descriptor | MoonLight builds the groundwork below, since core owns the hard constructs; contributors add sources on top in small pull requests |
+| USB capture | linked into every P4 image | only into images with room, measured as the SD card was (#136), and after the browser tab source, which serves every board |
+| Smoothing | a backlight setting | a picture effect setting, since temporal smoothing applies to any picture, or dropped |
+| Letterbox detection | built in | a later sampler option, when a user asks; every setting names the user who needs it |
+| The capture seat, one instance per board | the default for every source | only for transports with exclusive hardware (USB, CSI); files and the network feed several sources at once |
+| Multi-board sync | FPP MultiSync, as WLED's attempts did | MoonLight's own clock sync from the core backlog first; FPP compatibility later, as an adapter, if users mix in Falcon Player |
+
+**As proposed:** #140's start corner, direction and offset (the textbook layout model, and small); area sampling in linear light (#138); the capture seam's shape, an opaque handle with a generation counter and formats learned at enumeration (#139); FSEQ playback, starting on the cube.
+
+## The groundwork
+
+What MoonLight builds first, so that every contribution after it is one source in a small pull request:
+
+| # | Piece | Where | What it does |
+|---|---|---|---|
+| G1 | **Light-list placement** ✅ built | `Layer::placeByLayout`, `ChannelDataSink` | each logical cell takes the light the layout places at its position, from a table built at prepare, only when the frame shares its layer or sits under a modifier; on an identity mapping it is one copy, and alone on its layer G5 sends it to the output as it is; it replaced the mapping's inverse (G1's first form), whose static modifiers cancelled |
+| G2 | **Network Receive's `mapped_by`** ✅ built | `NetworkReceiveEffect` | `receiver` as before (the default), `sender` through G1, the status saying "one copy" or "mapped twice"; tests pin a serpentine grid and a 3D layout, which reversed every other row before; on the S3 at 12,288 lights a serpentine layout costs 4.5 ms per frame against 1.1 ms for receiver mapping, an identity layout the same as receiver mapping |
+| G3 | **The picture source** ✅ built | a core service, from #138's `VideoService` | the descriptor, publishing in `AudioService`'s pattern, a test pattern as its only source |
+| G4 | **The picture effect** ✅ built | a light effect, from #138's sampler | point or area sampling in linear light, fit or stretch, a table at prepare and one gather per frame |
+| G5 | **Sender mapping skips the board's mapping** ✅ built | `Layer`, `Drivers` | the existing rule, hottest path when possible, extended to layouts that are not the identity: an identity layout is already one copy at any number of layers, since the drivers do not map; a layer whose only writer is mapped by the sender, with no modifiers and no second layer, is read as it is whatever the layout, so the layout still shapes the preview and the board's own effects; blending or a modifier on such a layout falls back to G1's round trip, with G1 inverting the layout's mapping alone so the modifier transforms the frame; the tests add a rotated and a mirrored layer to the serpentine and 3D cases |
+| G6 | **The channel-data sink** ✅ built | `ChannelDataSink`, from Network Receive | staging, hold-last-frame, `mapped_by` and the placement, the counters and the status path, extracted from Network Receive so a file source is a thin effect on it; Network Receive's tests pass unchanged |
+| G7 | **A contributor page** ✅ built, [the how-to](../../how-to/adding-a-stream-source.md) | docs | how to add a channel-data source and how to add a picture source, with the test pattern as the template |
+| G8 | **The browser as a picture source** | `PictureService`, a UI page | a second `source`, `browser`: a page draws a video file, a webcam or a shared screen (`getDisplayMedia`) onto a canvas at the picture's size and sends the RGB frames over the existing WebSocket into the service's pixels, as WLED streams a tab (DedeHai, PR #4997); a `<video>` element first, since it plays every file the browser does, and GIF frame by frame after it through `ImageDecoder`; about 7 KB a frame at 64x36, 200 KB/s at 30 fps; it needs no hardware, so every board tests the picture path with it. Follow-ups: live recording of the drivers' output to FSEQ on SD (the Recording row below), and the browser baking a whole video into FSEQ for this layout ahead of time, so nothing runs in real time and the board plays it standalone; an hour is about 1.3 GB at 64x64 and 30 fps and 5.3 GB at 12,288 lights and 40 fps, so a baked movie travels on the card rather than over WiFi |
+
+G1 and G2 come first: they add the second convention every mapping sender needs, and wait on no naming. G3 and G4 take #138's core part, credited to Gohnnyman. Before code: the double mapping confirmed on the bench (a serpentine grid fed by xLights, expected to show every other row reversed) and the open questions below decided.
+
+## How contributions arrive
+
+Each later piece is a small pull request, one topic, based on current main, with only its own commits:
+
+| Pull request | Who | On |
+|---|---|---|
+| Backlight wiring, today's #140 resubmitted on main | Gohnnyman | nothing; it can come now |
+| Color trim, split from #139 | Gohnnyman | nothing; a separate idea |
+| FSEQ playback from SD: uncompressed v2, sparse ranges, the frame index from the clock, verified on a 3D layout. It builds on the channel-data sink (G6) that Network Receive and the FSEQ player both use, each a thin effect with its own settings (decided 2026-10-14) | TouchMyLight | G1, G2, G6; G5 sends a player alone on its layer to the output in one copy on any layout, a 3D one included |
+| Border sampling: edge depth, smoothing | Gohnnyman | G4 |
+| GIF decoder, PPM as a test format | open | G3 |
+| USB capture with its MJPEG decoder, P4, with Teensy stubs | Gohnnyman | G3 |
+| Browser pages: converter, baking to FSEQ | open | G1 to G4, G8 |
+| Recording, HDMI out on the ESP32-P4-PC, clock sync | open | FSEQ playback |
+
+Pull requests #138 and #139 close with thanks once G3 and G4 land, their good parts credited in the groundwork; a stacked pull request waits for the one below it, as [CLAUDE.md](../../../CLAUDE.md) says.
+
+## Skeletons for the contributions
+
+What each pull request builds, settled before code so it arrives small and on design. The names follow the open naming question below. Each passes `check_specs` with a card, and its tests pass on the desktop before a board sees it.
+
+**FSEQ player (TouchMyLight), on G6.** A thin effect on the channel-data sink, the file being its only source; FSEQ is mapped by the sender, so it sets no `mapped_by` of its own. `FseqPlayerEffect` is registered with these settings on the sink and reads no file yet, its status saying so: the contribution is the file reading in `prepare()` and `tick()`.
+
+```cpp
+class FseqPlayerEffect : public EffectBase {   // light/effects/FseqPlayerEffect.h
+    char file[64];      // a path on /sd or flash, picked from the file list
+    bool loop = true;
+    uint8_t speed = 100;   // percent of the file's step time
+    // prepare(): open the file, read the v2 header, size the sink to its channel count, refuse compressed files and sparse ranges with a status
+    // tick(): the frame index from the clock (start time, speed), read that frame into the sink, which places and holds it
+    ChannelDataSink sink_;
+};
+```
+
+Tests: a v2 header read and refused when compressed; the frame index from the clock at 50 and 200 percent; a written serpentine file placed on a serpentine and a 3D layout reaching each light as sent (`moondeck/run/fseq_play.py` writes the reference files); a missing file degrades to a status, never a crash.
+
+**The picture source (G3) and the picture effect (G4), from #138.** A core service publishing frames in `AudioService`'s pattern, and an effect sampling them per light.
+
+```cpp
+struct PictureFrame { const uint8_t* rgb; uint16_t width, height; uint32_t generation; };   // core/util/PictureFrame.h
+class PictureService : public MoonModule {     // core/services/PictureService.h
+    uint8_t source = 0;   // test pattern first; each later source adds an option
+    static const PictureFrame* latestFrame();   // always valid: a blank frame when nothing publishes
+};
+class PictureEffect : public EffectBase {     // light/effects/PictureEffect.h
+    uint8_t fit = 0;       // fit or stretch
+    uint8_t sampling = 0;  // point or area, area in linear light
+    // prepare(): a table from each light's position to its picture rectangle; tick(): one gather per new generation
+};
+```
+
+Tests: the test pattern's frame; point and area sampling against hand-computed values; fit against stretch on a non-square layout; a 3D layout sampling its front face; no new frame, no gather.
+
+**Backlight wiring (#140).** The layout exists as `moonlive/layouts/backlight.mll`, one strand clockwise from the top-left corner; #140's own commit extends that script, the name staying Backlight since its lights sit on the edge pixels of a wall's canvas.
+
+```
+class BacklightLayout {          // moonlive/layouts/backlight.mll
+  byte wallCols, wallRows;       // kept: the wall's size in pixels
+  byte across, down;             // kept: lights along the top and along a side
+  byte startCorner = 0;          // where the strand enters, a select with the corner names
+  byte clockwise = 1;            // which way it runs
+  int offset = 0;                // lights past the corner where it begins, counted along the strand
+  void placeLights();            // one walk around the edge, rotated and reversed; only the indices move
+}
+```
+
+Tests: each start corner and direction pinned as the expected sequence on a small wall; an offset along a counter-clockwise strand; the defaults reproducing today's order; the script's line in the IR golden table. Later, optionally: Hyperion's separate count per edge, which allows a gap for a TV stand.
+
+**Color trim (#139's second commit).** Output calibration, so it lives in the fixture profile and the correction, judged against a 3×3 correction matrix before code.
+
+```cpp
+// light/drivers/FixtureProfilesModule.h: per profile, beside the channel roles
+uint8_t trimRed = 255, trimGreen = 255, trimBlue = 255;   // gain per channel
+// light/drivers/Correction.h: rebuild() folds the trim into each channel's table, so the hot path is unchanged
+```
+
+Tests: a trim scaling one channel and leaving the others; a trim of 255 being the identity; the trim surviving a profile save and load.
+
+## Where it stands (2026-10-14)
+
+Built on this branch: G1 to G7, and around them what measuring Network Receive on real boards turned up.
+
+<img src="../../assets/light/effects/NetworkReceiveEffect.png" width="404" alt="Network Receive receiving a sender-mapped stream in one copy">
+
+What the card added: `mapped_by` picks who maps a frame onto the wiring, the status names the sender and the path its frame takes ("one copy" or "mapped twice"), and `packets_per_s` and `frames_per_s` count the last second, so a scenario compares them with what the sender sent. Here the S3 testbench receives `fseq_play`'s 64x64 serpentine sweep: alone on its layer, the frame goes to the output in one copy, and the tick fell from 5.83 ms to 2.96 ms against G1's two mappings.
+
+- **Network Receive** drains its sockets in a receive task on core 1, shows its path in the status ("one copy" or "mapped twice"), and counts `packets_per_s` and `frames_per_s`.
+- **TryLock** releases with an exchange: in PSRAM a plain store raced the emulated read-modify-write, left the latch set with no owner, and took the WiFi stack down with the stuck receive task.
+- **The gather** runs in 4.5 ms instead of 7.3 ms at 12,288 lights on the S3.
+- **Defaults:** a UDP mailbox of 32 on every board, and 30 Ethernet receive buffers of 1600 bytes on the P4, transmit kept at 10.
+- **Scenarios:** `scenario_NetworkReceive_two_boards` and `scenario_NetworkSend_one_sender_many_receivers` drive several boards (`--board name=host`), recorded per combination of boards.
+
+Received at 12,288 lights, 40 frames/s sent (1,040 packets/s), mapped by the receiver:
+
+| Sender to receiver | Packets/s | Frames/s | Receiver tick |
+|---|---|---|---|
+| S3 WiFi to S3 WiFi | 600 to 980 | 20 to 23 | 6.8 to 8.2 ms |
+| P4 Ethernet to S3 WiFi | 616 | 23 | 5.8 ms |
+| S3 WiFi to P4 Ethernet | 984 | 32 | 0.3 ms |
+| P4 Ethernet to P4 Ethernet | 790 to 846 | 8 to 19 | 0.8 ms |
+
+P4 to P4 started the day at about 200 packets/s and 0 to 1 frames. What remains is the sender's burst: the access point drops it on WiFi, and on Ethernet the push packet at its end is the one most often lost. Network Send paces its packets, set by `packet_gap` and off at 0 (a 0.5 ms gap recovered 96% on WiFi), which took P4 to P4 to 26 to 36 frames/s. G5 removes the double mapping that sender mapping cost on a layout that is not the identity (4 ms against 1.6 ms on the S3): a stream alone on its layer goes to the output in one copy, and a static modifier on its layer transforms it. G8 is next. The rest is in the backlog below.
+
+## Backlog, found while measuring
+
+- **A blocking HTTP write freezes the render task under a stream.** `serveState` writes the full `/api/state` (about 35 KB) with a blocking `lwip_write` on the render task; with the S3 receiving 12,288 lights over WiFi the client's acknowledgements slow, the send buffer fills, and the write holds the render task for seconds until the task watchdog reboots the board (backtrace: `handleConnection` → `serveState` → `JsonSink::flushStage` → `lwip_write`, 2026-10-14). The UI no longer reads the full state since state by subscription, so the trigger was the scenario runner's reads at every measure step; only the diagnostic bundle, assign mode and a backup restore still read it, each on a user's explicit action. The textbook fix: write without blocking and resume a partial write on the next tick, as uploads already stream. Check whether the WebSocket state pushes, smaller TCP writes on the same task, can block the same way.
+- **The UDP mailbox of 32 and the paced send task on boards without PSRAM.** `CONFIG_LWIP_UDP_RECVMBOX_SIZE=32` is in the base defaults for every board. It costs about 128 bytes per socket, and on WiFi the queued packets are WiFi's own receive buffers, capped at 32. On Ethernet without PSRAM they come from the internal heap at about 1.6 KB each, so a full queue holds about 50 KB on a classic board with 100 to 170 KB free, which could starve the HTTP server during a burst. Measure it with `scenario_NetworkReceive_two_boards` on a classic Ethernet board (the Olimex at 192.168.1.210) receiving from a P4, reading free heap and the HTTP answers; if it hurts, the 4 MB classic fragments override it with a smaller value. Measure Network Send's paced task there too, with the classic as the sender: about 5.5 KB of internal RAM per driver (a 4 KB stack, the 1.45 KB packet buffer, a timer), and on a single-core chip such as the C3 the send task outranks the frame loop, so each packet briefly interrupts it.
+- **The two-board scenarios on every platform.** `scenario_NetworkReceive_two_boards` and `scenario_NetworkSend_one_sender_many_receivers` run today on S3 boards over WiFi and P4 boards over Ethernet, in all four pairings. Add the Teensy 4.1 (Ethernet), desktop builds over WiFi, and the NanoPi over Ethernet, as sender and as receiver, so every platform's receive cost and loss sits in the same table. A desktop or NanoPi board joins with `--board name=<ip>:8080`. The Teensy build runs bare-metal with no scheduler, so Network Send and Network Receive work inside their tick (`spawnPinnedTask` returns false); QNEthernet fills its receive buffers in an interrupt, so a late drain loses less there. Its runs show whether threads (TeensyThreads or a FreeRTOS port, with stacks in its tight RAM and shared structures made thread-safe) are worth it.
+- **E1.31 multicast never arrives.** Network Receive binds 5568 but never joins the multicast groups, so both receivers in `scenario_NetworkSend_one_sender_many_receivers` read 0 packets while Network Send multicast; `UdpSocket::membership` exists in the platform layer and goes unused. Join the groups of the universes the layer covers, from `universe_start` on.
+- **The Art-Net broadcast counts do not add up.** In the same scenario at 64x64 (about 1,000 packets/s sent, 40 frames), the S3 counted 1,212 packets/s and 96 frames/s while the P4 counted 488 and 39. Another bench board broadcasting, or duplicates over WiFi; a packet capture on port 6454 settles it.
+- **A sending P4 reboots with 30 Ethernet transmit buffers.** With 30 x 1600 bytes for transmit a P4 rebooted about 15 s into sending; IDF takes every Ethernet DMA buffer from internal RAM, about 96 KB with 30 + 30, so internal-heap exhaustion is the suspect, unverified. troyhacks raised and reverted the same values within 26 minutes ([bdf6c17e](https://github.com/troyhacks/esp32-arduino-libs/commit/bdf6c17e), [c8a43b7e](https://github.com/troyhacks/esp32-arduino-libs/commit/c8a43b7e)). Transmit stays at 10.
+- **The P4's HTTP server answers "incomplete request body" under a stream.** Two `set_control` writes and one `apply_state` failed this way while the P4 received DDP over Ethernet; the same short body window backlog-core already names.
+- **`CONFIG_ETH_IRAM_OPTIMIZATION=y` on the P4.** The one Ethernet change troyhacks kept; measure it with `scenario_NetworkReceive_two_boards`, P4 to P4.
+- **A UDP mailbox of 64 on the P4.** Espressif's own P4 Arduino default; 32 against 64 measured the same on the S3 over WiFi, so measure it P4 to P4 over Ethernet, where bursts arrive at wire speed.
+- **The receive task's priority on Ethernet.** Ours runs at 3 on core 1, below the driver task (`mmEncode`, 5); troyhacks' Art-Net receive runs at 20 on core 0, blocking in `recvfrom()`, above lwIP's own thread (`tcpip`, 18), which a busy drain could starve. On the S3 over WiFi 6 against 3 changed nothing, the loss being at the access point. Measure 6 (above the driver task) and 19 (above lwIP) P4 to P4.
+- **Network Send paces its packets.** Back-to-back bursts are what the access point drops (a 0.5 ms gap recovered 96% on WiFi) and what loses the push packet at the end of an Ethernet burst. Spread a frame's packets over part of the frame period, and back off on a full transmit queue (`ENOMEM`) rather than adding buffers, as Espressif advises ([esp-idf#13602](https://github.com/espressif/esp-idf/issues/13602)) and troyhacks' raw Ethernet driver does.
+- **The live runner restores no board when a board fails mid-run.** A two-board run whose receiver rebooted left the sender's scenario canvas and its Network Send on P4 .139, still streaming to the S3. The restore of every board belongs in a `finally`, so an exception or a dead board still puts the others back.
+- **HTTP to an S3 fails under a stream from the same computer.** With a 40 fps DDP stream from the Mac into either S3 over WiFi, 4 to 6 of 20 HTTP probes from that Mac answered, while the render loop stayed healthy (log: 5.5 ms ticks, the HTTP server idle) and the Ethernet P4 took the same stream with every probe answered. A phone opening the S3's page during such a stream tells whether the S3's WiFi suffers or only the sending computer's link carrying both.
+
+## Open questions
+
+- The names: `PictureService` and `PictureEffect`, or names closer to the industry's (media source, pixel map)?
+- How far video goes on a board without a hardware decoder: GIF and image sequences, or a software decoder measured in flash first.
+- How HDMI out is wired on the ESP32-P4-PC: its sources name HDMI and MIPI-DSI but no bridge chip; Olimex's separate P4 HDMI adapter uses Lontium's LT8912B (MIPI-DSI to HDMI, up to 1080p60), so check the schematic.
+- Whether a layout reads xLights model exports, so a 3D model's node order and positions come from the file that designed the show.
+
+## Prior art
+
+- GStreamer and FFmpeg: transport, format and geometry as separate concerns; one element model with typed outputs.
+- TouchDesigner: one operator model, separated by data type into channel operators (CHOPs: DMX In, Art-Net, MIDI, audio) and texture operators (TOPs: video, files, capture), the reference for the two families.
+- Inverse mapping: a GPU fragment shader sampling a texture through a composed coordinate transform, and OpenCV's `remap` with a precomputed table; the reason MoonLight composes geometry instead of chaining frames.
+- MADRIX: the closest tool, LED pixels with effects, layers, a 3D patch, media, capture and standalone playback.
+- Resolume: video layers with pixel mapping to fixtures on a PC.
+- Hyperion and HyperHDR: grabbers, LED layout, mean-color zones, smoothing, black-border detection.
+- xLights and the FSEQ format (v2: header, channel count, frame count, step time, optional zstd and sparse ranges); Falcon Player for standalone playback and MultiSync; ESPixelStick for FSEQ from SD on an ESP32.
+- WLED: the Image effect (PR #3835), PixelForge (PR #4982), DDP over WebSocket (PR #4997), and the unmerged FSEQ attempts (#2413, #4570, #5641).
diff --git a/docs/work/present/index.md b/docs/work/present/index.md
index 08ba7e4c6..18cb41fac 100644
--- a/docs/work/present/index.md
+++ b/docs/work/present/index.md
@@ -5,3 +5,18 @@ One file per plan being built now, as `Plan-YYYYMMDD - <title>.md`.
 A plan is written in plan mode, approved before work starts, and edited as reality changes. **Its life ends at its PR**: the plan becomes the PR description and the file is deleted in that same PR ([CLAUDE.md, Branch](../../../CLAUDE.md#branch)). The merged PR is then the design record, and it carries the diff the plan describes.
 
 A file here that no longer has work behind it is either finished, and belongs in its PR, or abandoned, and belongs deleted.
+
+## Next (2026-10-13)
+
+1. **[Boards known by name](Plan-20261009%20-%20Boards%20known%20by%20name.md)**, not started. A setting that points at another board resolves its name through MoonLight's own Devices discovery before mDNS, and cards name their peers. It also gives the Teensy board names, since its lwIP has no mDNS lookup: a `.local` name never resolves there, and a driver waits on it rather than saying so.
+2. **[Layer compositing](Plan-20261011%20-%20Layer%20compositing%2C%20masks%20and%20transitions.md), step 3: transitions.** Steps 1 and 2 shipped in #137. The old effect fades out while the new one fades in, with one ramp type shared with the boot soft start; a Discord request.
+3. **Downloads on the tick path.** Every upload now moves through the transfer slots; a flash download still writes its whole file on one tick, bounded per chunk by the write deadline. Moving downloads onto the slots too needs a look at how many files the UI reads at once, since two slots answer a third request with 503. Firmware uploads drain whole by design and feed the watchdog.
+
+| Plan | State |
+|---|---|
+| Teensy 4.1, State by subscription, MoonLive Coord3D and RGB | shipped in #137 |
+| Native HUB75 output | shipped |
+| Network submodules | shipped, partly verified |
+| Audio codec | in PR 129, M3 unverified |
+| ESP32-C3 and the Athom bulb | open, waiting on the bulb |
+| Input mapping, Gamepads and MIDI desks, Presets as state documents, Code ratchets | partial |
diff --git a/esp32/main/Kconfig.projbuild b/esp32/main/Kconfig.projbuild
index 1208cc71a..c10b14cc1 100644
--- a/esp32/main/Kconfig.projbuild
+++ b/esp32/main/Kconfig.projbuild
@@ -46,6 +46,17 @@ menu "MoonLight"
             MIDI service with no computer. Set by the S3 images with flash to spare
             (n8r8, n16r8); the 4 MB S3-Zero leaves it off.
 
+    config MM_AUDIO_CODEC
+        bool "Audio codecs in front of a microphone (ES8311, ES7210)"
+        default y if IDF_TARGET_ESP32P4 || IDF_TARGET_ESP32S31
+        default n
+        help
+            Pulls the esp_codec_dev managed component and compiles the codec
+            bring-up, for the boards whose microphone sits behind an ES8311 or
+            ES7210. On for the chips whose boards carry one (the S31 CoreBoard,
+            P4 boards) and set by the Waveshare ESP32-S3-RGB-Matrix's image; a
+            board with an I2S microphone such as the INMP441 needs no codec.
+
     config MM_SD_CARD
         bool "microSD card support (SDMMC or SPI)"
         default y
diff --git a/esp32/main/idf_component.yml b/esp32/main/idf_component.yml
index 1ba79df79..4bfc94d16 100644
--- a/esp32/main/idf_component.yml
+++ b/esp32/main/idf_component.yml
@@ -51,15 +51,14 @@ dependencies:
     version: "^1.0.0"
     rules:
       - if: "$CONFIG{MM_USB_MIDI_HOST} == True"
-  # esp_codec_dev: Espressif's audio-codec library, whose ES8311 part configures an analog mic
-  # behind an ES8311 I2S codec. Which board has one, and on which pins, is AudioService's runtime
-  # configuration from the device model, so the component is built for every chip a codec board
-  # uses (the S31 CoreBoard, and P4 boards such as the Waveshare ESP32-P4-ETH) and nowhere else.
-  # Referenced only from platform_esp32_es8311.cpp, behind the codec gate.
+  # esp_codec_dev: Espressif's audio-codec library, whose ES8311 and ES7210 parts configure a
+  # microphone behind a codec. Which board has one, and on which pins, is AudioService's runtime
+  # configuration from the device model; the Kconfig gate keeps the component out of every image
+  # that does not set MM_AUDIO_CODEC. Referenced only from platform_esp32_es8311.cpp.
   espressif/esp_codec_dev:
     version: "^1.3.0"
     rules:
-      - if: "target in [esp32s31, esp32p4]"
+      - if: "$CONFIG{MM_AUDIO_CODEC} == True"
   # esp_wifi_remote + esp_hosted: WiFi for the ESP32-P4 via the on-board ESP32-C6
   # co-processor over SDIO. The P4 has no native radio; these present the C6's
   # radio through the standard esp_wifi_* API (API-compatible, so the WiFi seam in
diff --git a/esp32/sdkconfig.defaults b/esp32/sdkconfig.defaults
index 24d6c241f..4c5a9e799 100644
--- a/esp32/sdkconfig.defaults
+++ b/esp32/sdkconfig.defaults
@@ -58,6 +58,9 @@ CONFIG_LWIP_AUTOIP_TRIES=4
 # avoiding partial sends that would drop and reconnect the preview connection.
 CONFIG_LWIP_TCP_SND_BUF_DEFAULT=11520
 
+# A received frame is a burst of UDP packets (26 DDP packets for 12,288 lights) arriving faster than any task wakes, and a socket holding 6 drops the rest: measured on the S3 and the P4, mailbox 6 completed 4 to 10 of 40 frames/s at 4,096 lights where 32 completed 22 to 38 (scenario_NetworkReceive_two_boards).
+CONFIG_LWIP_UDP_RECVMBOX_SIZE=32
+
 # A browser page-load opens the HTML + several JS/CSS files + the persistent WebSocket all at once, and
 # every refresh churns that whole set. The default 10-socket ceiling can't hold one burst (6 files + WS +
 # the listen socket + WiFi/mDNS internals) once a few closed sockets sit in TIME_WAIT, so lwIP RSTs the
diff --git a/esp32/sdkconfig.defaults.esp32p4rev1-eth b/esp32/sdkconfig.defaults.esp32p4rev1-eth
index 13f6027ca..60549f299 100644
--- a/esp32/sdkconfig.defaults.esp32p4rev1-eth
+++ b/esp32/sdkconfig.defaults.esp32p4rev1-eth
@@ -1,17 +1,17 @@
-# Waveshare ESP32-P4-NANO — Ethernet-only build (IP101 PHY).
+# Waveshare ESP32-P4-NANO: Ethernet-only build (IP101 PHY).
 #   Board: https://www.waveshare.com/wiki/ESP32-P4-Nano-StartPage
 #   Schematic / pin map confirmed against the Waveshare wiki + the ESPHome
 #   device page (devices.esphome.io/devices/waveshare-esp32-p4-nano).
 #
 # Layered onto sdkconfig.defaults by moondeck/build/build_esp32.py.
 #
-# The RMII / PHY *pins* are NOT set here — they live in C (the per-target
+# The RMII / PHY *pins* are NOT set here: they live in C (the per-target
 # ethPins struct in src/platform/esp32/platform_config.h, read by ethInit),
 # so the pin map stays in one place. This fragment only enables the EMAC + the
 # RMII interface + flash / PSRAM / partition layout. (IP101 addr 1, MDC 31,
-# MDIO 52, reset 51, external RMII clock IN on GPIO 50 — see the struct.)
+# MDIO 52, reset 51, external RMII clock IN on GPIO 50; see the struct.)
 
-# Custom partition table — shared 16 MB layout (app0/app1 = 4 MB each, spiffs
+# Custom partition table: shared 16 MB layout (app0/app1 = 4 MB each, spiffs
 # ~7.9 MB). Chip-independent flash map; same file for classic-16mb and S3-N16R8.
 CONFIG_PARTITION_TABLE_CUSTOM=y
 CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions/ota_16mb.csv"
@@ -21,7 +21,7 @@ CONFIG_ESPTOOLPY_FLASHSIZE_16MB=y
 
 # Target the earlier P4 silicon (rev <3.0). The v6.1 IDF defaults the minimum P4
 # revision to v3.1 (ESP32P4_REV_MIN_301), which refuses to boot on the v0.x/v1.x
-# P4 chips already in the field (e.g. a v1.x P4-NANO) — the bootloader rejects the
+# P4 chips already in the field (e.g. a v1.x P4-NANO): the bootloader rejects the
 # chip at startup. IDF gates the sub-v3 revisions behind SELECTS_REV_LESS_V3
 # (rev <3.0 and >=3.0 are "huge hardware difference", so a binary targets one or
 # the other, not both); enable it, then pin the minimum to v0 to run on any
@@ -34,9 +34,9 @@ CONFIG_ESPTOOLPY_FLASHSIZE_16MB=y
 # supports revisions 0.0 through 1.99 and will refuse to boot on a v3.x chip. v3.x is what a
 # board bought today carries (Espressif calls v1.x "engineering samples" and does not recommend
 # it for new designs); this image exists for the v1.x boards already in the field and on our
-# bench, which is the only silicon we can test on. A v3.x board needs its own variant — those now
+# bench, which is the only silicon we can test on. A v3.x board needs its own variant; those now
 # exist as esp32p4rev3-eth and esp32p4rev3-eth-wifi (sdkconfig.defaults.esp32p4rev3 layers
-# the revision over this file) — not a flag flipped here.
+# the revision over this file), not a flag flipped here.
 CONFIG_ESP32P4_SELECTS_REV_LESS_V3=y
 CONFIG_ESP32P4_REV_MIN_0=y
 
@@ -45,17 +45,18 @@ CONFIG_ESP32P4_REV_MIN_0=y
 # later rounds but not relied on at boot.
 CONFIG_SPIRAM=y
 
-# Ethernet — on-chip EMAC + RMII. Pins are runtime config (ethConfig_ in C), not
+# Ethernet: on-chip EMAC + RMII. Pins are runtime config (ethConfig_ in C), not
 # sdkconfig. RMII is the EMAC's only interface and the IDF default, so no
-# CONFIG_ETH_PHY_INTERFACE_RMII (a non-existent symbol in IDF v6 — warned-on).
+# CONFIG_ETH_PHY_INTERFACE_RMII (a non-existent symbol in IDF v6, warned on).
 CONFIG_ETH_USE_ESP32_EMAC=y
-CONFIG_ETH_DMA_BUFFER_SIZE=512
-CONFIG_ETH_DMA_RX_BUFFER_NUM=10
+# A received frame is a burst of packets at wire speed (26 for 12,288 lights), which 10 buffers of 512 bytes, about 3 packets, cannot hold: 30 buffers of 1600 bytes hold a whole burst, measured P4 to P4 at 128x96 as 480 to 610 of 1040 packets/s against about 280 (scenario_NetworkReceive_two_boards). Transmit stays at 10, since 30 rebooted a sending P4 within seconds.
+CONFIG_ETH_DMA_BUFFER_SIZE=1600
+CONFIG_ETH_DMA_RX_BUFFER_NUM=30
 CONFIG_ETH_DMA_TX_BUFFER_NUM=10
 
 # MoonLive native codegen needs an executable heap (allocExec → MALLOC_CAP_EXEC). Like the
 # S3, the P4 has hardware memory protection (PMP) that IDF couples to disabling the exec
-# heap, so disable memprot to make MALLOC_CAP_EXEC available — the standard ESP32-JIT config.
+# heap, so disable memprot to make MALLOC_CAP_EXEC available, the standard ESP32-JIT config.
 # Safety for scripted code is the staged bounds/watchdog checks, not the hardware W^X wall.
 # (Same rationale as sdkconfig.defaults.esp32s3-n16r8.)
 CONFIG_ESP_SYSTEM_MEMPROT_FEATURE=n
diff --git a/esp32/sdkconfig.defaults.esp32s3-n32r16 b/esp32/sdkconfig.defaults.esp32s3-n32r16
index 141c67a61..2b7875635 100644
--- a/esp32/sdkconfig.defaults.esp32s3-n32r16
+++ b/esp32/sdkconfig.defaults.esp32s3-n32r16
@@ -18,3 +18,6 @@ CONFIG_HEAP_HAS_EXEC_HEAP=y
 
 # A MIDI desk on the board's own USB port: the MIDI service's USB source.
 CONFIG_MM_USB_MIDI_HOST=y
+
+# The Waveshare ESP32-S3-RGB-Matrix's microphones sit behind an ES7210.
+CONFIG_MM_AUDIO_CODEC=y
diff --git a/mkdocs.yml b/mkdocs.yml
index e2626f0b4..db5472226 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -169,6 +169,7 @@ nav:
       - Installing on a desktop: how-to/installing-to-desktop.md
       - Running on a Linux machine: how-to/installing-on-linux.md
       - Building, running, flashing: how-to/building.md
+      - Adding a picture or channel-data source: how-to/adding-a-stream-source.md
       - Driving LED panels with a receiving card: how-to/panel-cards.md
       - LED signal integrity: how-to/led-signal-integrity.md
       - Connecting a control surface: how-to/control-surface.md
diff --git a/moondeck/MoonDeck.md b/moondeck/MoonDeck.md
index f261e8580..73a69c298 100644
--- a/moondeck/MoonDeck.md
+++ b/moondeck/MoonDeck.md
@@ -864,6 +864,7 @@ uv run moondeck/scenario/run_live_scenario.py --host 192.168.1.210
 uv run moondeck/scenario/run_live_scenario.py --name scenario_Network_hardware_reconfigures_live   # one scenario
 uv run moondeck/scenario/run_live_scenario.py --name scenario_perf_light,scenario_Fluid_solver      # several, comma-separated
 uv run moondeck/scenario/run_live_scenario.py --host MM-Bench.local --network Home --name scenario_AccessPoint_first_setup_from_its_own_network   # first setup, this computer as the phone
+uv run moondeck/scenario/run_live_scenario.py --host 192.168.1.158 --board sender=192.168.1.156 --name scenario_NetworkReceive_two_boards   # two boards: the sender board sends
 uv run moondeck/scenario/run_live_scenario.py --update-baseline                  # save baseline
 uv run moondeck/scenario/run_live_scenario.py --compare-baseline                 # detect regressions
 ```
@@ -951,6 +952,19 @@ uv run moondeck/scenario/run_network_roundtrip.py --host 192.168.1.156 --repeats
 
 Captures and restores each device's grid and removes the temporary NetworkReceive on exit (also on failure). Exit codes match the matrix test: `0` = at least one device measured, `1` = none returned a frame, `2` = environment problem (no checked/reachable devices).
 
+### fseq_play
+
+Play an FSEQ show to the selected device over DDP, the reference sender for FSEQ on MoonLight.
+
+```bash
+uv run moondeck/run/fseq_play.py --host 192.168.1.158                      # the test sweep, written on first use
+uv run moondeck/run/fseq_play.py --host 192.168.1.158 --file show.fseq --loops 3
+uv run moondeck/run/fseq_play.py --write sweep.fseq --width 64 --height 64 --serpentine
+uv run moondeck/run/fseq_play.py --info show.fseq
+```
+
+FSEQ is xLights' and Falcon Player's file of channel data, frame by frame in wiring order. The tool reads and writes uncompressed v2 as FPP documents it. It streams each frame as DDP packets with the push flag on the last, paced as Network Send paces, at the file's step time. Set the device's Network Receive `mapped_by` to sender. The test sweep is a diagonal with a white light at the logical top-left, so a wrong mapping shows as a stepped edge and a moved corner. Compressed files and sparse ranges are refused: export from xLights with compression off.
+
 ### preview_health
 
 Browser-faithful **3D-preview stream health probe** — measures the device's `/ws` preview the way a real browser tab experiences it, so the numbers match what a person watching the [PreviewDriver](../docs/moonmodules/light/drivers.md#preview) preview sees. A plain one-shot WebSocket reader gives up the moment the device closes the socket, so it reports stalls a browser never shows (the browser reconnects) and misses the brief blips a browser does show; this probe replicates the real client in [app.js](../src/ui/app.js)'s `connectWs` — reads the binary frames, sends a `"ping"` text frame every 25 s, and **auto-reconnects on close with 500 ms→5 s backoff** — so a momentary device-side close registers as a short blip, not a frozen preview. Pure WebSocket client: **no device-side changes**, it observes the unmodified stream the device already broadcasts. Reports, per device: color frames + sustained fps, reconnects (each a visible blip), `maxgap` (the longest stretch with no color frame — the real "did it freeze?" number), and a `SMOOTH` / `CHOPPY` / `DEAD` verdict. Diagnostic, not a gate — it always exits `0`; read the verdict. Runs against **every device checked in the Live tab** (or an explicit `--host`); with no host it sweeps every online device on the active network.
diff --git a/moondeck/_moondeck_config.py b/moondeck/_moondeck_config.py
index 2a20ee61d..7e5a0d92e 100644
--- a/moondeck/_moondeck_config.py
+++ b/moondeck/_moondeck_config.py
@@ -6,6 +6,7 @@
 """
 
 import json
+import threading
 import urllib.request
 from contextlib import contextmanager
 from pathlib import Path
@@ -18,21 +19,36 @@
 LOG_NONE, LOG_ERROR, LOG_WARN, LOG_INFO, LOG_DEBUG, LOG_VERBOSE = range(6)
 
 
-def active_device_ips():
-    """ESP32 device IPs in the active network (from moondeck.json). Skips the desktop
-    entry (its ip carries a :port) and anything without an ip. [] if unresolvable."""
-    if not _STATE.exists():
+def device_ips_for_port(port):
+    """The IP of the device moondeck.json last saw on `port`, as a one-element list, so a tool watching one board changes only that board; [] when none matches. A tty and a cu name of one port match."""
+    if not port or not _STATE.exists():
         return []
+    key = Path(port).name.replace("tty.", "cu.", 1)
     try:
         state = json.loads(_STATE.read_text(encoding="utf-8"))
         active = next((n for n in (state.get("networks") or [])
                        if n.get("name") == state.get("active_network")), None)
-        return [d["ip"] for d in (active or {}).get("devices", [])
-                if d.get("ip") and ":" not in d["ip"]]
+        matches = [d for d in (active or {}).get("devices", [])
+                   if d.get("ip") and ":" not in d["ip"]
+                   and Path(d.get("last_port") or "").name.replace("tty.", "cu.", 1) == key]
+        # A port reused by a new board can leave the old one's record behind, offline: the online board is the one on the port.
+        matches.sort(key=lambda d: not d.get("online"))
+        return [d["ip"] for d in matches[:1]]
     except Exception:
         return []
 
 
+def open_serial(port, baud=115200, timeout=1):
+    """Open a serial port with DTR and RTS cleared first: on a native USB-Serial-JTAG port they drive the chip's reset and boot pins, and pyserial's default of asserting them holds the chip in reset."""
+    import serial   # here, so this module stays importable without pyserial
+    ser = serial.Serial()
+    ser.port, ser.baudrate, ser.timeout = port, baud, timeout
+    ser.dtr = False
+    ser.rts = False
+    ser.open()
+    return ser
+
+
 def _get_log_level(ip):
     """Read one device's current System.logLevel index from /api/state, or None if unreachable
     or unparseable. Used to snapshot a device before a temporary change so it can be restored."""
@@ -81,16 +97,37 @@ def set_log_level(ips, index):
 
 
 @contextmanager
-def raised_log_level(ips, index=LOG_INFO):
-    """Temporarily raise each device to `index` (default Info, so the serial tick line prints) and
-    restore each device's ORIGINAL level on exit — not a hardcoded Warn, so a device the user had set
-    to Debug/Error keeps its choice. A device whose level can't be read is still raised, and restored
-    to Warn (the resting default) as the honest fallback. Best-effort throughout; never raises."""
-    saved = {ip: _get_log_level(ip) for ip in ips}
-    set_log_level(ips, index)
+def raised_log_level(ips, index=LOG_INFO, background=False):
+    """Temporarily raise each device to `index` (default Info, so the serial tick line prints) and restore each device's ORIGINAL level on exit, so a device set to Debug or Error keeps its choice.
+
+    A device whose level can't be read is still raised, and restored to Warn, the resting default. `background` raises from a thread, so a caller reading a port starts at once rather than after the HTTP calls, 3 s each for a device that is off. Best-effort throughout; never raises.
+    """
+    saved = {}
+    stop = threading.Event()
+
+    def raise_all():
+        # In the background the board may be rebooting, since opening its native USB port resets it, so the level is retried until it answers or the caller is done.
+        for ip in ips:
+            prev = _get_log_level(ip)
+            for _ in range(15 if background else 0):
+                if prev is not None or stop.wait(2):
+                    break
+                prev = _get_log_level(ip)
+            if stop.is_set():
+                return
+            saved[ip] = prev
+            set_log_level([ip], index)
+
+    raiser = threading.Thread(target=raise_all, daemon=True)
+    if background:
+        raiser.start()
+    else:
+        raise_all()
     try:
         yield
     finally:
-        for ip in ips:
-            prev = saved.get(ip)
+        if background:
+            stop.set()   # a board that never answered must not hold the port for the retries left
+            raiser.join()
+        for ip, prev in saved.items():   # only what was raised goes back
             set_log_level([ip], prev if prev is not None else LOG_WARN)
diff --git a/moondeck/build/improv_smoke_test.py b/moondeck/build/improv_smoke_test.py
index fb793d30c..1dda6ff44 100755
--- a/moondeck/build/improv_smoke_test.py
+++ b/moondeck/build/improv_smoke_test.py
@@ -72,17 +72,12 @@ def _run(script: Path, args: list[str], timeout: float) -> tuple[int, str, str]:
         return 124, "", f"timeout after {timeout}s"
 
 
-def _device_url_from_provision_output(out: str) -> str | None:
-    """Extract `==> provisioned: http://...` URL from improv_provision.py stdout.
-
-    The line shape is set by improv_provision.py at the success exit;
-    pinning that contract here would make sense as a test, but for now we
-    just string-match. If the format changes, the reachability check
-    silently skips with a clearer message than a regex fail."""
+def _device_url(out: str) -> str | None:
+    """The device URL in a step's output: `==> provisioned: http://...` from improv_provision.py, or `url: http://...` from the probe's current state."""
     for line in out.splitlines():
         line = line.strip()
-        if line.startswith("==> provisioned:"):
-            return line.split(":", 1)[1].strip()
+        if line.startswith(("==> provisioned:", "url:")):
+            return line.split(":", 1)[1].strip() or None
     return None
 
 
@@ -163,6 +158,7 @@ def finish(exit_code: int) -> int:
                         ["--port", args.port, "--timeout", str(args.probe_timeout)],
                         timeout=args.probe_timeout + 5)
     sys.stdout.write(_indent(out))
+    probe_url = _device_url(out)   # a provisioned board reports it, so the network step runs when provisioning keeps its credentials
     if err.strip():
         sys.stderr.write(_indent(err))
     if rc != 0:
@@ -187,7 +183,7 @@ def finish(exit_code: int) -> int:
         return finish(1)
     summary["provision"] = True
 
-    url = _device_url_from_provision_output(out)
+    url = _device_url(out) or probe_url
     summary["device_url"] = url
 
     # ----- Step 3: reachable (optional) -----------------------------------
@@ -195,11 +191,8 @@ def finish(exit_code: int) -> int:
         print("==> [3/3] network   skipped (--no-network)")
         return finish(0)
     if not url:
-        # Provisioning succeeded but we couldn't parse the URL from the
-        # output — older firmware variants may not report the URL line.
-        # Don't fail (device IS provisioned), but skip the reachability
-        # check with a clear message.
-        print("==> [3/3] network   skipped (no device URL in provision output)")
+        # Neither step reported a URL; the device is provisioned, so the reachability check is skipped with the reason.
+        print("==> [3/3] network   skipped (no device URL in the probe or provision output)")
         summary["failure"] = "provision succeeded but device URL not parseable from output"
         return finish(0)
 
diff --git a/moondeck/check/collect_kpi.py b/moondeck/check/collect_kpi.py
index ab34d9231..746974147 100644
--- a/moondeck/check/collect_kpi.py
+++ b/moondeck/check/collect_kpi.py
@@ -23,7 +23,7 @@
 
 # Shared moondeck.json + logLevel-toggle helpers (one level up, reachable from check/ and run/).
 sys.path.insert(0, str(ROOT / "moondeck"))
-from _moondeck_config import active_device_ips, raised_log_level, LOG_INFO  # noqa: E402
+from _moondeck_config import device_ips_for_port, open_serial, raised_log_level, LOG_INFO  # noqa: E402
 from _host import desktop_target  # noqa: E402
 
 # Same directory; imported by path so this needs no PYTHONPATH tweak (the pattern the
@@ -384,14 +384,14 @@ def _live_capture(log, seconds=15):
         import serial
     except ImportError:
         return False
-    # Raise the device(s) to Info so the KPI tick line prints during the capture (they rest at Warn,
-    # which silences it), and restore each device's ORIGINAL level on exit: covering the serial-open
-    # failure and the normal-cleanup paths alike. A freshly booted device already logs at Info for its
-    # first 60 s, so this is a no-op there but harmless.
+    # The board on this port raised to Info so its tick line prints (it rests at Warn), and restored to its own level on exit, the serial-open failure included.
     print(f"  ESP32 KPI: capturing {seconds}s from {port}...")
-    with raised_log_level(active_device_ips(), LOG_INFO):
+    ips = device_ips_for_port(port)
+    if not ips:
+        print(f"  no device in the registry was last flashed on {port}: its log level is not raised, so the tick lines show only at Info", flush=True)
+    with raised_log_level(ips, LOG_INFO):
         try:
-            ser = serial.Serial(port, 115200, timeout=1)
+            ser = open_serial(port)
         except Exception as e:
             print(f"  ESP32 KPI: cannot open {port}: {e}")
             return False
diff --git a/moondeck/docs/screenshot_modules.py b/moondeck/docs/screenshot_modules.py
index e495315af..9b62d7480 100644
--- a/moondeck/docs/screenshot_modules.py
+++ b/moondeck/docs/screenshot_modules.py
@@ -95,6 +95,18 @@ def asset_dir_for(type_name: str) -> Path:
 #                "Layouts" = child of Layouts
 #   capture_gif: True = also record a preview GIF
 # ---------------------------------------------------------------------------
+# The longest module name the device accepts: MoonModule's kNameLen less its terminator.
+MAX_NAME = 15
+
+
+def capture_name(type_name: str) -> str:
+    """The name a capture gives a module: its type without the role suffix, as the UI names one, cut to what the device accepts."""
+    for suffix in ("Effect", "Modifier", "Layout", "Driver", "Service", "Module"):
+        if type_name.endswith(suffix) and len(type_name) > len(suffix):
+            type_name = type_name[: -len(suffix)]
+            break
+    return type_name[:MAX_NAME]
+
 MODULES = [
     # Layouts
     ("GridLayout",          "Layouts",  {}, True),
@@ -178,6 +190,7 @@ def asset_dir_for(type_name: str) -> Path:
     # (not in state); capture these against a board when needed.
     "ImprovProvisioningModule",
     "AudioService",
+    "PictureService",
     "AnalogService",
     "I2cBusModule",
     "InfraredService",
@@ -210,6 +223,7 @@ def asset_dir_for(type_name: str) -> Path:
     # the desktop tree — so they're captured against an ESP32, where these entries route the
     # shot to the right nav root.
     "AudioService": "Services",
+    "PictureService": "Services",
     "AnalogService": "Services",
     "InfraredService": "Services",
     "ButtonService": "Services",
@@ -324,9 +338,9 @@ def _collect_names(modules: list) -> set[str]:
     return names
 
 
-def add_module(host: str, id_: str, type_: str, parent_id: str | None,
+def add_module(host: str, id_: str | None, type_: str, parent_id: str | None,
                props: dict) -> str | None:
-    """Add a module and return the actual name the server assigned.
+    """Add a module and return the actual name the server assigned; with no `id_` the device names it, as the UI's add does.
 
     Snapshots state before and after the POST; the new module is whichever
     name appears after that wasn't there before and has the right type.
@@ -335,19 +349,26 @@ def add_module(host: str, id_: str, type_: str, parent_id: str | None,
     before = _get(f"http://{host}/api/state", timeout=5)
     names_before = _collect_names(before.json().get("modules", [])) if before.ok else set()
 
-    body: dict = {"id": id_, "type": type_}
+    body: dict = {"type": type_}
+    if id_:
+        body["id"] = id_
     if parent_id:
         body["parent_id"] = parent_id
     # `props` is deliberately NOT sent: the create endpoint ignores it (no handler reads it), so a
     # caller that needs a control set gets it through /api/control after the module exists.
     r = _post(f"http://{host}/api/modules", json=body, timeout=5)
+    if r.status_code == 409 and id_:
+        return id_   # a retried create whose first attempt landed: the module is there under this name
     if not r.ok:
         return None
+    named = r.json().get("name") if r.headers.get("content-type", "").startswith("application/json") else None
+    if named:
+        return named
 
     time.sleep(0.15)
     sr = _get(f"http://{host}/api/state", timeout=5)
     if not sr.ok:
-        return id_[:16]
+        return id_[:MAX_NAME] if id_ else None
 
     def find_new(modules: list) -> str | None:
         for m in modules:
@@ -359,7 +380,7 @@ def find_new(modules: list) -> str | None:
                 return found
         return None
 
-    return find_new(sr.json().get("modules", [])) or id_[:16]
+    return find_new(sr.json().get("modules", [])) or (id_[:MAX_NAME] if id_ else None)
 
 
 def delete_module(host: str, id_: str) -> bool:
@@ -486,7 +507,7 @@ def find(ms):
 def restore_default_layout(host: str, snap: dict) -> None:
     """Put back what displace_default_layout took, controls and all."""
     try:
-        name = add_module(host, (snap.get("name") or snap["type"])[:16], snap["type"],
+        name = add_module(host, (snap.get("name") or snap["type"])[:MAX_NAME], snap["type"],
                           "Layouts", {})
         if not name:
             print(f"  restore-layout: re-adding {snap['type']} failed ", end="", flush=True)
@@ -895,8 +916,8 @@ def main() -> int:
         if args.no_modifier or args.grid:
             prepare_pipeline(args.host, args.no_modifier, args.grid or None)
 
-        # Known name prefixes for orphan sweep (first 16 chars of each type name).
-        known_prefixes = {t[:16] for t, _, _, _ in MODULES}
+        # The names this tool gives its modules, so the orphan sweep removes only what a previous run left.
+        known_names = {capture_name(t) for t, _, _, _ in MODULES}
 
         # Sweep orphans from a previous aborted run. Per-delete try/except
         # so one failed cleanup doesn't abort the whole recursion; outer
@@ -908,7 +929,7 @@ def main() -> int:
                 def _sweep_orphans(modules: list) -> None:
                     for m in modules:
                         n = m.get("name", "")
-                        if any(n.startswith(p) for p in known_prefixes):
+                        if n in known_names:
                             try:
                                 # delete_module returns False on HTTP failure
                                 # (4xx/5xx) — log that the same way as a raised
@@ -1068,7 +1089,7 @@ def _sweep_orphans(modules: list) -> None:
 
                 parent_id = parents.get(parent_type)
                 nav_root = nav_roots.get(parent_type, "")
-                req_id = type_name[:16]
+                req_id = capture_name(type_name)
                 print(f"  {type_name} …", end=" ", flush=True)
 
                 # The bed effect, removed again below, so the pipeline holds exactly one effect
@@ -1077,7 +1098,7 @@ def _sweep_orphans(modules: list) -> None:
                 # on its own: both photograph as a dark panel without a lit effect under them.
                 bed_name = None
                 if need_gif and (type_name.endswith("Modifier") or type_name.endswith("Layout")):
-                    bed_name = add_module(args.host, BED_EFFECT[:16], BED_EFFECT,
+                    bed_name = add_module(args.host, BED_EFFECT[:MAX_NAME], BED_EFFECT,
                                           parents.get("Layer"), {})
                     if bed_name:
                         added_ids.append(bed_name)
@@ -1178,7 +1199,7 @@ def _sweep_orphans(modules: list) -> None:
                         def _sweep(modules: list) -> None:
                             for m in modules:
                                 n = m.get("name", "")
-                                if any(n.startswith(p) for p in known_prefixes):
+                                if n in known_names:
                                     try:
                                         # Same False-return check as the
                                         # opening sweep — HTTP failure is
diff --git a/moondeck/moondeck_config.json b/moondeck/moondeck_config.json
index 0518147b0..0984ee29d 100644
--- a/moondeck/moondeck_config.json
+++ b/moondeck/moondeck_config.json
@@ -326,6 +326,16 @@
       "help": "run_network_roundtrip",
       "script": "scenario/run_network_roundtrip.py"
     },
+    {
+      "id": "fseq_play",
+      "tab": "live",
+      "group": "scenario",
+      "label": "FSEQ Play",
+      "speed": "medium",
+      "help": "fseq_play",
+      "script": "run/fseq_play.py",
+      "needs_device": true
+    },
     {
       "id": "preview_health",
       "tab": "live",
diff --git a/moondeck/run/fseq_play.py b/moondeck/run/fseq_play.py
new file mode 100644
index 000000000..b656e8d64
--- /dev/null
+++ b/moondeck/run/fseq_play.py
@@ -0,0 +1,145 @@
+"""Play an FSEQ show to a device over DDP, or write a test show: the reference sender for FSEQ on MoonLight.
+
+FSEQ is xLights' and Falcon Player's file of channel data, frame by frame in wiring order with a step time. This reads and writes uncompressed v2 as FPP's FSEQ_Sequence_File_Format.txt lays it out, little-endian, and plays a file the way a mapping sender streams: each frame as DDP packets, the push flag on the last, paced, at the file's step time. The device's Network Receive takes it with `mapped_by` set to sender.
+
+    uv run moondeck/run/fseq_play.py --host 192.168.1.158                       # play the test sweep, written on first use
+    uv run moondeck/run/fseq_play.py --host 192.168.1.158 --file show.fseq --loops 3
+    uv run moondeck/run/fseq_play.py --write sweep.fseq --width 64 --height 64 --serpentine
+    uv run moondeck/run/fseq_play.py --info show.fseq
+"""
+from __future__ import annotations
+
+import argparse
+import socket
+import struct
+import sys
+import time
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[2]
+DDP_PORT = 4048
+DDP_HEADER = 10
+DDP_PAYLOAD = 1440       # whole RGB and RGBW lights, as Network Send chunks
+HEADER = struct.Struct("<4sHBBHIIBBBBBBQ")   # the 32-byte fixed header
+
+
+def wiring_index(x: int, y: int, width: int, serpentine: bool) -> int:
+    """A light's index in wiring order: rows from the top, every other row reversed when serpentine."""
+    return y * width + ((width - 1 - x) if serpentine and y % 2 else x)
+
+
+def sweep_frame(width: int, height: int, frame: int, serpentine: bool) -> bytes:
+    """A diagonal sweep in wiring order with a white light at logical (0, 0), so a wrong mapping shows."""
+    out = bytearray(width * height * 3)
+    span = width + height
+    for y in range(height):
+        for x in range(width):
+            v = (x + y + frame) % span * 255 // span
+            i = wiring_index(x, y, width, serpentine) * 3
+            out[i:i + 3] = bytes((v, 0, 255 - v))
+    corner = wiring_index(0, 0, width, serpentine) * 3
+    out[corner:corner + 3] = b"\xff\xff\xff"
+    return bytes(out)
+
+
+def write_fseq(path: Path, frames: list[bytes], step_ms: int) -> None:
+    """An uncompressed v2 file with one `sp` variable header naming its producer."""
+    producer = b"MoonLight fseq_play\0"
+    variable = struct.pack("<H2s", 4 + len(producer), b"sp") + producer
+    header_len = HEADER.size + len(variable)
+    data_offset = (header_len + 3) & ~3
+    channels = len(frames[0]) if frames else 0
+    head = HEADER.pack(b"PSEQ", data_offset, 0, 2, header_len, channels, len(frames), step_ms,
+                       0, 0, 0, 0, 0, int(time.time() * 1e6))
+    path.write_bytes(head + variable + bytes(data_offset - header_len) + b"".join(frames))
+
+
+def read_header(path: Path) -> dict:
+    """The fixed header's fields, or SystemExit for a file that is not FSEQ."""
+    with open(path, "rb") as f:
+        raw = f.read(HEADER.size)
+    if len(raw) < HEADER.size or raw[:4] != b"PSEQ":
+        raise SystemExit(f"{path}: not an FSEQ file")
+    (_, data_offset, minor, major, header_len, channels, frames, step,
+     _, compression, blocks, sparse, _, uid) = HEADER.unpack(raw)
+    return {"version": f"{major}.{minor}", "data_offset": data_offset, "header_len": header_len,
+            "channels": channels, "frames": frames, "step_ms": step,
+            "compression": compression & 0x0F, "blocks": blocks | (compression >> 4) << 8,
+            "sparse_ranges": sparse, "uid": uid}
+
+
+def ddp_packets(frame: bytes) -> list[bytes]:
+    """One frame as DDP data packets, byte-addressed, the push flag on the last."""
+    packets = []
+    for seq, offset in enumerate(range(0, len(frame), DDP_PAYLOAD)):
+        chunk = frame[offset:offset + DDP_PAYLOAD]
+        last = offset + DDP_PAYLOAD >= len(frame)
+        header = bytes((0x40 | (0x01 if last else 0), seq & 0x0F, 0x0B, 0x01)) \
+            + offset.to_bytes(4, "big") + len(chunk).to_bytes(2, "big")
+        packets.append(header + chunk)
+    return packets
+
+
+def play(path: Path, host: str, loops: int, gap_us: int) -> None:
+    """Stream the file at its step time, pacing a frame's packets `gap_us` apart."""
+    info = read_header(path)
+    if info["compression"]:
+        raise SystemExit("compressed FSEQ: export with compression off")
+    if info["sparse_ranges"]:
+        raise SystemExit("sparse ranges are not played by this tool")
+    size, step = info["channels"], info["step_ms"] / 1000
+    sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
+    print(f"playing {path.name} to {host}: {info['frames']} frames, {size} channels, {info['step_ms']} ms", flush=True)
+    with open(path, "rb") as f:
+        for loop in range(loops):
+            f.seek(info["data_offset"])
+            start = time.time()
+            for n in range(info["frames"]):
+                packets = ddp_packets(f.read(size))
+                for i, packet in enumerate(packets):
+                    sock.sendto(packet, (host, DDP_PORT))
+                    if gap_us and i + 1 < len(packets):
+                        time.sleep(gap_us / 1e6)
+                time.sleep(max(0.0, start + (n + 1) * step - time.time()))
+            print(f"loop {loop + 1}: {info['frames']} frames in {time.time() - start:.1f} s", flush=True)
+
+
+def main() -> None:
+    p = argparse.ArgumentParser(description="Play an FSEQ show to a device over DDP, or write a test show.")
+    p.add_argument("--host", help="the device to play to")
+    p.add_argument("--file", type=Path, help="the show; the test sweep when omitted")
+    p.add_argument("--loops", type=int, default=1)
+    p.add_argument("--gap-us", type=int, default=500, help="microseconds between a frame's packets, as Network Send paces")
+    p.add_argument("--write", type=Path, help="write the test sweep to this file and stop")
+    p.add_argument("--info", type=Path, help="print a file's header and stop")
+    p.add_argument("--width", type=int, default=64)
+    p.add_argument("--height", type=int, default=64)
+    p.add_argument("--serpentine", action="store_true", help="every other row reversed, as most panels are wired")
+    p.add_argument("--frames", type=int, default=400)
+    p.add_argument("--step", type=int, default=25, choices=range(1, 256), metavar="1-255",
+                   help="milliseconds per frame, one byte in the header")
+    a = p.parse_args()
+
+    if a.info:
+        for key, value in read_header(a.info).items():
+            print(f"{key}: {value}")
+        return
+    def sweep(path: Path) -> None:
+        write_fseq(path, [sweep_frame(a.width, a.height, f, a.serpentine) for f in range(a.frames)], a.step)
+        print(f"wrote {path}: {a.width}x{a.height} {'serpentine' if a.serpentine else 'rows'}, {a.frames} frames")
+    if a.write:
+        sweep(a.write)
+        return
+    if not a.host:
+        p.error("--host names the device to play to")
+    path = a.file
+    if path is None:
+        path = ROOT / "build" / "fseq" / f"sweep-{a.width}x{a.height}{'-serpentine' if a.serpentine else ''}.fseq"
+        if not path.exists():
+            path.parent.mkdir(parents=True, exist_ok=True)
+            sweep(path)
+    play(path, a.host.split(":")[0], a.loops, a.gap_us)
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/moondeck/run/monitor_esp32.py b/moondeck/run/monitor_esp32.py
index 18e5c8415..5009bf3f2 100644
--- a/moondeck/run/monitor_esp32.py
+++ b/moondeck/run/monitor_esp32.py
@@ -16,6 +16,7 @@
 import os
 import re
 import serial
+import signal
 import subprocess
 import sys
 import time
@@ -60,7 +61,7 @@ def decode(tool: str, elf: str, addrs: list[str]) -> list[str]:
 
 # Shared moondeck.json + logLevel-toggle helpers (one level up, reachable from check/ and run/).
 sys.path.insert(0, str(ROOT / "moondeck"))
-from _moondeck_config import active_device_ips, raised_log_level, LOG_INFO  # noqa: E402
+from _moondeck_config import device_ips_for_port, open_serial, raised_log_level, LOG_INFO  # noqa: E402
 sys.path.insert(0, str(ROOT / "moondeck" / "build"))
 from build_esp32 import APP_ELF  # noqa: E402
 
@@ -107,12 +108,14 @@ def main():
     # blocking before a single byte is read, and the boot output you were monitoring FOR is already
     # gone. The log level is a nicety; the serial stream is the point.
     try:
-        ser = serial.Serial(args.port, args.baud, timeout=1)
+        ser = open_serial(args.port, args.baud)
     except serial.SerialException as e:
         print(f"Cannot open {args.port}: {e}")
         sys.exit(1)
 
-    with raised_log_level(active_device_ips(), LOG_INFO):
+    # Only the board on this port, and restored however the monitor ends: MoonDeck's Stop sends SIGTERM, whose default skips the restore.
+    signal.signal(signal.SIGTERM, lambda *_: sys.exit(143))
+    with raised_log_level(device_ips_for_port(args.port), LOG_INFO, background=True):
         with open(LOG_FILE, "w") as log:
             try:
                 while True:
@@ -134,7 +137,7 @@ def main():
                         while ser is None:
                             time.sleep(0.3)
                             with suppress(Exception):
-                                ser = serial.Serial(args.port, args.baud, timeout=1)
+                                ser = open_serial(args.port, args.baud)
                         note = "  -- reconnected --"
                         print(note)
                         log.write(note + "\n")
diff --git a/moondeck/scenario/run_live_scenario.py b/moondeck/scenario/run_live_scenario.py
index 0eddbe26d..a5e871a58 100644
--- a/moondeck/scenario/run_live_scenario.py
+++ b/moondeck/scenario/run_live_scenario.py
@@ -506,6 +506,39 @@ def _reboot_and_wait(client, target: str, timeout_s: float = 60.0) -> str:
     return f"did not answer within {timeout_s:.0f}s"
 
 
+def _read_values(client, metrics: dict, names: list, boards: dict) -> dict:
+    """The values a measure step names: "fps" and "Module.tick" from /api/system, "Module.control" from /api/state; "board:" in front reads another board."""
+    ticks = {m.get("name"): m.get("us") for m in metrics.get("modules", []) or []}
+    out = {}
+    state = None
+    for name in names:
+        board, _, rest = name.rpartition(":")
+        if board:
+            try:
+                out[name] = _read_values(boards[board], boards[board].get("/api/system"), [rest], {})[rest]
+            except Exception as e:
+                out[name] = f"? ({type(e).__name__})"
+            continue
+        if name == "fps":
+            out[name] = metrics.get("fps", "-")
+            continue
+        mod, _, key = name.partition(".")
+        if key == "tick":
+            out[name] = ticks.get(mod, "-")
+            continue
+        if state is None:
+            state = client.get("/api/state")
+        out[name] = "-"
+        stack = list(state.get("modules", []))
+        while stack:
+            m = stack.pop()
+            if m.get("name") == mod:
+                out[name] = _control_value(m, key)
+                break
+            stack.extend(m.get("children", []) or [])
+    return out
+
+
 def _sum_dynamic_bytes(state: dict) -> int:
     """Sum dynamicBytes across the live module tree. Returned by /api/state per
     module; the sum is the model's prediction for how much heap the tree owns.
@@ -588,7 +621,7 @@ def _fixture_canvas(fixture: list) -> list:
 def run_scenario(client: Client, scenario_path: Path, settle_s: float = 1.5,
                  update_contract: bool = False,
                  update_reason: str | None = None, named: bool = True,
-                 network: str | None = None) -> dict:
+                 network: str | None = None, boards: dict | None = None) -> dict:
     """Run a scenario against a live device and return results.
 
     Mode handling (see docs/reference/testing.md § Scenario modes):
@@ -629,6 +662,15 @@ def run_scenario(client: Client, scenario_path: Path, settle_s: float = 1.5,
         print("\n  SKIP (on_request: runs only when named, since it takes the host off its network)")
         results["skipped"] = True
         return results
+    # A scenario over several boards names them in `boards`; the command line maps each name to a device with --board.
+    boards = boards or {}
+    wanted = scenario.get("boards", [])
+    absent_boards = [b for b in wanted if b not in boards]
+    if absent_boards:
+        print(f"\n  SKIP (boards: runs only with {', '.join(absent_boards)} named by --board NAME=HOST)")
+        results["skipped"] = True
+        return results
+    boards = {b: boards[b] for b in wanted}
     if mode == "construct":
         print("\n  SKIP (mode=construct: runs in-process only; the live device's "
               "main.cpp owns the top-level shape)")
@@ -660,6 +702,8 @@ def run_scenario(client: Client, scenario_path: Path, settle_s: float = 1.5,
                 reachable.update(_typed_names(step.get("document")))
         missing = []
         for step in scenario.get("steps", []):
+            if step.get("device"):
+                continue   # its ids live on another board, which the pre-flight does not read
             sid = step.get("id")
             opn = step.get("op")
             if opn == "apply_state":
@@ -716,6 +760,25 @@ def run_scenario(client: Client, scenario_path: Path, settle_s: float = 1.5,
     # Snapshot the containers a scenario may clear or rebuild, as documents, so the board ends the run as found.
     prior_controls: dict = {}   # (module, control) -> the value it held before this scenario wrote it
     snapshot_docs = _snapshot_documents(client)
+    # Every other board is restored the same way, from its own snapshot, controls and created modules.
+    home = (client, prior_controls, created_modules)
+    board_state = {b: (c, {}, []) for b, c in boards.items()}
+    board_snapshots = {b: _snapshot_documents(c) for b, c in boards.items()}
+    obs_target = target
+    if boards:
+        # A step names a board by its address as `{host}` or `{<name>}`, as a sender's `hosts` does.
+        ctx["host"] = urllib.parse.urlsplit(home_base).hostname or ""
+        for b, c in boards.items():
+            ctx[b] = urllib.parse.urlsplit(c.base).hostname or ""
+        # The measurements belong to the combination, so wifi-to-wifi and ethernet-to-wifi keep apart.
+        kinds = [f"host={target}"]
+        for b, c in boards.items():
+            try:
+                kinds.append(f"{b}={_detect_target(c.get('/api/state'), c.local)}")
+            except Exception:
+                kinds.append(f"{b}=unknown")
+        obs_target = " ".join(kinds)
+        print(f"  Boards: {obs_target}")
 
     # The fixture is the canvas the steps expect, on a bench that may carry another effect or grid.
     try:
@@ -785,6 +848,14 @@ def run_scenario(client: Client, scenario_path: Path, settle_s: float = 1.5,
         fstep = _fill(step, ctx) if ctx else step   # a filled copy, so credentials never reach the file the run writes back
         step_result = {"name": step_name, "op": op}
 
+        # A step naming a board runs there, with that board's restore bookkeeping.
+        dev = step.get("device")
+        if dev and (dev not in board_state or op not in ("apply_state", "set_control", "measure")):
+            print(f"  FAIL  {step_name}: device {dev!r} is not in `boards`, or {op} does not run on another board")
+            results["passed"] = False
+            break
+        client, prior_controls, created_modules = board_state[dev] if dev else home
+
         # An optional measure/control on a module whose optional add was skipped is a
         # no-op: the module isn't there to measure. Skip before any REST call.
         if step.get("optional") and step.get("id") in skipped_ids and op in ("measure", "set_control"):
@@ -1036,8 +1107,8 @@ def _as_written(v):
                     results["passed"] = False
 
             elif op == "set_control":
-                data = {"module": step["id"], "control": step["key"],
-                        "value": step["value"]}
+                data = {"module": fstep["id"], "control": fstep["key"],
+                        "value": fstep["value"]}
                 _remember_control(prior_controls, client, step["id"], step["key"])
                 try:
                     resp = client.post("/api/control", data)
@@ -1257,6 +1328,10 @@ def redirect_request(self, *args, **kwargs):
                 results["steps"].append(step_result)
                 break  # stop step loop; cleanup runs below
             step_result["metrics"] = metrics
+            # `read` names extra values to report: "Module.control" from the state, or "Module.tick" for a module's tick time.
+            if step.get("read"):
+                step_result["read"] = _read_values(client, metrics, step["read"], {b: s[0] for b, s in board_state.items()})
+                print("  READ     " + "  ".join(f"{k}={v}" for k, v in step_result["read"].items()))
             tick_us = metrics.get("tickTimeUs", 0)
             fps = 1000000 // tick_us if tick_us > 0 else metrics.get("fps", 0)
             heap = metrics.get("freeHeap", 0)
@@ -1270,7 +1345,7 @@ def redirect_request(self, *args, **kwargs):
             #   "set_by": "YYYY-MM-DD", "reason": "..." } } }
             # Contracts are hand-set promises: see docs/reference/testing.md § Performance
             # contracts. `--update-contract --reason "..."` rewrites them.
-            contract_block = step.get("contract", {}).get(target) if step.get("contract") else None
+            contract_block = step.get("contract", {}).get(obs_target) if step.get("contract") else None
             if contract_block:
                 # Defaults reflect run-to-run variance, not "I don't care":
                 #   pc-*      : multi-process OS jitter, 20% pct + 200us absolute
@@ -1357,14 +1432,14 @@ def redirect_request(self, *args, **kwargs):
                 "free_heap": int(heap),
                 "max_alloc_block": int(max_block),
             }
-            existing_obs = step.get("observed", {}).get(target)
+            existing_obs = step.get("observed", {}).get(obs_target)
             if update_contract:
                 new_obs = _observed.reset(sample, _today_iso())
                 obs_changed = True
             else:
                 new_obs, obs_changed = _observed.widen(existing_obs, sample, _today_iso())
             if obs_changed:
-                step.setdefault("observed", {})[target] = new_obs
+                step.setdefault("observed", {})[obs_target] = new_obs
                 wrote_observations[0] = True
 
             # --update-contract: rewrite the contract in the scenario JSON for the
@@ -1382,10 +1457,10 @@ def redirect_request(self, *args, **kwargs):
                 # Key by step INDEX, not the step dict: a dict is unhashable, so
                 # `(step, target)` as a key raised TypeError (this whole path is
                 # only reached with --update-contract, which the gates don't pass).
-                existing = step.get("contract", {}).get(target, {})
-                if (step_index, target) not in pending_contract_originals:
+                existing = step.get("contract", {}).get(obs_target, {})
+                if (step_index, obs_target) not in pending_contract_originals:
                     # Deep enough copy: existing is a flat dict of scalars.
-                    pending_contract_originals[(step_index, target)] = (
+                    pending_contract_originals[(step_index, obs_target)] = (
                         dict(existing) if existing else None
                     )
                 new_block = {
@@ -1403,7 +1478,7 @@ def redirect_request(self, *args, **kwargs):
                 # path: keep both files in sync if you change one.
                 if "max_alloc_block" in existing:
                     new_block["max_alloc_block"] = int(max_block)
-                step.setdefault("contract", {})[target] = new_block
+                step.setdefault("contract", {})[obs_target] = new_block
 
             # Check bounds
             bounds = step.get("bounds", {})
@@ -1450,8 +1525,26 @@ def redirect_request(self, *args, **kwargs):
     # The host back on its own network before anything else talks to the device, which is then there.
     if host.home:
         host.restore()
+    client, prior_controls, created_modules = home
     client.base = home_base
 
+    # The other boards first, so a sender stops before this device is put back.
+    for b, (bc, b_prior, b_created) in board_state.items():
+        for module_id in reversed(b_created):
+            try:
+                bc.delete(_mod_path(module_id))
+                print(f"  -     {module_id} ({b} cleanup)")
+            except Exception:
+                pass
+        for doc in board_snapshots[b]:
+            try:
+                bc.patch("/api/state", doc)
+            except Exception as e:
+                print(f"  WARN: couldn't restore {b}'s {next(iter(doc), '?')}: {e}")
+        put_back = _restore_controls(bc, b_prior)
+        if put_back:
+            print(f"  restored {put_back} control(s) on {b}")
+
     # Cleanup: delete modules that were created by this scenario
     for module_id in reversed(created_modules):
         try:
@@ -1498,24 +1591,34 @@ def redirect_request(self, *args, **kwargs):
         # JSON write below (for observed) doesn't leak them to disk.
         for step_index, step in enumerate(scenario.get("steps", [])):
             contract = step.get("contract")
-            if contract and target in contract:
-                if (step_index, target) in pending_contract_originals:
-                    orig = pending_contract_originals[(step_index, target)]
+            if contract and obs_target in contract:
+                if (step_index, obs_target) in pending_contract_originals:
+                    orig = pending_contract_originals[(step_index, obs_target)]
                     if orig is None:
-                        del contract[target]
+                        del contract[obs_target]
                     else:
-                        contract[target] = orig
-        print(f"  contract[{target}] NOT written (run failed; observed still saved)")
+                        contract[obs_target] = orig
+        print(f"  contract[{obs_target}] NOT written (run failed; observed still saved)")
 
     if wrote_observations[0] or contract_safe_to_write:
         _observed.save_scenario(scenario_path, scenario)
         what = []
         if wrote_observations[0]:
-            what.append(f"observed[{target}]")
+            what.append(f"observed[{obs_target}]")
         if contract_safe_to_write:
-            what.append(f"contract[{target}]")
+            what.append(f"contract[{obs_target}]")
         print(f"  WROTE  {scenario_path.name} ({' + '.join(what)})")
 
+    # The values each measure step read, one row per step, for comparing configurations at a glance.
+    rows = [s for s in results["steps"] if s.get("read")]
+    if rows:
+        keys = list(dict.fromkeys(k for s in rows for k in s["read"]))
+        width = max(len(s["name"]) for s in rows)
+        print("\n  " + "step".ljust(width) + "  tick_us  " + "  ".join(keys))
+        for s in rows:
+            tick = (s.get("metrics") or {}).get("tickTimeUs", "?")
+            print("  " + s["name"].ljust(width) + f"  {str(tick):>7}  " + "  ".join(str(s["read"].get(k, "-")).rjust(len(k)) for k in keys))
+
     # Summary
     print("\n---")
     if results["passed"]:
@@ -1586,6 +1689,8 @@ def main():
                         help="Filter to scenarios whose top-level module / also matches.")
     parser.add_argument("--network", default=None,
                         help="Registry network (moondeck.json) the host and device share, for a scenario that moves the host's WiFi.")
+    parser.add_argument("--board", action="append", default=[], metavar="NAME=HOST",
+                        help="Another board a scenario names in `boards`, such as sender=192.168.1.156; repeat for each.")
     parser.add_argument("--settle", type=float, default=3.0,
                         help="Settle time in seconds between step and measurement")
     parser.add_argument("--update-baseline", action="store_true",
@@ -1609,6 +1714,12 @@ def main():
                      "(e.g. --reason 'tightened after Layer optimization')")
 
     client = Client(args.host)
+    boards = {}
+    for spec in args.board:
+        bname, sep, bhost = spec.partition("=")
+        if not sep or not bname or not bhost:
+            parser.error(f"--board takes NAME=HOST, got {spec!r}")
+        boards[bname] = Client(bhost)
 
     # Verify connection
     try:
@@ -1653,7 +1764,8 @@ def main():
             continue
         result = run_scenario(client, path, args.settle,
                               update_contract=args.update_contract,
-                              update_reason=args.reason, named=bool(args.name), network=args.network)
+                              update_reason=args.reason, named=bool(args.name), network=args.network,
+                              boards=boards)
         all_results[result["name"]] = result
         if not result["passed"]:
             all_passed = False
diff --git a/mooninstaller/README.md b/mooninstaller/README.md
index 17facf561..c58152b1f 100644
--- a/mooninstaller/README.md
+++ b/mooninstaller/README.md
@@ -16,17 +16,20 @@ A browser blocks an HTTPS page from POSTing to a plain-`http://` device (mixed c
 - [`install-orchestrator.js`](install-orchestrator.js): owns the SerialPort across flash → reboot → Improv provision → config push.
   Replaces the ESP Web Tools install button, whose `state-changed` event (EWT 10.x) fires inside a shadow DOM the host page cannot see.
   Owning the whole flow lets the orchestrator write its own vendor RPC frames.
+  A join the board reports as failed brings the WiFi form back with the reason, and Connect retries on the same port.
   After provisioning it pushes the picked device model's `state` over serial as APPLY_OP documents, one `{"<Root>": …}` per top-level container (see `stateFrames` in [`improv-frame.js`](improv-frame.js)).
   Each is the body `PATCH /api/state` takes, applied by the same device-side engine.
+  Each chunk waits for the board's acknowledgement, and a refused or unanswered document is sent again from its first chunk, for up to 10 s.
   An **Apply device defaults** checkbox gates that push.
   It ticks itself with **Erase chip first**, since a clean slate wants defaults, and starts unticked otherwise, so re-flashing a configured device keeps its modules and controls.
   The board's `txPower` brown-out cap goes first, through its own `SET_TX_POWER` RPC **before** provisioning, since a weak-power board fails its first association without it.
   A device that doesn't speak Improv back (the typed-IP or eth-only path) gets no serial push.
   Its defaults are applied later from MoonDeck on the LAN, over plain HTTP REST with no mixed content.
+  **Apply device defaults now, without flashing** sends the same documents over USB to a board that already runs MoonLight.
 - [`devices.js`](devices.js): the *Your devices* list.
   Stores devices the user provisioned from the installer so they can be revisited, erased or forgotten (Visit / Erase / Forget).
   The device-model defaults are applied during the install over serial, so this list has no "inject" button.
-  MoonDeck on the LAN re-applies a model to a running device.
+  A running device takes them again over USB with **Apply device defaults now, without flashing**, or from MoonDeck on the LAN.
 - [`deviceModels.json`](deviceModels.json): the device-model catalog (name → firmware variants + the `state` document).
   The installer slices it into the APPLY_OP documents; MoonDeck and the picker also read it.
   Schema below.
@@ -82,7 +85,7 @@ The `deviceModel` identity is part of it: `System.deviceModel`.
 
 **`"$patch": "replace"`** (optional, on a container): applying a state document is a merge, so an entry's children land *alongside* the container's current children.
 `replace` makes the entry's children the only ones, and the device keeps code-wired children such as `WiFi`.
-Used when an entry wants its own effects to replace the defaults rather than stack with them (the testbench above swaps the default `NoiseEffect` for `AudioSpectrumEffect` + `RandomMapModifier`).
+It applies to its own level, so a child the entry names again, such as the `Layer`, is merged. A layer that holds only the model's effects says `replace` too.
 
 **Drivers goes last.** The installer sends the documents in the entry's key order with `Drivers` last.
 Starting an output prints on UART0, which a classic board shares with Improv, and LED pins 1 or 3 end serial reception.
diff --git a/mooninstaller/deviceModels.json b/mooninstaller/deviceModels.json
index e2c9129a3..587af1b93 100644
--- a/mooninstaller/deviceModels.json
+++ b/mooninstaller/deviceModels.json
@@ -792,10 +792,10 @@
       "WiFi",
       "I2C",
       "Buttons",
-      "SD card"
+      "SD card",
+      "Audio"
     ],
     "planned": [
-      "Microphone",
       "Speaker",
       "Accelerometer",
       "Temperature",
@@ -821,7 +821,13 @@
       "Effects": {
         "$patch": "replace",
         "Layer": {
-          "type": "Layer"
+          "type": "Layer",
+          "$patch": "replace",
+          "BeatRipples": {
+            "type": "BeatRipplesEffect",
+            "rain": 73,
+            "shine": 255
+          }
         }
       },
       "Drivers": {
@@ -834,6 +840,16 @@
       },
       "Services": {
         "$patch": "replace",
+        "Audio": {
+          "type": "AudioService",
+          "mode": 2,
+          "sckPin": 43,
+          "wsPin": 38,
+          "sdPin": 39,
+          "mclkPin": 12,
+          "codec": "ES7210",
+          "codecAddr": "0x40"
+        },
         "Buttons": {
           "type": "ButtonService",
           "buttons": [
diff --git a/mooninstaller/improv-frame.js b/mooninstaller/improv-frame.js
index 6ee168c32..d936a2fbe 100644
--- a/mooninstaller/improv-frame.js
+++ b/mooninstaller/improv-frame.js
@@ -88,3 +88,40 @@ export function encodeApplyOpFrames(doc) {
     }
     return frames;
 }
+
+// The device's replies: an RPC result per acknowledged chunk, an error state when it refuses one.
+export const IMPROV_FRAME_TYPE_ERROR = 0x02;
+export const IMPROV_FRAME_TYPE_RPC_RESULT = 0x04;
+// The device is still applying the previous document, or a chunk arrived out of order: send the document again from its first chunk.
+export const IMPROV_ERROR_OP_REFUSED = 0x82;
+
+// The Improv frames in bytes that also carry log text: each whole frame whose checksum holds, and the bytes to keep for the next read (an incomplete frame, or the start of a magic).
+export function parseImprovFrames(bytes) {
+    const frames = [];
+    let i = 0;
+    for (;;) {
+        let p = i;
+        while (p + IMPROV_MAGIC.length <= bytes.length && !IMPROV_MAGIC.every((m, k) => bytes[p + k] === m)) p++;
+        if (p + IMPROV_MAGIC.length > bytes.length) return { frames, rest: bytes.slice(Math.max(i, bytes.length - IMPROV_MAGIC.length + 1)) };
+        if (p + 9 > bytes.length || p + 10 + bytes[p + 8] > bytes.length) return { frames, rest: bytes.slice(p) };
+        const len = bytes[p + 8];
+        let sum = 0;
+        for (let k = 0; k < 9 + len; k++) sum = (sum + bytes[p + k]) & 0xff;
+        if (sum === bytes[p + 9 + len]) {
+            frames.push({ type: bytes[p + 7], payload: bytes.slice(p + 9, p + 9 + len) });
+            i = p + 10 + len;
+        } else {
+            i = p + 1;   // a magic inside log text, or a damaged frame
+        }
+    }
+}
+
+// Improv's "unknown RPC command": firmware without the operation, the one error a resend cannot fix.
+export const IMPROV_ERROR_UNKNOWN_RPC = 0x02;
+
+// What a reply frame says about an APPLY_OP chunk: "ack", "unsupported" (firmware without the operation), "refused" for any other error (send again: the device is busy, or an error state left from provisioning arrived first), or null for any other frame.
+export function applyOpReply(frame) {
+    if (frame.type === IMPROV_FRAME_TYPE_RPC_RESULT && frame.payload[0] === IMPROV_CMD_APPLY_OP) return "ack";
+    if (frame.type !== IMPROV_FRAME_TYPE_ERROR || !frame.payload[0]) return null;
+    return frame.payload[0] === IMPROV_ERROR_UNKNOWN_RPC ? "unsupported" : "refused";
+}
diff --git a/mooninstaller/index.html b/mooninstaller/index.html
index 847714277..49d39fe66 100644
--- a/mooninstaller/index.html
+++ b/mooninstaller/index.html
@@ -92,18 +92,19 @@ <h1>MoonLight Installer <span class="version-chip" id="version-chip" hidden></sp
                WiFi boots into PROVISIONED and the installer can't speak
                Improv to it; erase first avoids that)
              - clean-slate testing
-           Costs ~12 s of chip-erase time before the flash starts. -->
+           Costs about 3 s of chip-erase time per MB of flash before the flash starts. -->
       <div class="erase-row" id="erase-row">
         <label>
           <input type="checkbox" id="erase-before-flash">
           Erase chip first
-          <span class="note erase-note">wipes saved WiFi + device, adds ~12 s. Tick when switching firmware variant, starting clean, or <strong>when a normal update fails</strong> or the device comes back without its settings: the partition layout can change between releases, and only an erase install applies the new one cleanly. Back up first (see below), restore after.</span>
+          <span class="note erase-note">wipes saved WiFi + device, adds about 3 s per MB of flash. Tick when switching firmware variant, starting clean, or <strong>when a normal update fails</strong> or the device comes back without its settings: the partition layout can change between releases, and only an erase install applies the new one cleanly. Back up first (see below), restore after.</span>
         </label>
         <label>
           <input type="checkbox" id="apply-device-defaults">
           Apply device defaults
           <span class="note erase-note">sets this device model's recommended modules/settings. Auto-ticks with erase; untick to keep your current config when re-flashing a configured device.</span>
         </label>
+        <button type="button" class="secondary" id="apply-defaults-now">Apply device defaults now, without flashing</button>
       </div>
 
       <!-- Device picker: a control-row consistent with USB Port / Release / Firmware
@@ -357,7 +358,7 @@ <h2 id="install-title">Installing</h2>
       <div class="install-section" id="section-flashing">
         <div class="install-status" id="flashing-status">Preparing to flash…</div>
         <div class="install-progress"><div class="install-progress-bar" id="flash-bar"></div></div>
-        <p class="note install-warn">Don't close this window or unplug the device until flash completes — interrupting mid-write leaves the chip in a half-flashed state that needs a full re-flash to recover.</p>
+        <p class="note install-warn">Don't close this window or unplug the device until flash completes: interrupting mid-write leaves the chip in a half-flashed state that needs a full re-flash to recover.</p>
       </div>
 
       <!-- WiFi-creds form: rendered LAZILY by buildWifiForm() the first time
diff --git a/mooninstaller/install-orchestrator.js b/mooninstaller/install-orchestrator.js
index 6a343ad68..f713bf9d1 100644
--- a/mooninstaller/install-orchestrator.js
+++ b/mooninstaller/install-orchestrator.js
@@ -67,8 +67,10 @@ import { ImprovSerial } from "https://unpkg.com/improv-wifi-serial-sdk@2.5.0/dis
 import {
     IMPROV_CMD_SET_TX_POWER,
     IMPROV_FRAME_TYPE_RPC,
+    applyOpReply,
     buildImprovFrame,
     encodeApplyOpFrames,
+    parseImprovFrames,
     stateFrames,
 } from "./improv-frame.js";
 import {
@@ -128,7 +130,7 @@ async function fetchManifest(manifestUrl) {
 
 // Sends the SET_TX_POWER frame ([0xFD][1][dBm]) on a port we own — called
 // BEFORE ImprovSerial takes the port's locks, so no close/reopen dance is
-// needed. Fire-and-forget like APPLY_OP: the device acks with RpcResponse we don't
+// needed. Fire-and-forget: the device acks with RpcResponse we don't
 // read. This must precede provisioning because the cap has to land before the radio
 // associates; the APPLY_OP config push later also carries WiFi.txPowerSetting, but
 // that arrives too late for the first association on a brown-out-prone device.
@@ -143,31 +145,67 @@ async function sendSetTxPowerFrame(port, dBm) {
     }
 }
 
-// Send ONE state document (a JSON string like {"Drivers":{…}}) to the device over
-// serial as APPLY_OP frames: "Improv = REST over serial". The JSON is chunked
-// into [0xFC][seq][last][chunk] frames (≤ APPLY_OP_CHUNK_MAX bytes each). We own the port here (ImprovSerial closed after provision), so we
-// write directly. Best-effort fire: the device acks each frame with an RpcResponse
-// we don't read back (Web Serial duplex read while we hold the writer is awkward),
-// and the single-buffer busy-guard on the device + a small inter-document delay keep the
-// device from being overrun. Returns nothing; throws only on a write error.
-async function sendApplyOpFrame(port, doc) {
-    const frames = encodeApplyOpFrames(doc);   // [0xFC][seq][last][chunk…] per frame
+// The device's replies to APPLY_OP chunks, read from a port that also carries its log. One reader for a whole push, a read still pending when a wait times out being kept for the next.
+function applyOpReplies(port) {
+    const reader = port.readable.getReader();
+    let bytes = new Uint8Array(0), pending = null;
+    const queue = [];
+    return {
+        // The next reply, or "timeout" when none came in `ms`.
+        async next(ms) {
+            const deadline = Date.now() + ms;
+            while (!queue.length) {
+                const left = deadline - Date.now();
+                if (left <= 0) return "timeout";
+                pending = pending || reader.read();
+                const res = await Promise.race([pending, new Promise(r => setTimeout(() => r(null), left))]);
+                if (!res) return "timeout";
+                pending = null;
+                if (res.done) return "timeout";
+                const all = new Uint8Array(bytes.length + res.value.length);
+                all.set(bytes); all.set(res.value, bytes.length);
+                const { frames, rest } = parseImprovFrames(all);
+                bytes = rest;
+                for (const f of frames) { const r = applyOpReply(f); if (r) queue.push(r); }
+            }
+            return queue.shift();
+        },
+        // Discard every reply until `ms` pass quietly, so a late acknowledgement is not taken for the resent chunk's.
+        async drain(ms) {
+            queue.length = 0;
+            while ((await this.next(ms)) !== "timeout") { /* a reply to a chunk already given up on */ }
+        },
+        async close() {
+            try { await reader.cancel(); } catch (_) { /* ignore */ }
+            try { reader.releaseLock(); } catch (_) { /* ignore */ }
+        },
+    };
+}
+
+// Send ONE state document (a JSON string like {"Drivers":{…}}) as APPLY_OP chunks, stop-and-wait: each chunk waits for its acknowledgement, and a refusal (the device still applies the previous document) or a silence (a board still booting after the port opened) sends the document again from its first chunk. A document is a merge, so a resend is harmless. Returns false when the budget ran out, or the device lacks the operation.
+async function sendApplyOpDocument(port, replies, doc, onLog) {
+    const frames = encodeApplyOpFrames(doc);
+    const giveUp = Date.now() + 10000;   // a large layout's rebuild can hold the device for seconds
     const writer = port.writable.getWriter();
     try {
-        for (const frame of frames) await writer.write(frame);
+        for (;;) {
+            let again = false;
+            for (const frame of frames) {
+                await writer.write(frame);
+                const reply = await replies.next(1000);
+                if (reply === "unsupported") return false;
+                if (reply !== "ack") { again = true; break; }
+            }
+            if (!again) return true;
+            await replies.drain(500);   // a late acknowledgement would pair with the wrong chunk
+            if (Date.now() > giveUp) {
+                if (onLog) onLog(`[orchestrator] no acknowledgement from the device within 10 s`);
+                return false;
+            }
+        }
     } finally {
         writer.releaseLock();
     }
-    // Pace so the device's main loop consumes the document (clears its single buffer) before
-    // the next document's frame arrives, since the device refuses a new document while busy. This is
-    // open-loop (we don't read the ack back: a Web Serial duplex read while we hold the
-    // writer is awkward), so the delay must clear the worst-case consume window. A
-    // loaded tick (large grid, many modules) can run a few hundred µs, but the document is
-    // applied at the START of the next tick() poll, not after a full render — so ~120 ms
-    // comfortably covers it with headroom. (A read-back ack + retry-on-busy is the
-    // closed-loop upgrade; backlogged until a real install drops a document, since each document is
-    // a merge, so a lost one would re-apply cleanly on a re-flash.)
-    await new Promise(r => setTimeout(r, 120));
 }
 
 // Apply a device-model's catalog defaults over serial, as APPLY_OP documents. The caller must
@@ -232,11 +270,19 @@ async function catalogFlashBaud(device, onLog) {
 async function sendConfigOverSerial(port, device, onLog) {
     const entry = await fetchCatalogEntry(device, onLog);
     if (!entry) return false;
-    for (const doc of stateFrames(entry)) {
-        await sendApplyOpFrame(port, doc);
+    const replies = applyOpReplies(port);
+    let all = true;
+    try {
+        for (const doc of stateFrames(entry)) {
+            if (await sendApplyOpDocument(port, replies, doc, onLog)) continue;
+            all = false;
+            if (onLog) onLog(`[orchestrator] the device did not take ${doc.slice(0, 40)}…`);
+        }
+    } finally {
+        await replies.close();
     }
-    if (onLog) onLog(`[orchestrator] applied ${device} defaults over serial`);
-    return true;
+    if (onLog) onLog(`[orchestrator] applied ${device} defaults over serial${all ? "" : ", with documents missing"}`);
+    return all;
 }
 
 // Read the device's boot serial log for the two facts the browser can't get any other
@@ -551,7 +597,7 @@ export const installer = {
      *   null when the device has no cap.
      * @param {boolean} [opts.eraseBefore=false] - when true, eraseFlash()
      *   before writeFlash. Wipes the entire chip including LittleFS (saved
-     *   WiFi credentials, device name). Adds ~12 s. Default false because
+     *   WiFi credentials, device name). Adds about 3 s per MB. Default false because
      *   a normal re-flash overwrites in place and users usually want
      *   persistent state to survive a firmware bump.
      * @param {boolean} [opts.ethOnly=false] - the picked firmware has WiFi compiled
@@ -840,11 +886,12 @@ export const installer = {
             // preserves user state (WiFi credentials, device name on
             // LittleFS), which is what most users want. Tick the box when
             // switching firmware variants whose partition tables differ, or
-            // when wiping the device for a clean install. ~12 s on a 4 MB
-            // chip; status text covers it so the user doesn't think it
-            // hung.
+            // when wiping the device for a clean install. It takes about 3 s per MB, so the
+            // status names the chip's size and the wait, and the user doesn't think it hung.
             if (eraseBefore) {
-                trackProgress("erase");
+                let mb = 0;
+                try { mb = parseInt(await esploader.detectFlashSize(), 10) || 0; } catch (_) { /* unknown size: a generic message */ }
+                trackProgress("erase", { mb });
                 await esploader.eraseFlash();
             }
 
@@ -1140,40 +1187,51 @@ export const installer = {
             }
 
             if (!needsIp && !viaHttp) {
-                trackProgress("wifi-creds-form");
-                const { ssid, password } = await uiWaitForCreds();
+                // A network the board could not join brings the form back with the reason, so a mistyped password is corrected in place rather than by a reinstall.
+                let failedSsid = "";
+                for (;;) {
+                    trackProgress("wifi-creds-form", { failedSsid });
+                    const { ssid, password } = await uiWaitForCreds();
 
-                // Skip path: user clicked Skip in the creds form (or
-                // submitted an empty SSID). Don't call provision() with
-                // empty creds — the device-side handler rejects empty
-                // SSIDs as ErrorState, which would surface as a misleading
-                // "provisioning failed" error. Instead exit cleanly with
-                // no deviceUrl; the host's onSuccess handler treats an
-                // empty url as "user opted into AP fallback, walk them
-                // through joining MM-XXXX manually" (see Step 2 in
-                // mooninstaller/index.html and the closeModal path in
-                // handleSuccess).
-                //
-                // Note on the two "skip" shapes: `uiWaitForIp()` returns
-                // a tagged union ({action: "skip"|"ip"|"retry"}) because
-                // the needs-ip dialog has three distinct outcomes the
-                // orchestrator dispatches on. `onSuccess({url:""})` is a
-                // sentinel because the outbound result has only two
-                // outcomes ("we got a URL" vs "we didn't"). Different
-                // shapes for different cardinalities, not drift.
-                if (!ssid) {
-                    // Empty SSID (Skip in the creds form). Keep device + applyDefaults
-                    // so the success screen guides the user to apply defaults later.
-                    trackProgress("done");
-                    onSuccess({ url: "", device, applyDefaults, alreadyOnline: false });
-                    return;
-                }
+                    // Skip path: user clicked Skip in the creds form (or
+                    // submitted an empty SSID). Don't call provision() with
+                    // empty creds: the device-side handler rejects empty
+                    // SSIDs as ErrorState, which would surface as a misleading
+                    // "provisioning failed" error. Instead exit cleanly with
+                    // no deviceUrl; the host's onSuccess handler treats an
+                    // empty url as "user opted into AP fallback, walk them
+                    // through joining MM-XXXX manually" (see Step 2 in
+                    // mooninstaller/index.html and the closeModal path in
+                    // handleSuccess).
+                    //
+                    // Note on the two "skip" shapes: `uiWaitForIp()` returns
+                    // a tagged union ({action: "skip"|"ip"|"retry"}) because
+                    // the needs-ip dialog has three distinct outcomes the
+                    // orchestrator dispatches on. `onSuccess({url:""})` is a
+                    // sentinel because the outbound result has only two
+                    // outcomes ("we got a URL" vs "we didn't"). Different
+                    // shapes for different cardinalities, not drift.
+                    if (!ssid) {
+                        // Empty SSID (Skip in the creds form). Keep device + applyDefaults
+                        // so the success screen guides the user to apply defaults later.
+                        trackProgress("done");
+                        onSuccess({ url: "", device, applyDefaults, alreadyOnline: false });
+                        return;
+                    }
 
-                trackProgress("provisioning");
-                // provision() throws on failure (timeout, bad creds). 30s
-                // timeout matches the device-side wait at
-                // platform_esp32_improv.cpp::improvHandleProvision.
-                await improvClient.provision(ssid, password, 30000);
+                    trackProgress("provisioning");
+                    // provision() throws on failure (timeout, bad creds). 30s
+                    // timeout matches the device-side wait at
+                    // platform_esp32_improv.cpp::improvHandleProvision.
+                    try {
+                        await improvClient.provision(ssid, password, 30000);
+                        break;
+                    } catch (e) {
+                        if (!/UNABLE_TO_CONNECT/.test(String(e && e.message || e))) throw e;
+                        if (onLog) onLog(`[orchestrator] the board could not join ${ssid}; asking again`);
+                        failedSsid = ssid;
+                    }
+                }
                 deviceUrl = improvClient.nextUrl;
                 if (!deviceUrl) {
                     throw new Error("provision succeeded but no device URL returned");
@@ -1286,6 +1344,35 @@ export const installer = {
         await releaseDetected();
     },
 
+    /**
+     * Defaults-only flow: send a device model's modules and settings to a board that already runs MoonLight, over its USB port, with no flash. For a board whose install skipped the defaults (unticked, or WiFi that failed first).
+     */
+    async applyDefaultsOnly({ port, device, onProgress, onSuccess, onError, onLog }) {
+        if (!navigator.serial) {
+            onError("setup", new Error("Web Serial API not available: use Chrome, Edge, or Opera"));
+            return;
+        }
+        let lastStage = "request-port";
+        const trackProgress = (stage, detail) => { lastStage = stage; onProgress(stage, detail); };
+        let opened = false;
+        try {
+            trackProgress("request-port");
+            if (!port) port = await navigator.serial.requestPort({});
+            await port.open({ baudRate: 115200 });
+            opened = true;
+            // Opening the port can restart the board; the stop-and-wait resends until it listens again.
+            if (!await pushDefaultsOverSerial(port, device, true, trackProgress, onLog)) {
+                throw new Error(`the board did not take the ${device} defaults: see the log`);
+            }
+            trackProgress("done");
+            onSuccess({ url: "", device, applyDefaults: true, defaultsApplied: true, defaultsOnly: true });
+        } catch (e) {
+            onError(lastStage, e);
+        } finally {
+            if (opened) { try { await port.close(); } catch (_) { /* ignore */ } }
+        }
+    },
+
     /**
      * Erase-only flow: request a port and wipe the chip. No flash, no
      * provision. Used by the "Erase" button on a "Your devices" entry.
diff --git a/mooninstaller/install.css b/mooninstaller/install.css
index 96c4b13c8..404ed0063 100644
--- a/mooninstaller/install.css
+++ b/mooninstaller/install.css
@@ -133,6 +133,7 @@
     .erase-row { margin-top: 12px; font-size: 13px; }
     .erase-row label { cursor: pointer; }
     .erase-row input { vertical-align: middle; margin-right: 6px; }
+    .erase-row button { margin-top: 8px; }
     .erase-note { display: inline; margin-top: 0; }
     a { color: var(--accent); }
     code {
@@ -457,7 +458,7 @@
       justify-content: flex-end;
       margin-top: 16px;
     }
-    .install-actions button {
+    .install-actions button, .erase-row button {
       padding: 8px 16px;
       font: inherit;
       font-weight: 600;
@@ -469,11 +470,12 @@
       background: var(--accent);
       color: #1a1a2e;
     }
-    .install-actions button.secondary {
+    .install-actions button.secondary, .erase-row button.secondary {
       background: transparent;
       color: var(--fg);
       border: 1px solid var(--border);
     }
+    .install-status.error { color: #f8a5a5; }
     .install-error {
       color: #f8a5a5;
       font-size: 13px;
diff --git a/mooninstaller/install.js b/mooninstaller/install.js
index 44413c0d8..984d36741 100644
--- a/mooninstaller/install.js
+++ b/mooninstaller/install.js
@@ -213,7 +213,14 @@ document.addEventListener('DOMContentLoaded', () => {
     // Mapping from orchestrator's progress stage → which modal section to
     // show + any per-stage detail rendering. Centralizes the UI ↔ flow
     // contract so the orchestrator stays UI-agnostic.
+    // The erase reports no progress, so its bar runs on the estimate of about 3 s per MB, held short of full until the write takes over.
+    let eraseTimer = null;
+    function stopEraseEstimate() {
+      if (eraseTimer) { clearInterval(eraseTimer); eraseTimer = null; }
+    }
+
     function handleProgress(stage, detail) {
+      stopEraseEstimate();
       switch (stage) {
         case "request-port":
           showSection("connecting");
@@ -243,19 +250,29 @@ document.addEventListener('DOMContentLoaded', () => {
           break;
         case "erase": {
           showSection("flashing");
-          document.getElementById("flashing-status").textContent =
-            "Erasing flash (this takes ~12 s)…";
-          // esptool-js's eraseFlash doesn't report progress — animate the
-          // bar so the user sees the page isn't hung. flash stage clears
-          // the class below and switches to determinate progress.
-          //
-          // Clear the inline width set by an earlier stage (fetch-firmware
-          // forces `style.width = "0%"`); inline style beats the CSS class's
-          // `width: 100%` rule, so the animation would run invisibly on a
-          // zero-width bar without this reset.
+          const status = document.getElementById("flashing-status");
           const bar = document.getElementById("flash-bar");
-          bar.style.width = "";
-          bar.classList.add("indeterminate");
+          if (detail && detail.mb) {
+            // An estimate, so the bar stops at 95% and the text says so once the time is up.
+            const estimateS = detail.mb * 3;
+            const start = Date.now();
+            const show = () => {
+              const elapsedS = (Date.now() - start) / 1000;
+              const left = Math.ceil(estimateS - elapsedS);
+              bar.style.width = `${Math.min(95, (elapsedS / estimateS) * 100)}%`;
+              status.textContent = left > 0
+                ? `Erasing ${detail.mb} MB of flash… about ${left} s left`
+                : `Erasing ${detail.mb} MB of flash… almost done`;
+            };
+            bar.classList.remove("indeterminate");
+            show();
+            eraseTimer = setInterval(show, 500);
+          } else {
+            // No size to estimate from: the marquee shows the page is alive. The inline width an earlier stage set would hide it, the inline style beating the class.
+            status.textContent = "Erasing flash (about 3 s per MB)…";
+            bar.style.width = "";
+            bar.classList.add("indeterminate");
+          }
           break;
         }
         case "flash": {
@@ -315,10 +332,21 @@ document.addEventListener('DOMContentLoaded', () => {
           // inside the field. Don't leave that sitting in the DOM longer
           // than the active install.
           passEl.value = "";
-          try {
-            const saved = localStorage.getItem("MoonLight.installer.lastSsid");
-            if (saved) ssidEl.value = saved;
-          } catch (_) { /* hostile storage */ }
+          // A network the board could not join comes back with the reason, its name kept for the password to be typed again.
+          const failedSsid = detail && detail.failedSsid;
+          const formStatus = document.getElementById("wifi-form-status");
+          formStatus.textContent = failedSsid
+            ? `The board could not join "${failedSsid}". Check the password, and that the network is 2.4 GHz, then connect again.`
+            : "Flash done. Enter your WiFi credentials to provision the device.";
+          formStatus.classList.toggle("error", !!failedSsid);
+          if (failedSsid) {
+            ssidEl.value = failedSsid;
+          } else {
+            try {
+              const saved = localStorage.getItem("MoonLight.installer.lastSsid");
+              if (saved) ssidEl.value = saved;
+            } catch (_) { /* hostile storage */ }
+          }
           requestAnimationFrame(() => (ssidEl.value ? passEl : ssidEl).focus());
           break;
         }
@@ -378,7 +406,7 @@ document.addEventListener('DOMContentLoaded', () => {
       _wifiFormBuilt = true;
       const section = document.getElementById("section-wifi-form");
       section.innerHTML = `
-        <div class="install-status">Flash done. Enter your WiFi credentials to provision the device.</div>
+        <div class="install-status" id="wifi-form-status"></div>
         <form id="wifi-form" class="install-form" onsubmit="return false">
           <label for="wifi-ssid">Network name (SSID)</label>
           <input type="text" id="wifi-ssid" autocomplete="off"
@@ -1175,6 +1203,35 @@ document.addEventListener('DOMContentLoaded', () => {
       }
     })();
 
+    // The device model's defaults for a board that already runs MoonLight, over USB, for an install that skipped them.
+    document.getElementById("apply-defaults-now").addEventListener("click", async () => {
+      const device = installPicker.getSelectedDevice();
+      if (!device) { alert("Pick the device model first, under Device."); return; }
+      if (_monitor.port) await closeMonitor();
+      openModal(`Applying ${device} defaults`);
+      showSection("connecting");
+      document.getElementById("connecting-detail").textContent = "";
+      await installer.applyDefaultsOnly({
+        port: pickedPort,
+        device,
+        onProgress: handleProgress,
+        onSuccess: () => {
+          disarmUnloadGuard();
+          showSection("done");
+          document.getElementById("done-status").textContent = "Defaults applied";
+          const a = document.getElementById("done-url");
+          a.removeAttribute("href");
+          a.textContent = "";
+          document.getElementById("done-url-mdns").hidden = true;
+          const note = document.getElementById("done-defaults");
+          note.textContent = `Applied ${device} defaults. They take effect at once; no restart needed.`;
+          note.hidden = false;
+        },
+        onError: handleError,
+        onLog: appendLog,
+      });
+    });
+
     myDevices.init({
       container: document.getElementById("devices-mount"),
       onErase: async (device) => {
diff --git a/src/core/services/AudioService.h b/src/core/services/AudioService.h
index ff636069c..3915a637b 100644
--- a/src/core/services/AudioService.h
+++ b/src/core/services/AudioService.h
@@ -84,18 +84,19 @@ class AudioService : public MoonModule {
     /// The master clock a converter may need, a self-clocked part leaving it unset.
     int8_t mclkPin = -1;
     /// The codecs `codec` picks from, in its option order.
-    enum Codec : uint8_t { kCodecNone, kCodecEs8311, kCodecCount };
+    enum Codec : uint8_t { kCodecNone, kCodecEs8311, kCodecEs7210, kCodecCount };
     /// Which codec sits in front of the microphone, none for a part that speaks I2S itself; the device model names it.
     uint8_t codec = kCodecNone;
-    /// The codec's 7-bit address on the board's I2C bus (I2cBusModule), the ES8311's own unless the board straps it elsewhere.
+    /// The codec's 7-bit address on the board's I2C bus (I2cBusModule): 0x18 for an ES8311, 0x40 to 0x43 for an ES7210 by its strapping.
     uint8_t codecAddr = 0x18;
 
     /// The codec the settings ask for.
     platform::CodecType codecType() const MM_NONBLOCKING {
-        return codec == kCodecEs8311 ? platform::CodecType::Es8311 : platform::CodecType::None;
+        return codec == kCodecEs8311 ? platform::CodecType::Es8311
+             : codec == kCodecEs7210 ? platform::CodecType::Es7210 : platform::CodecType::None;
     }
     /// The codecs the selector offers, each by the name the bus scan shows it under.
-    static constexpr const char* kCodecOptions[] = {"none", "ES8311"};
+    static constexpr const char* kCodecOptions[] = {"none", "ES8311", "ES7210"};
 
     /// The codec, while the wired microphone uses one, so the bus scan names its address.
     uint8_t i2cDevices(I2cDevice* out, uint8_t max) const override {
@@ -298,10 +299,10 @@ class AudioService : public MoonModule {
     /// How many times the receive socket joined the group, for the tests.
     uint32_t syncJoinCountForTest() const { return syncSock_.joinCountForTest(); }
 
+    /// What a consumer reads with no source: a class constant, since a function-local static needs a guard on first use.
+    static constexpr AudioFrame kSilence{};
     /// The live frame every consumer reads, or silence where there is no source.
     static const AudioFrame* latestFrame() MM_NONBLOCKING {
-        // Not a function-local static, which would need a guard and a lock on first use.
-        static constexpr AudioFrame kSilence{};
         AudioService* a = ActiveInstance<AudioService>::active();
         return a ? &a->frame_ : &kSilence;
     }
diff --git a/src/core/services/PictureService.h b/src/core/services/PictureService.h
new file mode 100644
index 000000000..e22cd53f9
--- /dev/null
+++ b/src/core/services/PictureService.h
@@ -0,0 +1,229 @@
+#pragma once
+
+#include "core/module/MoonModule.h"
+#include "core/util/ActiveInstance.h"   // the one-active-source election
+#include "core/util/color.h"            // RGB
+#include "core/util/PictureFrame.h"
+#include "core/util/ScratchBuffer.h"
+#include "core/util/TryLock.h"      // the swap a reader holds off for its gather
+#include "platform/platform.h"      // maxAllocBlock, freeHeap: whether the second picture fits
+
+#include <cstdint>
+#include <cstring>
+
+namespace mm {
+
+/// Produces a picture for the effects that sample it: the source half of the picture pipeline, named for what it publishes, as Audio is.
+///
+/// Each source is an option of `source`. One service is active at a time, and a `Reader` hands its picture to any number of effects.
+///
+/// A source writing from its own task fills a back picture while effects read the front one, and publishing swaps the two pointers.
+///
+/// Without room for the second picture, the one picture is locked while written, so frames may be skipped but never torn.
+class PictureService : public MoonModule {
+public:
+    ModuleRole role() const MM_NONBLOCKING override { return ModuleRole::Service; }
+
+    /// The sources `source` picks from, in option order.
+    enum Source : uint8_t { kTestPattern, kSourceCount };
+    /// Where the picture comes from.
+    uint8_t source = kTestPattern;
+    /// The picture's width in pixels.
+    uint16_t width = 64;
+    /// The picture's height in pixels, 4:3 by default as the test card is.
+    uint16_t height = 48;
+
+    /// Publish the source and the picture's size.
+    void defineControls() override {
+        static constexpr const char* kSources[] = {"test pattern"};
+        controls_.addSelect("source", source, kSources, kSourceCount);
+        controls_.addControl("width", width, 1, kMaxSide);
+        controls_.addControl("height", height, 1, kMaxSide);
+    }
+
+    /// Every control reshapes or redraws the picture.
+    bool affectsPrepare(const char*) const override { return true; }
+
+    /// Size the pixels for the source and draw a still one into them; a failed allocation publishes no picture.
+    void prepare() override {
+        seat_.claim();
+        if (!prepareBuffers(kRunsInTask[source])) return;
+        drawTestPattern(front_, width, height);   // the frame prepareBuffers published, filled before any reader ticks
+    }
+
+    /// Size one picture, or two for a source writing from its own task, degrading to one when the second does not fit; false when even one does not.
+    bool prepareBuffers(bool writerTask) {
+        // On the render thread with the source's task stopped, so no reader or writer holds the pictures.
+        const size_t bytes = static_cast<size_t>(width) * height * 3;
+        if (!a_.resize(bytes)) {
+            front_ = back_ = nullptr;
+            frame_ = PictureFrame{nullptr, 0, 0, frame_.generation + 1};
+            setStatus("not enough memory for the picture", Severity::Error);
+            return false;
+        }
+        front_ = a_.data();
+        back_ = writerTask && secondFits(bytes) && b_.resize(bytes) ? b_.data() : nullptr;
+        if (!back_) b_.resize(0);
+        if (writerTask && !back_) setStatus("one picture buffer: not enough memory, a capture may skip frames", Severity::Warning);
+        else clearStatus();
+        frame_ = PictureFrame{front_, width, height, frame_.generation + 1};
+        return true;
+    }
+
+    /// Whether a second picture is held, so a writer fills one while readers read the other.
+    bool twoBuffers() const { return back_ != nullptr; }
+
+    /// The picture a source fills: the back one, or the only one, locked until endWrite.
+    uint8_t* beginWrite() {
+        if (back_) return back_;
+        while (!lock_.tryAcquire()) platform::yield();   // readers hold it for one gather at most
+        return front_;
+    }
+    /// Publish what beginWrite handed out: swap the two pictures, or unlock the one, and bump the generation.
+    void endWrite() {
+        if (back_) {
+            while (!lock_.tryAcquire()) platform::yield();
+            uint8_t* filled = back_;
+            back_ = front_;
+            front_ = filled;
+        }
+        frame_ = PictureFrame{front_, width, height, frame_.generation + 1};
+        lock_.release();
+    }
+
+    /// Re-claim an empty seat, so removing the active service lets a survivor take over.
+    void tick() MM_NONBLOCKING override { seat_.claim(); }
+
+    /// Vacate the seat for any survivor.
+    void release() override {
+        seat_.vacate();
+        MoonModule::release();
+    }
+
+    /// What a consumer reads with no source: a class constant, since a function-local static needs a guard on first use.
+    static constexpr PictureFrame kNone{};
+
+    /// The active service's picture held still for one read, or an empty frame when no service publishes one; false while a writer swaps or fills the only picture.
+    class Reader {
+    public:
+        /// Take the active service's lock for one read, which fails while a writer swaps.
+        Reader() : svc_(ActiveInstance<PictureService>::active()), held_(!svc_ || svc_->lock_.tryAcquire()) {}
+        /// Let a writer swap again.
+        ~Reader() { if (svc_ && held_) svc_->lock_.release(); }
+        /// Not copyable: one reader holds the lock once.
+        Reader(const Reader&) = delete;
+        /// Not assignable, for the same reason.
+        Reader& operator=(const Reader&) = delete;
+        /// Whether the frame may be read now.
+        explicit operator bool() const { return held_; }
+        /// The frame, valid while this reader lives.
+        const PictureFrame& frame() const { return svc_ ? svc_->frame_ : kNone; }
+    private:
+        PictureService* svc_;
+        bool held_;
+    };
+
+    /// The test card in the layout of Philips' PM5544, drawn from coordinates at any size; its round circle shows a stretch, its gratings where sampling aliases.
+    static void drawTestPattern(uint8_t* rgb, uint16_t w, uint16_t h) {
+        const float cx = w / 2.0f, cy = h / 2.0f;
+        const float r = 0.44f * (w < h * 4 / 3 ? w * 0.75f : h);   // the circle's radius: 88% of a 4:3 picture's height
+        const float sq = 2.0f * r / 12.0f;                         // a grid square: twelve across the circle
+        const float line = sq / 12.0f > 1.0f ? sq / 12.0f : 1.0f;
+        for (uint32_t y = 0; y < h; y++)
+            for (uint32_t x = 0; x < w; x++) {
+                const float px = x + 0.5f, py = y + 0.5f;
+                const float dx = px - cx, dy = py - cy;
+                uint8_t* out = rgb + (y * w + x) * 3;
+                const RGB c = dx * dx + dy * dy <= r * r ? cardCircle((dx + r) / (2 * r), (dy + r) / (2 * r))
+                                                         : cardBackground(dx / sq, dy / sq, line / sq);
+                out[0] = c.r; out[1] = c.g; out[2] = c.b;
+            }
+    }
+
+private:
+    /// Outside the circle, in grid squares from the center: the gray grid with its white lines, and the four colored blocks at each side.
+    static RGB cardBackground(float gx, float gy, float lineFrac) {
+        RGB block;
+        if (sideBlock(gx, gy, block)) return block;
+        return onGridLine(gx, lineFrac) || onGridLine(gy, lineFrac) ? RGB{230, 230, 230} : RGB{128, 128, 128};
+    }
+
+    /// The colored block at (gx, gy), true when there is one: two a side, a tall one outside and a short one inside, each split at the middle row.
+    static bool sideBlock(float gx, float gy, RGB& out) {
+        static constexpr RGB kOuter[2][2] = {{{80, 160, 140}, {160, 160, 90}}, {{160, 80, 110}, {100, 80, 160}}};   // [bottom][right]
+        static constexpr RGB kInner[2] = {{70, 130, 160}, {160, 110, 80}};                                          // [bottom]
+        const float ax = gx < 0 ? -gx : gx;
+        if (ax < 5.0f || ax >= 7.0f || gy <= -5.0f || gy >= 5.0f) return false;
+        const int bottom = gy >= 0, right = gx >= 0;
+        if (ax >= 6.0f) { out = kOuter[bottom][right]; return true; }
+        if (gy > -3.0f && gy < 3.0f) return false;
+        out = kInner[bottom];
+        return true;
+    }
+
+    /// Whether a coordinate in grid squares falls on a grid line `lineFrac` of a square wide.
+    static bool onGridLine(float g, float lineFrac) {
+        return g - static_cast<float>(static_cast<int>(g < 0 ? g - 1 : g)) < lineFrac;
+    }
+
+    /// Inside the circle at (s, t), each 0 to 1 across its diameter: the center marker over the middle, else the band `t` falls in, from top to bottom.
+    static RGB cardCircle(float s, float t) {
+        if (s > 0.47f && s < 0.53f && t > 0.38f && t < 0.72f) return RGB{0, 0, 0};
+        struct Band { float until; RGB (*draw)(float s, float t); };
+        static constexpr Band kBands[] = {{0.125f, topBox}, {0.25f, shoulders}, {0.33f, steps}, {0.50f, colorBars},
+                                          {0.60f, crossLines}, {0.75f, gratings}, {0.82f, grayRamp}, {0.91f, lowerBox}};
+        for (const Band& b : kBands) if (t < b.until) return b.draw(s, t);
+        return (s > 0.45f && s < 0.55f) ? RGB{180, 40, 30} : RGB{190, 190, 50};   // the yellow base with its red mark
+    }
+
+    // The bands, each one call: a box, the black shoulders, the gray and black steps, the bars, the lines, the gratings, the gray ramp, the lower box.
+    static RGB bw(bool black) { return black ? RGB{0, 0, 0} : RGB{255, 255, 255}; }
+    static RGB topBox(float s, float t) { return bw(s > 0.30f && s < 0.70f && t > 0.04f); }
+    static RGB shoulders(float s, float) { return bw(s < 0.30f || s > 0.75f); }
+    static RGB steps(float s, float) { return static_cast<int>(s * 10.0f) % 2 ? RGB{0, 0, 0} : RGB{190, 190, 190}; }
+    static RGB colorBars(float s, float) {
+        // Yellow, cyan, green, magenta, red, blue: the bars at three quarters of full saturation.
+        static constexpr RGB kBars[6] = {{190, 190, 50}, {80, 190, 190}, {80, 190, 60}, {180, 60, 190}, {180, 40, 30}, {0, 30, 190}};
+        return kBars[sixth(s)];
+    }
+    static RGB crossLines(float s, float t) {
+        const float fs = s * 12.0f;
+        return bw(!(fs - static_cast<float>(static_cast<int>(fs)) < 0.06f || (t > 0.545f && t < 0.555f)));
+    }
+    static RGB gratings(float s, float) {
+        // Five gratings of rising frequency, the resolution wedges.
+        if (s < 0.1f || s >= 0.9f) return RGB{0, 0, 0};
+        const int g = static_cast<int>((s - 0.1f) / 0.16f);
+        const float phase = (s - 0.1f - g * 0.16f) / 0.16f * static_cast<float>(3 + 2 * g);
+        return bw(phase - static_cast<float>(static_cast<int>(phase)) >= 0.5f);
+    }
+    static RGB grayRamp(float s, float) {
+        static constexpr uint8_t kSteps[6] = {0, 50, 100, 150, 200, 255};
+        const uint8_t v = kSteps[sixth(s)];
+        return RGB{v, v, v};
+    }
+    static RGB lowerBox(float s, float) { return bw(s > 0.25f && s < 0.75f); }
+    /// Which sixth of the width `s` falls in, 0 to 5.
+    static int sixth(float s) { const int i = static_cast<int>(s * 6.0f); return i < 0 ? 0 : (i > 5 ? 5 : i); }
+
+    static constexpr uint16_t kMaxSide = 512;   ///< a side above this exceeds what a board holds for one picture
+    /// Which sources write from a task of their own, in `source` order; the test pattern is drawn at prepare.
+    static constexpr bool kRunsInTask[kSourceCount] = {false};
+
+    /// Whether an optional picture of `bytes` fits one free block with the heap's reserve intact, the rule the mapping uses; 0 from the platform means no limit.
+    static bool secondFits(size_t bytes) {
+        const size_t block = platform::maxAllocBlock();
+        if (block != 0 && block < bytes) return false;
+        const size_t free = platform::freeHeap();
+        return free == 0 || (free > platform::HEAP_RESERVE && free - platform::HEAP_RESERVE >= bytes);
+    }
+
+    ScratchBuffer<uint8_t> a_{*this}, b_{*this};   ///< the pictures, three bytes a pixel; b_ only for a writer task
+    uint8_t* front_ = nullptr;   ///< what readers see
+    uint8_t* back_ = nullptr;    ///< what a writer fills, or null with one picture
+    PictureFrame frame_;         ///< the front picture, as a Reader hands it out
+    TryLock lock_;               ///< held by a reader for its gather, by the writer to swap or to fill the only picture
+    ActiveInstance<PictureService> seat_{*this};
+};
+
+}  // namespace mm
diff --git a/src/core/system/HttpServerModule.cpp b/src/core/system/HttpServerModule.cpp
index 4965afc4b..b3fb5ba27 100644
--- a/src/core/system/HttpServerModule.cpp
+++ b/src/core/system/HttpServerModule.cpp
@@ -5,13 +5,13 @@
 ///
 /// @moreinfo
 ///
-/// ## Why an upload needs two timeouts
+/// ## Why a drained body needs two timeouts
 ///
-/// The upload drain blocks rendering on `tick20ms()` until the transfer ends or a bound trips, which is accepted for a user-initiated transient upload.
+/// A file upload moves through a transfer slot a bounded slice per tick and blocks nothing. A state document and a firmware image drain whole, blocking `tick20ms()` until the body ends or a bound trips.
 ///
-/// `kUploadIdleMs` resets on every read so a steady upload never trips it, and `kUploadHardMs` caps the whole request so a slowloris trickle cannot hold the freeze open.
+/// `kUploadIdleMs` resets on every read so a steady body never trips it, and `kUploadHardMs` caps the whole request so a slowloris trickle cannot hold the freeze open.
 ///
-/// The hard cap sits above a legitimate worst case of 256 KB at ~50 KB/s, about 5 s.
+/// The idle bound sits under the 12 s watchdog, and the hard cap far above a legitimate worst case: a 32 KB state document arrives in well under a second.
 ///
 /// ## Why firmware gets a larger ceiling
 ///
@@ -112,7 +112,7 @@ void HttpServerModule::release() {
     for (auto& st : streams_) endStream(st);
     for (auto& ws : wsClients_) ws.close();
     for (auto& c : parked_) c.close();
-    releaseSdTransfers();
+    releaseTransfers();
     // Every close site notifies the producer (see cancelBufferedSend), else ghost standing requests keep the driver gathering frames for nobody.
     for (int i = 0; i < MAX_PREVIEW_CLIENTS; i++) {
         if (previewClients_[i].valid() && clientSink_) clientSink_->onClientGone(i);
@@ -142,7 +142,7 @@ void HttpServerModule::tick20ms() MM_NONBLOCKING {
         if (soonCount_) pushSoonPatch();
     }
     serveConnections();
-    if constexpr (platform::hasSdCard) driveSdTransfers();   // sdTransfers_ has zero slots otherwise, so there is nothing to drive
+    driveTransfers();
 }
 
 // One entry from the tick, so the connection work, which blocks by nature, is one call on the render path.
@@ -182,40 +182,48 @@ void HttpServerModule::serveParked() {
     }
 }
 
-HttpServerModule::SdTransfer* HttpServerModule::claimSdTransfer() {
-    for (auto& t : sdTransfers_) if (!t.active) return &t;
-    return nullptr;   // both slots busy: the caller answers 503/closes rather than blocking for one to free
+// The buffer lives from claim to finishTransfer, so idle slots cost nothing; internal RAM, since the SD host bounces a PSRAM buffer per sector.
+HttpServerModule::FileTransfer* HttpServerModule::claimTransfer(platform::TcpConnection& conn) {
+    for (auto& t : transfers_) {
+        if (t.active) continue;
+        t.buf = static_cast<char*>(platform::allocInternal(kTransferBufBytes));
+        if (t.buf) return &t;
+        sendResponse(conn, 507, "application/json", "{\"error\":\"out of memory\"}");
+        return nullptr;
+    }
+    // Both slots busy: answered rather than blocking for one to free.
+    sendResponse(conn, 503, "application/json", "{\"error\":\"another transfer is in progress\"}");
+    return nullptr;
 }
 
-void HttpServerModule::finishSdTransfer(SdTransfer& t, bool closeConn) {
+void HttpServerModule::finishTransfer(FileTransfer& t, bool closeConn) {
     if (closeConn) t.conn.close();
     t.active = false;
     t.wstream = platform::FsWriteStream{};
     t.rstream = platform::FsReadStream{};
+    if (t.buf) { platform::free(t.buf); t.buf = nullptr; }
 }
 
-// release()'s own cleanup: an active slot holds a FIL (or its desktop equivalent) and a socket, neither freed by going out of scope.
-void HttpServerModule::releaseSdTransfers() {
-    if constexpr (platform::hasSdCard) {
-        for (auto& t : sdTransfers_) {
-            if (!t.active) continue;
-            if (t.isUpload) platform::fsWriteStreamClose(t.wstream, false);
-            else platform::fsReadStreamClose(t.rstream);
-            finishSdTransfer(t, true);
-        }
+// release()'s own cleanup: an active slot holds a file handle, a socket and a buffer, none freed by going out of scope.
+void HttpServerModule::releaseTransfers() {
+    for (auto& t : transfers_) {
+        if (!t.active) continue;
+        if (t.isUpload) platform::fsWriteStreamClose(t.wstream, false);
+        else platform::fsReadStreamClose(t.rstream);
+        finishTransfer(t, true);
     }
 }
 
-// An upload slot's bounded chunk, socket to card then the stall guard; uses t.buf, not a stack-local, since a 4 KB frame here once panicked the board.
-bool HttpServerModule::driveSdUpload(SdTransfer& t, uint32_t now) {
+// An upload slot's bounded chunk, socket to storage then the stall guard; uses t.buf, not a stack-local, since a 4 KB frame here once panicked the board.
+bool HttpServerModule::driveUpload(FileTransfer& t, uint32_t now) {
     if (t.remaining > 0) {
-        const size_t want = t.remaining < sizeof(t.buf) ? t.remaining : sizeof(t.buf);
+        const size_t want = t.remaining < kTransferBufBytes ? t.remaining : kTransferBufBytes;
         const int n = t.conn.read(reinterpret_cast<uint8_t*>(t.buf), want);
         if (n > 0) {
             if (!platform::fsWriteStreamWrite(t.wstream, t.buf, static_cast<size_t>(n))) {
                 platform::fsWriteStreamClose(t.wstream, false);
                 sendResponse(t.conn, 500, "application/json", "{\"error\":\"write failed\"}");
-                finishSdTransfer(t, true);
+                finishTransfer(t, true);
                 return false;
             }
             t.remaining -= static_cast<size_t>(n);
@@ -224,37 +232,38 @@ bool HttpServerModule::driveSdUpload(SdTransfer& t, uint32_t now) {
         }
         if (n == 0) {   // peer closed with body remaining
             platform::fsWriteStreamClose(t.wstream, false);
-            finishSdTransfer(t, true);   // the peer is already gone: no response to send
+            finishTransfer(t, true);   // the peer is already gone: no response to send
             return false;
         }
     }
     if (t.active && t.remaining == 0) {
         const bool ok = platform::fsWriteStreamClose(t.wstream, true);
+        if (ok) applyFileChanged(t.path);   // the write succeeded, so what was built from it may be stale
         sendResponse(t.conn, ok ? 200 : 500, "application/json",
                     ok ? "{\"ok\":true}" : "{\"error\":\"write failed\"}");
-        finishSdTransfer(t, true);
+        finishTransfer(t, true);
         return false;
     }
     // A liveness guard, not a size or time cap on the transfer itself: only a stalled peer trips it.
-    if (t.active && now - t.lastActivityMs > kSdTransferStallMs) {
+    if (t.active && now - t.lastActivityMs > kTransferStallMs) {
         platform::fsWriteStreamClose(t.wstream, false);
-        finishSdTransfer(t, true);
+        finishTransfer(t, true);
     }
     return false;
 }
 
-// A download slot's bounded chunk: card to socket, resuming where last tick's writeSome left off.
-bool HttpServerModule::driveSdDownload(SdTransfer& t, uint32_t now) {
+// A download slot's bounded chunk: storage to socket, resuming where last tick's writeSome left off.
+bool HttpServerModule::driveDownload(FileTransfer& t, uint32_t now) {
     if (t.bufSent < t.bufLen) {
         const int n = t.conn.writeSome(reinterpret_cast<const uint8_t*>(t.buf + t.bufSent),
                                        t.bufLen - t.bufSent);
-        if (n < 0) { platform::fsReadStreamClose(t.rstream); finishSdTransfer(t, true); return false; }
+        if (n < 0) { platform::fsReadStreamClose(t.rstream); finishTransfer(t, true); return false; }
         if (n > 0) { t.bufSent += static_cast<size_t>(n); t.lastActivityMs = now; return true; }
         // n == 0: socket buffer full, nothing sent; falls through to the stall guard below.
     } else if (t.remaining > 0) {
-        const size_t want = t.remaining < sizeof(t.buf) ? t.remaining : sizeof(t.buf);
+        const size_t want = t.remaining < kTransferBufBytes ? t.remaining : kTransferBufBytes;
         const int got = platform::fsReadStreamRead(t.rstream, t.buf, want);
-        if (got <= 0) { platform::fsReadStreamClose(t.rstream); finishSdTransfer(t, true); return false; }
+        if (got <= 0) { platform::fsReadStreamClose(t.rstream); finishTransfer(t, true); return false; }
         t.bufLen = static_cast<size_t>(got);
         t.bufSent = 0;
         t.remaining -= static_cast<size_t>(got);
@@ -262,28 +271,28 @@ bool HttpServerModule::driveSdDownload(SdTransfer& t, uint32_t now) {
         return true;
     } else {
         platform::fsReadStreamClose(t.rstream);
-        finishSdTransfer(t, true);
+        finishTransfer(t, true);
         return false;
     }
     // A liveness guard, not a size or time cap on the transfer itself: only a stalled peer trips it.
-    if (t.active && now - t.lastActivityMs > kSdTransferStallMs) {
+    if (t.active && now - t.lastActivityMs > kTransferStallMs) {
         platform::fsReadStreamClose(t.rstream);
-        finishSdTransfer(t, true);
+        finishTransfer(t, true);
     }
     return false;
 }
 
 // Several bounded chunks per slot per tick, not one, dispatched to the upload or download leg while storage and the peer keep up; mirrors drainPreviewSend/drainStateSend's non-blocking shape.
-void HttpServerModule::driveSdTransfers() {
+void HttpServerModule::driveTransfers() {
     const uint32_t budgetStart = platform::millis();
-    for (auto& t : sdTransfers_) {
+    for (auto& t : transfers_) {
         if (!t.active) continue;
         for (;;) {
             const uint32_t now = platform::millis();
-            const bool progressed = t.isUpload ? driveSdUpload(t, now) : driveSdDownload(t, now);
+            const bool progressed = t.isUpload ? driveUpload(t, now) : driveDownload(t, now);
             if (!t.active) break;           // finished or failed this chunk
             if (!progressed) break;         // no data moved: nothing more to do until next tick
-            if (now - budgetStart >= kSdTransferTickBudgetMs) break;
+            if (now - budgetStart >= kTransferTickBudgetMs) break;
         }
     }
 }
@@ -357,7 +366,8 @@ bool HttpServerModule::handleConnection(platform::TcpConnection& conn, int patie
         if (clh) {
             hasContentLen = true;
             // An /sd upload rides FAT32's own ceiling, 4 GiB-1 (UINT32_MAX), via strtoull not strtoul: `unsigned long` is only 32-bit on this RV32 target, the same width as that ceiling itself.
-            const bool sdUpload = std::strncmp(req, "POST /api/file", 14) == 0 && requestNamesSdPath(req);
+            const bool fileUpload = std::strncmp(req, "POST /api/file", 14) == 0;
+            const bool sdUpload = fileUpload && requestNamesSdPath(req);
             const unsigned long long kContentLenMax = sdUpload ? 0xFFFFFFFFULL : 8ULL * 1024 * 1024;
             const char* valStart = clh + 15;
             while (*valStart == ' ' || *valStart == '\t') valStart++;   // skip OWS after the colon
@@ -379,14 +389,13 @@ bool HttpServerModule::handleConnection(platform::TcpConnection& conn, int patie
                 return true;
             }
             contentLen = static_cast<size_t>(parsed);
-            if (sdUpload) {
-                // Hand off early: the chunked SD-transfer driver pulls the rest off this same connection, a bounded slice per tick, rather than looping here for the whole body.
+            if (fileUpload) {
+                // Hand off early: a transfer slot pulls the rest off this same connection, a bounded slice per tick, rather than looping here for the whole body.
             } else {
                 const size_t headerSize = static_cast<size_t>(headerEnd + 4 - req);
                 size_t bodyNeeded = headerSize + contentLen;
                 // Only streaming routes pull a body larger than buf off the socket; every other route parses it whole, so an oversized body gets 413, never a truncated read.
                 const bool isStreamingRoute =
-                    std::strncmp(req, "POST /api/file", 14) == 0 ||
                     std::strncmp(req, "POST /api/firmware/upload", 25) == 0 ||
                     // A MoonBase image (~750 KB) streams too; the trailing space keeps `moonbase-update-url`, a small JSON body read whole, out of the match.
                     std::strncmp(req, "POST /api/firmware/moonbase-update ", 35) == 0 ||
@@ -502,7 +511,7 @@ bool HttpServerModule::handleConnection(platform::TcpConnection& conn, int patie
             handleApplyState(conn, body, static_cast<size_t>(totalRead) - static_cast<size_t>(body - req),
                              static_cast<size_t>(contentLen));
         } else if (std::strcmp(path, "/api/file") == 0 && body) {
-            // File Manager: POST /api/file?path=<rel> streams the body to an atomic write; `body` holds the buffered bytes and handleWriteFile pulls the rest off the socket.
+            // File Manager: POST /api/file?path=<rel> streams the body to an atomic write; `body` holds the bytes that came with the headers, and a transfer slot pulls the rest off the socket.
             const size_t initialLen = static_cast<size_t>(totalRead) - static_cast<size_t>(body - req);
             // No Content-Length (chunked) is 411, since acting on it would commit an empty file; keyed on header absence, so an explicit `Content-Length: 0` stays a valid empty write.
             if (!hasContentLen) {
@@ -777,16 +786,18 @@ void HttpServerModule::streamFsFile(platform::TcpConnection& conn, const char* p
         "HTTP/1.1 200 OK\r\nContent-Type: %s\r\nContent-Length: %lld\r\n%s"
         "Connection: close\r\nAccess-Control-Allow-Origin: *\r\n\r\n", mime, static_cast<long long>(size), extraHeaders);
 
-    // An /sd download hands off to the chunked driver, one bounded slice per tick. Claimed and opened before the header, so a busy slot or a failed open answers 503/500, not a 200 with no body.
+    // An /sd download hands off to the chunked driver, one bounded slice per tick. Claimed and opened before the header, so a busy slot, a missing buffer or a failed open answers 503/507/500, not a 200 with no body.
     if (platform::isSdPath(path)) {
-        SdTransfer* t = claimSdTransfer();
-        if (!t) { sendResponse(conn, 503, "application/json", "{\"error\":\"another SD transfer is in progress\"}"); return; }
+        FileTransfer* t = claimTransfer(conn);
+        if (!t) return;
         if (!platform::fsReadStreamOpen(t->rstream, path)) {
+            finishTransfer(*t, false);
             sendResponse(conn, 500, "application/json", "{\"error\":\"read failed\"}");
             return;
         }
         if (!conn.write(reinterpret_cast<const uint8_t*>(header), static_cast<size_t>(hn))) {
             platform::fsReadStreamClose(t->rstream);
+            finishTransfer(*t, false);
             return;
         }
         t->isUpload = false;
@@ -856,7 +867,7 @@ void HttpServerModule::serveHlsFile(platform::TcpConnection& conn, const char* n
 
 // Source for the streamed upload: the body bytes already in the request buffer, then the rest straight off the socket, so the device never holds the whole upload in RAM.
 namespace {
-// The drain blocks rendering, and the two bounds cap for how long: idle scales with a steady transfer, hard caps the total against a slowloris. @xref{why-an-upload-needs-two-timeouts}
+// The drain blocks rendering, and the two bounds cap for how long: idle scales with a steady transfer, hard caps the total against a slowloris. @xref{why-a-drained-body-needs-two-timeouts}
 constexpr uint32_t kUploadIdleMs = 5000;    // max gap between successful reads before abort
 constexpr uint32_t kUploadHardMs = 60000;   // absolute whole-request ceiling (anti-slowloris)
 // A firmware push is MB-scale and bounds a SLOW transfer where kUploadIdleMs bounds a stalled one, kept tight because it caps the render freeze. @xref{why-firmware-gets-a-larger-ceiling}
@@ -925,47 +936,30 @@ void HttpServerModule::handleApplyState(platform::TcpConnection& conn, const cha
     sendResponse(conn, r.ok ? 200 : 400, "application/json", sink.overflowed() ? "{\"error\":\"out of memory\"}" : sink.data());
 }
 
-// The /sd leg of handleWriteFile: claims a slot, opens the stream, writes the body already buffered, and leaves the rest to driveSdTransfers.
-void HttpServerModule::handleWriteFileSd(platform::TcpConnection& conn, const char* path,
-                                         const char* initialBody, size_t initialLen, size_t contentLen) {
-    // Reject up front if it would not fit the card, rather than failing mid-write; free is taken conservatively, with no credit for an overwrite. Without hasSdCard, claimSdTransfer answers 503.
-    if constexpr (platform::hasSdCard) {
-        if (!platform::sdCardMounted()) {
-            sendResponse(conn, 503, "application/json", "{\"error\":\"no card mounted\"}");
-            return;
-        }
-        const uint64_t total = platform::sdCardTotal();
-        const uint64_t used = platform::sdCardUsed();
-        const uint64_t freeBytes = total > used ? total - used : 0;
-        if (total > 0 && contentLen > freeBytes) {
-            char msg[96];
-            std::snprintf(msg, sizeof(msg), "{\"error\":\"not enough space (%llu free)\"}",
-                          static_cast<unsigned long long>(freeBytes));
-            sendResponse(conn, 507, "application/json", msg);
-            return;
-        }
-    }
-    SdTransfer* t = claimSdTransfer();
-    if (!t) {
-        sendResponse(conn, 503, "application/json", "{\"error\":\"another SD transfer is in progress\"}");
-        return;
-    }
+// Claims a slot, opens the stream, writes the body already buffered, and leaves the rest to driveTransfers; the response goes out once the file commits.
+void HttpServerModule::startUpload(platform::TcpConnection& conn, const char* path,
+                                   const char* initialBody, size_t initialLen, size_t contentLen) {
+    FileTransfer* t = claimTransfer(conn);
+    if (!t) return;
     if (!platform::fsWriteStreamOpen(t->wstream, path)) {
+        finishTransfer(*t, false);
         sendResponse(conn, 500, "application/json", "{\"error\":\"write failed\"}");
         return;
     }
-    // Whatever of the body already arrived in the request buffer lands now; the rest is pulled off the socket a bounded slice per tick, by driveSdTransfers.
+    // Hand the stream at most Content-Length of the buffered bytes, since a pipelined next request may follow the body and must not land in the file.
     const size_t initial = initialLen < contentLen ? initialLen : contentLen;
     if (initial > 0 && !platform::fsWriteStreamWrite(t->wstream, initialBody, initial)) {
         platform::fsWriteStreamClose(t->wstream, false);
+        finishTransfer(*t, false);
         sendResponse(conn, 500, "application/json", "{\"error\":\"write failed\"}");
         return;
     }
+    std::snprintf(t->path, sizeof(t->path), "%s", path);
     t->isUpload = true;
     t->remaining = contentLen - initial;
     t->lastActivityMs = platform::millis();
     t->active = true;
-    t->conn = std::move(conn);   // the response lands once driveSdTransfers sees remaining reach 0
+    t->conn = std::move(conn);
 }
 
 void HttpServerModule::handleWriteFile(platform::TcpConnection& conn, const char* query,
@@ -975,35 +969,32 @@ void HttpServerModule::handleWriteFile(platform::TcpConnection& conn, const char
         sendResponse(conn, 400, "application/json", "{\"error\":\"bad path\"}");
         return;
     }
+    // Reject up front if it would not fit, rather than failing mid-write; free is taken conservatively, with no credit for an overwrite.
+    uint64_t total = 0, used = 0;
     if (platform::isSdPath(path)) {
-        handleWriteFileSd(conn, path, initialBody, initialLen, contentLen);
-        return;
-    }
-    if (contentLen > kUploadMax) {
-        sendResponse(conn, 413, "application/json", "{\"error\":\"file too large\"}");
-        return;
+        if (!platform::sdCardMounted()) {
+            sendResponse(conn, 503, "application/json", "{\"error\":\"no card mounted\"}");
+            return;
+        }
+        total = platform::sdCardTotal();
+        used = platform::sdCardUsed();
+    } else {
+        if (contentLen > kUploadMax) {
+            sendResponse(conn, 413, "application/json", "{\"error\":\"file too large\"}");
+            return;
+        }
+        total = platform::filesystemTotal();
+        used = platform::filesystemUsed();
     }
-    // Reject up front if it would not fit the free space, rather than failing mid-write; free is taken conservatively, with no credit for an overwrite.
-    const size_t total = platform::filesystemTotal();
-    const size_t used = platform::filesystemUsed();
-    const size_t freeBytes = total > used ? total - used : 0;
+    const uint64_t freeBytes = total > used ? total - used : 0;
     if (total > 0 && contentLen > freeBytes) {
         char msg[96];
-        std::snprintf(msg, sizeof(msg), "{\"error\":\"not enough space (%lu free)\"}",
-                      static_cast<unsigned long>(freeBytes));
+        std::snprintf(msg, sizeof(msg), "{\"error\":\"not enough space (%llu free)\"}",
+                      static_cast<unsigned long long>(freeBytes));
         sendResponse(conn, 507, "application/json", msg);   // 507 Insufficient Storage
         return;
     }
-    // Hand the source at most Content-Length of the buffered bytes, since a pipelined next request may follow the body and must not land in the file.
-    const size_t initial = initialLen < contentLen ? initialLen : contentLen;
-    UploadSource src{&conn, initialBody, initial, contentLen,
-                     platform::millis() + kUploadHardMs};
-    if (platform::fsWriteStream(path, &uploadPull, &src)) {
-        applyFileChanged(path);   // the write succeeded, so what was built from it may be stale
-        sendResponse(conn, 200, "application/json", "{\"ok\":true}");
-    } else {
-        sendResponse(conn, 500, "application/json", "{\"error\":\"write failed\"}");
-    }
+    startUpload(conn, path, initialBody, initialLen, contentLen);
 }
 
 // See the header for WHY this exists and why it is whole-tree. Here is only the how.
@@ -1344,7 +1335,7 @@ HttpServerModule::LeafHash* HttpServerModule::findLeaf(uint32_t pathHash) {
 }
 
 void HttpServerModule::baselineLeafHashes(bool everything) {
-    // Count the leaves and the modules, size the hashes and the patch slices exactly, then fill from scratch, since resize does not preserve; this runs on a resync, not each second.
+    // Count leaves and modules, size the hashes and patch slices exactly, then fill from scratch, since resize does not preserve; a resync, not each second.
     uint16_t n = 0, modules = 0;
     const MoonModule* last = nullptr;
     forEachStateLeaf([&](const MoonModule* mod, uint32_t, uint32_t, const char*, JsonSink&) {
@@ -3010,7 +3001,7 @@ bool HttpServerModule::nextStreamFrame(int client) {
     return true;
 }
 
-// Per client, the fragment in flight goes out a chunk at a time and the next is generated once it has left; core-0 only, so unlike the preview slot it needs no sender lease.
+// Per client, the fragment in flight leaves a chunk at a time and the next is generated after it; core-0 only, so it needs no sender lease.
 void HttpServerModule::drainStateSend() {
     const size_t chunk = drainChunkBytes();
     for (int i = 0; i < MAX_WS_CLIENTS; i++)
diff --git a/src/core/system/HttpServerModule.h b/src/core/system/HttpServerModule.h
index d62114275..05caecd4c 100644
--- a/src/core/system/HttpServerModule.h
+++ b/src/core/system/HttpServerModule.h
@@ -389,36 +389,37 @@ class HttpServerModule : public MoonModule, public BinaryBroadcaster {
     platform::TcpConnection parked_[kParkedSlots];
     uint32_t parkedAt_[kParkedSlots] = {};
 
-    // A large /sd transfer resumes here across ticks, a bounded slice at a time, drainPreviewSend's shape; flash stays on the synchronous path below, small enough for one tick.
-    struct SdTransfer {
+    // Every upload, and every /sd download, resumes here across ticks, a bounded slice at a time, drainPreviewSend's shape: neither a large file nor a slow client holds the render loop.
+    struct FileTransfer {
         bool active = false;
         bool isUpload = false;
         platform::TcpConnection conn;
         platform::FsWriteStream wstream;   // valid while isUpload
         platform::FsReadStream  rstream;   // valid while !isUpload
         size_t remaining = 0;              // upload: body bytes still expected; download: bytes left to send
-        char buf[4096] = {};               // download only: one read chunk, drained across ticks by writeSome
-        size_t bufLen = 0;
+        char* buf = nullptr;               // kTransferBufBytes from the claim to the finish, so an idle server holds none
+        size_t bufLen = 0;                 // download only: the read chunk, drained across ticks by writeSome
         size_t bufSent = 0;
         uint32_t lastActivityMs = 0;       // a stall guard, not a size or time cap on the transfer itself
+        char path[160] = {};               // upload only: the file applyFileChanged announces once it commits
     };
-    // Zero slots, not two, on a board without SD: std::array<T,0> is standard, constructs no SdTransfer at all, and every loop over it already runs zero times.
-    static constexpr int kSdTransferSlots = platform::hasSdCard ? 2 : 0;
-    static constexpr uint32_t kSdTransferStallMs = 10000;   // no progress this long: abort, free the slot
-    static constexpr uint32_t kSdTransferTickBudgetMs = 3;  // several chunks while storage/peer keep up, not one
-    std::array<SdTransfer, kSdTransferSlots> sdTransfers_{};
-    /// A free slot for a new transfer, or null when every slot is busy.
-    SdTransfer* claimSdTransfer();
+    static constexpr int kTransferSlots = 2;
+    static constexpr size_t kTransferBufBytes = 4096;
+    static constexpr uint32_t kTransferStallMs = 10000;   // no progress this long: abort, free the slot
+    static constexpr uint32_t kTransferTickBudgetMs = 3;  // several chunks while storage/peer keep up, not one
+    std::array<FileTransfer, kTransferSlots> transfers_{};
+    /// A free slot with its buffer, or null once it has answered: 503 when both slots are busy, 507 when the buffer does not fit.
+    FileTransfer* claimTransfer(platform::TcpConnection& conn);
     /// Advance every active slot by one bounded chunk; called once per tick, the drainXxxSend's sibling.
-    void driveSdTransfers();
-    /// One upload slot's bounded chunk: socket to card, then the stall guard. Returns whether real bytes moved.
-    bool driveSdUpload(SdTransfer& t, uint32_t now);
-    /// One download slot's bounded chunk: card to socket, then the stall guard. Returns whether real bytes moved.
-    bool driveSdDownload(SdTransfer& t, uint32_t now);
-    /// Close the stream (already done by the caller) and the connection, and free the slot.
-    void finishSdTransfer(SdTransfer& t, bool closeConn);
+    void driveTransfers();
+    /// One upload slot's bounded chunk: socket to storage, then the stall guard. Returns whether real bytes moved.
+    bool driveUpload(FileTransfer& t, uint32_t now);
+    /// One download slot's bounded chunk: storage to socket, then the stall guard. Returns whether real bytes moved.
+    bool driveDownload(FileTransfer& t, uint32_t now);
+    /// Close the connection when asked, free the buffer and the slot; the caller closed the stream.
+    void finishTransfer(FileTransfer& t, bool closeConn);
     /// Close every active slot's stream and socket; release()'s own cleanup, since going out of scope frees neither.
-    void releaseSdTransfers();
+    void releaseTransfers();
 
     ClientMessageSink* clientSink_ = nullptr;   // the producer's inbound-message sink (PreviewDriver) @xref{crossing-the-domain-boundary}
 
@@ -615,12 +616,12 @@ class HttpServerModule : public MoonModule, public BinaryBroadcaster {
                       const char* extraHeaders);
     /// One HLS artifact (playlist / segment) from /.hls/, video MIME + no-cache; flat names only.
     void serveHlsFile(platform::TcpConnection& conn, const char* name);
-    // Streams the remainder off the socket, so an upload of any size never needs one buffer.
+    // Checks an upload against its storage's limits, then streams it through a transfer slot, so an upload of any size never needs one buffer.
     void handleWriteFile(platform::TcpConnection& conn, const char* query,
                          const char* initialBody, size_t initialLen, size_t contentLen);
-    // The /sd leg of handleWriteFile: claims a transfer slot and hands the rest to driveSdTransfers.
-    void handleWriteFileSd(platform::TcpConnection& conn, const char* path,
-                           const char* initialBody, size_t initialLen, size_t contentLen);
+    // Claims a transfer slot for a checked upload, writes the bytes already buffered and hands the rest to driveTransfers.
+    void startUpload(platform::TcpConnection& conn, const char* path,
+                     const char* initialBody, size_t initialLen, size_t contentLen);
     // One directory's children, single-level, which is what the lazy tree loads a node from.
     void serveDirListing(platform::TcpConnection& conn, const char* query);
     void handleMakeDir(platform::TcpConnection& conn, const char* query);      // POST /api/dir?path=
diff --git a/src/core/system/NetworkModule.h b/src/core/system/NetworkModule.h
index 494edd7fe..a6c57adb0 100644
--- a/src/core/system/NetworkModule.h
+++ b/src/core/system/NetworkModule.h
@@ -10,6 +10,7 @@
 #include "core/system/WiFiModule.h"
 #include "core/system/AccessPointModule.h"
 #include "core/util/CaptivePortal.h"
+#include "core/util/JoinWindow.h"   // kStaGraceMs, kDhcpWaitMs: the windows the provisioning answer shares
 #include "platform/platform.h"
 
 #include <cstdio>
@@ -28,8 +29,7 @@ inline bool addressCounts(const uint8_t ip[4], bool buildHasWiFi, const uint8_t*
 
 /// All device connectivity, cascading from Ethernet through WiFi to an access point: @xref{the-cascade}.
 ///
-/// Network holds the cascade, its mode and mDNS; each interface's settings are on its own card below it: Ethernet, WiFi and the access point.
-/// A desktop builds the same cards over stubs, so they can be shown and tested, and reports no network of its own.
+/// Network holds the cascade, its mode and mDNS; each interface's settings are on its own card: Ethernet, WiFi and the access point. A desktop builds the same cards over stubs.
 /// @card NetworkModule.png
 ///
 /// @moreinfo
@@ -40,9 +40,9 @@ inline bool addressCounts(const uint8_t ip[4], bool buildHasWiFi, const uint8_t*
 ///
 /// ## A link-local address is a last resort
 ///
-/// With no DHCP server the client gives itself a 169.254.x.y address (RFC 3927), so a laptop on the same cable still reaches the device by name. It counts as connected only on a build without WiFi, where it is the one way in.
-/// Where WiFi exists it never displaces the cascade: a cable on a network without DHCP would otherwise switch off a working WiFi path or the access point.
-/// A 169.254 address the user set as static is a choice, not a fallback, so it counts everywhere, while a self-assigned one beside a static setting still does not.
+/// With no DHCP server the client takes a 169.254.x.y address (RFC 3927), the one way in on a build without WiFi; where WiFi exists it never displaces the cascade.
+///
+/// A 169.254 address the user set as static is a choice rather than a fallback, so it counts everywhere.
 ///
 /// The device name belongs to the system module, and is the one identity behind every name. It registers before the light pipeline, which then sees the real remaining heap.
 class NetworkModule : public MoonModule {
@@ -279,7 +279,7 @@ class NetworkModule : public MoonModule {
         // Pinned during bring-up, since a network without a server fires no event.
         if (!staUp()) applyStaStatic();
         if (staUp()) { onStaJoined(now); return; }
-        if (elapsed <= kStaGraceMs) return;
+        if (elapsed <= staWindowMs()) return;
         // A join asked for from the card says why there, and the known networks take over from the top; otherwise the next one is tried, then the fallback.
         const bool asked = wifi_ && wifi_->joinRequest();
         if (asked) {
@@ -369,7 +369,7 @@ class NetworkModule : public MoonModule {
             setStatus(statusBuf_, Severity::Warning);
             return;
         }
-        const uint32_t grace = releasing_ ? kDhcpWaitMs : kStaGraceMs;
+        const uint32_t grace = releasing_ ? kDhcpWaitMs : staWindowMs();
         if (now - lostTime_ <= grace) return;
         std::printf("NetworkModule: WiFi STA gone for %us, starting AP\n", static_cast<unsigned>(grace / 1000));
         restartMdns();
@@ -479,10 +479,8 @@ class NetworkModule : public MoonModule {
     uint32_t stateChangeTime_ = 0;
     /// When the carrying interface lost its address: a WiFi dropout the radio recovers from itself, or a re-lease.
     uint32_t lostTime_ = 0;
-    /// How long WiFi gets to connect or recover, the question being the same in both cases.
-    static constexpr uint32_t kStaGraceMs = 10000;
-    /// How long a lease may take: a live Ethernet link without an address, or an interface re-leasing after a switch to DHCP.
-    static constexpr uint32_t kDhcpWaitMs = 15000;
+    /// The station's window as it stands now, joined or not.
+    static uint32_t staWindowMs() MM_NONBLOCKING { return mm::staWindowMs(platform::wifiStaAssociated()); }
     /// The interface carrying the device is taking a lease the cascade itself asked for, so the gap is that wait rather than a dropout.
     bool releasing_ = false;
 
diff --git a/src/core/util/HostResolver.h b/src/core/util/HostResolver.h
index cffcb6743..dd58ae39b 100644
--- a/src/core/util/HostResolver.h
+++ b/src/core/util/HostResolver.h
@@ -13,9 +13,9 @@ namespace mm {
 
 /// A cache that answers a host name's last known address at once, while one low-priority task looks names up.
 ///
-/// The asking side runs on the render thread, so it only ever reads the cache: a lookup there would stall a frame for the resolver's timeout.
-/// A new name answers `Waiting` until it first resolves; a name that stops resolving answers `Stale` with its last address.
-/// Names are looked up again about once a minute, and the cache costs nothing until an owner with a name starts it.
+/// The asking side runs on the render thread and only reads the cache, since a lookup there stalls a frame; a new name answers `Waiting`, a failing one `Stale`.
+///
+/// A board with no worker task looks names up from the asking side instead, one non-blocking step per ask.
 class HostResolver {
 public:
     /// What the cache knows about a name.
@@ -32,7 +32,7 @@ class HostResolver {
         Self& s = self();
         if (s.slots) return;
         s.slots = new (std::nothrow) Slot[kSlots];
-        if (s.slots && !s.testMode) platform::spawnPinnedTask(s.task, "hosts", &run, &s, 5120, 1, -1);
+        if (s.slots && !s.testMode) s.inlineSteps = !platform::spawnPinnedTask(s.task, "hosts", &run, &s, 5120, 1, -1);
     }
 
     /// The name's address into `ip` when it is Resolved or Stale; the first ask queues a lookup, and nothing here allocates.
@@ -42,6 +42,7 @@ class HostResolver {
         LockGuard guard(s.lock);
         if (!guard) return State::Busy;
         const uint32_t now = platform::millis();
+        if (s.inlineSteps) step(s, now);
         Slot* free = nullptr;
         for (uint8_t i = 0; i < kSlots; i++) {
             Slot& slot = s.slots[i];
@@ -61,16 +62,20 @@ class HostResolver {
         return State::Waiting;
     }
 
-    // For a test's scope, replace the platform lookup with an empty cache and no task, so the test drives the passes itself.
+    // For a test's scope, an empty cache and no task: a blocking resolve driven by passes, or a non-blocking step each lookup drives.
     struct LookupForTest {
-        explicit LookupForTest(bool (*resolve)(const char*, uint8_t*)) { use(resolve); }
-        ~LookupForTest() { use(&platform::resolveHost); }   // so no later test inherits the fake
+        explicit LookupForTest(bool (*resolve)(const char*, uint8_t*)) { use(resolve, &platform::resolveHostStep, false); }
+        explicit LookupForTest(platform::LookupStep (*step)(const char*, uint8_t*)) { use(&platform::resolveHost, step, true); }
+        ~LookupForTest() { use(&platform::resolveHost, &platform::resolveHostStep, false); }   // so no later test inherits the fake
         LookupForTest(const LookupForTest&) = delete;
         LookupForTest& operator=(const LookupForTest&) = delete;
     private:
-        static void use(bool (*resolve)(const char*, uint8_t*)) {
+        static void use(bool (*resolve)(const char*, uint8_t*), platform::LookupStep (*step)(const char*, uint8_t*), bool inlineSteps) {
             Self& s = self();
             s.resolve = resolve;
+            s.resolveStep = step;
+            s.inlineSteps = inlineSteps;
+            s.inFlight = -1;
             s.testMode = true;
             ensureStarted();
             for (uint8_t i = 0; i < kSlots; i++) s.slots[i] = Slot{};
@@ -101,6 +106,9 @@ class HostResolver {
         TryLock lock;
         platform::WorkerTask task;
         bool (*resolve)(const char*, uint8_t*) = &platform::resolveHost;
+        platform::LookupStep (*resolveStep)(const char*, uint8_t*) = &platform::resolveHostStep;
+        bool inlineSteps = false;   ///< no worker task: lookup() drives the lookups
+        int8_t inFlight = -1;       ///< the slot the inline lookup in flight belongs to
         bool testMode = false;
     };
 
@@ -123,27 +131,48 @@ class HostResolver {
                 while (!s.lock.tryAcquire()) platform::yield();   // the asking side holds it for microseconds
                 Slot& slot = s.slots[i];
                 const uint32_t now = platform::millis();
-                // A name nobody asked for in ten minutes is freed rather than looked up forever.
-                if (slot.name[0] && now - slot.askedMs > kForgetMs) slot = Slot{};
-                const bool due = slot.name[0]
-                    && (!slot.looked || now - slot.lookedMs >= (slot.known ? kRefreshMs : kRetryMs));
+                const bool lookUp = due(slot, now);
                 std::memcpy(name, slot.name, sizeof(name));
                 s.lock.release();
-                if (!due) continue;
+                if (!lookUp) continue;
             }
             uint8_t ip[4] = {};
             const bool ok = s.resolve(name, ip);   // blocking, with the cache free
             while (!s.lock.tryAcquire()) platform::yield();
             Slot& slot = s.slots[i];
-            if (std::strcmp(slot.name, name) == 0) {   // the slot may have been reused meanwhile
-                slot.looked = true;
-                slot.lookedMs = platform::millis();
-                if (ok) { std::memcpy(slot.ip, ip, 4); slot.known = true; slot.stale = false; }
-                else if (slot.known) slot.stale = true;
-            }
+            if (std::strcmp(slot.name, name) == 0) settle(slot, ok, ip, platform::millis());   // the slot may have been reused meanwhile
             s.lock.release();
         }
     }
+
+    /// One non-blocking step on the asking side, with the cache held: continue the lookup in flight, else start the next name due.
+    static void step(Self& s, uint32_t now) {
+        if (s.inFlight < 0) {
+            for (uint8_t i = 0; i < kSlots && s.inFlight < 0; i++)
+                if (due(s.slots[i], now)) s.inFlight = static_cast<int8_t>(i);
+            if (s.inFlight < 0) return;
+        }
+        Slot& slot = s.slots[s.inFlight];
+        uint8_t ip[4] = {};
+        const platform::LookupStep r = slot.name[0] ? s.resolveStep(slot.name, ip) : platform::LookupStep::Failed;
+        if (r == platform::LookupStep::Pending) return;
+        if (slot.name[0]) settle(slot, r == platform::LookupStep::Resolved, ip, now);
+        s.inFlight = -1;
+    }
+
+    /// Whether a slot's name is due a lookup, freeing first a name nobody asked for in ten minutes rather than looking it up forever.
+    static bool due(Slot& slot, uint32_t now) {
+        if (slot.name[0] && now - slot.askedMs > kForgetMs) slot = Slot{};
+        return slot.name[0] && (!slot.looked || now - slot.lookedMs >= (slot.known ? kRefreshMs : kRetryMs));
+    }
+
+    /// Record a lookup's answer: the address when it resolved, else the last known one marked stale.
+    static void settle(Slot& slot, bool ok, const uint8_t ip[4], uint32_t now) {
+        slot.looked = true;
+        slot.lookedMs = now;
+        if (ok) { std::memcpy(slot.ip, ip, 4); slot.known = true; slot.stale = false; }
+        else if (slot.known) slot.stale = true;
+    }
 };
 
 }  // namespace mm
diff --git a/src/core/util/JoinWindow.h b/src/core/util/JoinWindow.h
new file mode 100644
index 000000000..c0d00636b
--- /dev/null
+++ b/src/core/util/JoinWindow.h
@@ -0,0 +1,19 @@
+#pragma once
+
+#include <cstdint>
+
+namespace mm {
+
+/// @defgroup JoinWindow How long a station gets to join a network
+/// @{
+/// The network cascade and the provisioning answer read the same windows, so a board tells the installer it failed exactly when it gives up itself.
+
+/// How long WiFi gets to join a network, first or again after a dropout.
+inline constexpr uint32_t kStaGraceMs = 10000;
+/// How long a lease may take: a live Ethernet link or a joined station without an address, or an interface re-leasing after a switch to DHCP.
+inline constexpr uint32_t kDhcpWaitMs = 15000;
+/// How long a station gets before the next network or the fallback. A joined station adds the lease's wait to the join's grace, as Ethernet waits on a live link.
+inline constexpr uint32_t staWindowMs(bool associated) { return associated ? kStaGraceMs + kDhcpWaitMs : kStaGraceMs; }
+
+/// @}
+}  // namespace mm
diff --git a/src/core/util/PictureFrame.h b/src/core/util/PictureFrame.h
new file mode 100644
index 000000000..e77df7e21
--- /dev/null
+++ b/src/core/util/PictureFrame.h
@@ -0,0 +1,17 @@
+#pragma once
+
+#include <cstdint>
+
+namespace mm {
+
+/// A picture as a source publishes it: RGB rows, top row first, three bytes a pixel.
+///
+/// `PictureService` produces it and `PictureEffect` samples it, so an effect never touches a capture device or a decoder.
+struct PictureFrame {
+    const uint8_t* rgb = nullptr;   ///< the pixels, null when there is no picture
+    uint16_t width = 0;             ///< pixels across
+    uint16_t height = 0;            ///< pixels down
+    uint32_t generation = 0;        ///< changes with the pixels or the size, so a consumer skips a picture it already sampled
+};
+
+}  // namespace mm
diff --git a/src/core/util/TeensyImage.h b/src/core/util/TeensyImage.h
index 2ddac6ce8..c2febbc60 100644
--- a/src/core/util/TeensyImage.h
+++ b/src/core/util/TeensyImage.h
@@ -4,16 +4,9 @@
 /// @{
 /// The checks an uploaded image passes before it may overwrite a Teensy's only program: a Teensy 4 image, a MoonLight one, and for the firmware the board runs.
 ///
-/// @moreinfo
+/// A wrong image leaves the board offline until a USB flash, so the checks are pure byte reads, which a host test drives with synthetic and real images.
 ///
-/// ## Pure, so a host test pins them
-///
-/// A Teensy holds one program, so a wrong image copied over it leaves the board off the network until a USB flash: these checks are all that stands between an upload and that.
-/// They read bytes alone, so they live here rather than in the platform file, and a host test drives them with synthetic and real images alike.
-///
-/// ## The caller passes the mark
-///
-/// The search takes its prefix from the caller's own mark, so the prefix occurs once in a firmware image and a literal here cannot be found in its place.
+/// The mark's prefix comes from the caller's own mark, so it occurs once in a firmware image and a literal here cannot be found in its place.
 
 #include <cstddef>
 #include <cstdint>
diff --git a/src/core/util/TryLock.h b/src/core/util/TryLock.h
index 3e751bb19..8089b8c9b 100644
--- a/src/core/util/TryLock.h
+++ b/src/core/util/TryLock.h
@@ -11,25 +11,25 @@ namespace mm {
 /// ## Only try-acquire, never a blocking lock
 ///
 /// The hot-path rule forbids a render or encode thread blocking on a peer, so a caller that loses the race skips its slot rather than waiting.
-/// That single constraint is what lets this be a test-and-set on the one type the standard guarantees lock-free, rather than an operating-system mutex.
-/// With no waiting there is nothing to sleep on, nothing to wake, and no priority to inherit.
-/// So it costs one atomic read-modify-write with no system call, and needs no lifecycle.
+/// With nothing to sleep on or wake, each side is one atomic read-modify-write, with no mutex, no lifecycle and no recursion.
 ///
-/// It is not recursive: a thread already holding it must not re-acquire, which the test would refuse.
+/// ## Release is an exchange too, not a store
+///
+/// On an ESP32 with PSRAM, a read-modify-write on external memory is emulated as a read and a write under a lock that a plain store bypasses.
+/// A release landing between the two is overwritten, leaving the latch set with no owner, so release is an exchange, under the same lock.
 ///
 /// ## Why it lives in core rather than the platform layer
 ///
-/// It is portable code with no hardware backing, so it fails that layer's charter, which is the one place hardware interfaces are allowed.
-/// Domain-neutral and reusable, so any module coordinating two threads over one resource can take it.
+/// It is portable code with no hardware behind it, so it fails the platform layer's charter, and any module coordinating two threads can take it.
 class TryLock {
 public:
     /// Take the latch when it is free, false when another thread holds it.
-    bool tryAcquire() { return !flag_.test_and_set(std::memory_order_acquire); }
-    /// Give it back.
-    void release() { flag_.clear(std::memory_order_release); }
+    bool tryAcquire() { return !flag_.exchange(true, std::memory_order_acquire); }
+    /// Give it back, as a read-modify-write: @xref{release-is-an-exchange-too-not-a-store}.
+    void release() { flag_.exchange(false, std::memory_order_release); }
 
 private:
-    std::atomic_flag flag_ = ATOMIC_FLAG_INIT;
+    std::atomic<bool> flag_{false};
 };
 
 /// A scope guard releasing on exit and doing nothing when the latch was busy, the standard try-to-lock shape.
diff --git a/src/light/drivers/Drivers.h b/src/light/drivers/Drivers.h
index afd634236..5883072a9 100644
--- a/src/light/drivers/Drivers.h
+++ b/src/light/drivers/Drivers.h
@@ -552,6 +552,7 @@ class Drivers : public MoonModule, public LightOutput {
             outputBuffer_.free();
         }
         setDynamicBytes(outputBuffer_.bytes());
+        wiredLast_ = false;   // a reallocated output holds no frame yet
 
         // Decided from the alloc OUTCOME, so a board that cannot claim the buffer runs inline.
         const bool shouldSplit = splitWanted && outputBuffer_.data();
@@ -588,30 +589,41 @@ class Drivers : public MoonModule, public LightOutput {
         }
         // Resolved ONCE: both single-layer branches need it, and an if-init shadowed the outer one.
         Layer* srcLayer = effects_ ? effects_->firstEnabledLayer() : layer_;
+        // A frame already in wiring order, which goes to the output as it is: one copy, whatever the layout.
+        EffectBase* const wired = outputBuffer_.data() && srcLayer ? srcLayer->wiringSource() : nullptr;
+        composite(srcLayer, wired);
+        wiredLast_ = wired != nullptr;
+        // A socket write still lands in lwIP on core 0, so core 1 builds and core 0 sends.
+        if (renderSplitActive_) {
+            encodeDone_.store(false, std::memory_order_release);
+            platform::notifyTask(encodeTask_);
+            tickNonDriverChildren();
+        } else {
+            MoonModule::tick();   // parent already composited; base ticks all children
+        }
+    }
 
-        if (outputBuffer_.data() && effects_ && effects_->enabledLayerCount() > 1) {
-            // The bottom layer overwrites; each one above blends per its own mode and opacity: @xref{the-shared-output-buffer}.
+    /// Fill the shared output from the layers: blended when several, a wiring-order frame as it is, else the one layer mapped. @xref{the-shared-output-buffer}
+    void composite(Layer* srcLayer, EffectBase* wired) MM_NONBLOCKING {
+        if (!outputBuffer_.data()) return;   // the drivers read the layer's buffer directly
+        if (effects_ && effects_->enabledLayerCount() > 1) {
+            // The bottom layer overwrites; each one above blends per its own mode and opacity.
             effects_->forEachEnabledLayer([&](Layer* L, bool first) {
                 BlendOp op = first ? BlendOp::Overwrite : L->blendOp();
                 uint8_t op_opacity = first ? 255 : L->opacity;
                 blendMap(L->buffer(), outputBuffer_, L->lut(), L->channelsPerLight(),
                          op, op_opacity, /*clearFirst=*/first);
             });
-        } else if (outputBuffer_.data() && srcLayer && srcLayer->lut().hasLUT()) {
-            // One layer with a LUT: map its logical buffer into physical space.
-            blendMap(srcLayer->buffer(), outputBuffer_, srcLayer->lut(), srcLayer->channelsPerLight());
-        } else if (renderSplitActive_ && outputBuffer_.data() && srcLayer) {
-            // Copied even in the identity case: core 1 must not read a buffer core 0 is mutating.
-            blendMap(srcLayer->buffer(), outputBuffer_, srcLayer->lut(), srcLayer->channelsPerLight());
+            return;
         }
-        // A socket write still lands in lwIP on core 0, so core 1 builds and core 0 sends.
-        if (renderSplitActive_) {
-            encodeDone_.store(false, std::memory_order_release);
-            platform::notifyTask(encodeTask_);
-            tickNonDriverChildren();
-        } else {
-            MoonModule::tick();   // parent already composited; base ticks all children
+        if (wired) {
+            // Whole the first time, since the output held the mapped frame or a fresh allocation.
+            wired->copyWiringFrame(outputBuffer_.data(), outputBuffer_.bytes(), !wiredLast_);
+            return;
         }
+        // A mapped layer goes through its LUT; an identity one is copied only for the split, as core 1 must not read a buffer core 0 is mutating.
+        if (srcLayer && (srcLayer->lut().hasLUT() || renderSplitActive_))
+            blendMap(srcLayer->buffer(), outputBuffer_, srcLayer->lut(), srcLayer->channelsPerLight());
     }
 
     // This container picks the SIDE; core's one tickChildren loop still applies the rule.
@@ -638,6 +650,7 @@ class Drivers : public MoonModule, public LightOutput {
     std::atomic<bool> encodeStop_{false};  // stop flag the worker fn observes via a woken waitNotify
                                            // atomic, not volatile: volatile is no thread primitive
     bool renderSplitActive_ = false;   // the split is engaged (task spawned, boundary in effect)
+    bool wiredLast_ = false;   ///< the last frame went out as a wiring-order copy, so the output already holds it
     bool encodeStalled_ = false;       // a stall warning is showing, so recovery can clear it
     uint32_t renderWaitUs_ = 0;                 // last frame's core-0 wait at the boundary (the tick-line KPI)
     uint32_t renderWaitPeakUs_ = 0;             // worst wait in the current 1 s window (what the control shows)
diff --git a/src/light/drivers/NetworkSendDriver.h b/src/light/drivers/NetworkSendDriver.h
index eb0b076af..bbf1d6151 100644
--- a/src/light/drivers/NetworkSendDriver.h
+++ b/src/light/drivers/NetworkSendDriver.h
@@ -12,6 +12,8 @@
 #include "light/drivers/PinList.h"  // assignCounts: the same window-split idiom as ledsPerPin
 #include "platform/platform.h"
 
+#include <atomic>
+
 
 namespace mm {
 
@@ -25,13 +27,14 @@ namespace mm {
 ///
 /// ## Why unicast is the default
 ///
-/// Art-Net 4 requires unicast; broadcast survives here as legacy compatibility. A universe number lives in the payload rather than a header, so a receiver parses every packet before discarding the universes it lacks. Broadcast makes each host pay for all of them. The practical ceiling is near fifteen universes, measured on the bench where a large grid starved an ESP32's network stack.
-///
-/// Unicast duplicates nothing when each node owns a different slice, which is the normal case. The sender emits as many packets as a broadcast stream would, each reaching only its owner.
+/// Art-Net 4 requires unicast, broadcast surviving as legacy: a receiver parses every broadcast packet before dropping the universes it lacks, which starved an ESP32 near fifteen universes.
+/// Unicast duplicates nothing when each node owns its own slice, and a failed send drops only that packet, so one dark tube stalls nothing.
 ///
-/// ## Liveness
+/// ## Paced packets, sent from a task
 ///
-/// UDP is fire and forget, so a dead receiver is invisible. The send loop tolerates one rather than pretending to detect it. A failed send drops that packet, so one dark tube stalls nothing.
+/// A burst loses packets at an access point and at a wire-speed receiver, so `packet_gap` spaces them, the textbook traffic shaping. Over WiFi that received 96% where a burst lost a third.
+/// Waiting would stall the driver stage, so the tick hands the frame to a task, as an LED driver hands its frame to DMA, and skips frames meanwhile.
+/// A full transmit queue gets a backoff rather than more buffers. A gap of 0, a board without tasks, or an unwired correction sends the burst from the tick.
 ///
 /// @card NetworkSendDriver.png
 class NetworkSendDriver : public DriverBase {
@@ -82,6 +85,8 @@ class NetworkSendDriver : public DriverBase {
     uint16_t universeStart = 0;
     /// Send-rate ceiling (Hz); tick() rate-limits to this so a fast render tick doesn't flood the LAN.
     uint8_t fps = 50;
+    /// Microseconds between a frame's packets, shortened so a frame fits its `fps` period; 0 sends the frame as one burst. @xref{paced-packets-sent-from-a-task}
+    uint16_t packetGap = 500;
 
     /// Bind the protocol, the destinations, the universe offset, the window and the rate cap.
     void defineDriverControls() override {
@@ -99,6 +104,7 @@ class NetworkSendDriver : public DriverBase {
         controls_.addControl("universe_start", universeStart);
         addWindowControls();   // start / count: the slice of the shared buffer this sink sends
         controls_.addControl("fps", fps, 1, 120);
+        controls_.addControl("packet_gap", packetGap, 0, 5000);
     }
 
     /// Which controls route through the prepare sweep, so the corrected buffer is re-sized.
@@ -106,6 +112,7 @@ class NetworkSendDriver : public DriverBase {
         // Both are PARSED in prepare, so a change must re-run the sweep to re-derive the table.
         return std::strcmp(name, "hosts") == 0 || std::strcmp(name, "lightsPerHost") == 0
                || std::strcmp(name, "protocol") == 0 || std::strcmp(name, "addressing") == 0
+               || std::strcmp(name, "packet_gap") == 0   // starts or stops the send task
                || isWindowControl(name) || isCorrectionControl(name);
     }
 
@@ -128,8 +135,12 @@ class NetworkSendDriver : public DriverBase {
         platform::getMacAddress(cid_ + 10);
     }
 
-    /// Close the socket on release, then chain to the base to clear any status this driver set.
+    /// A task still running would read a destroyed object, so the destructor stops it too.
+    ~NetworkSendDriver() override { stopSendTask(); }
+
+    /// Stop the send task and close the socket on release, then chain to the base to clear any status this driver set.
     void release() override {
+        stopSendTask();
         socket_.close();
         nDest_ = 0;   // re-derived by prepare() on the next enable
         DriverBase::release();
@@ -144,6 +155,7 @@ class NetworkSendDriver : public DriverBase {
     // All the parsing happens HERE, so tick is a bare walk of two small arrays.
     /// Open the socket, resolve the destinations and their window slices, and size the buffer.
     void prepare() override {
+        stopSendTask();          // the task reads the destinations and the corrected buffer, both rebuilt below
         socket_.open();          // idempotent: no-op if already open
         resizeCorrected();
 
@@ -179,6 +191,7 @@ class NetworkSendDriver : public DriverBase {
         nDest_ = n;
         prepareWarn_ = warn;
         refreshHosts();
+        if (packetGap > 0) startSendTask();
     }
 
     /// Re-size the corrected buffer when the fixture profile changes the output channel count.
@@ -192,6 +205,8 @@ class NetworkSendDriver : public DriverBase {
 
         // No destination means idle: it never falls back to broadcasting the whole LAN.
         if (nDest_ == 0) return;
+        // The task still sending the last frame owns the corrected buffer, so this frame is skipped.
+        if (sendTask_.impl && frameState_.load(std::memory_order_acquire) != kFrameIdle) return;
 
         // FPS limiting
         if (fps == 0) return;
@@ -227,13 +242,124 @@ class NetworkSendDriver : public DriverBase {
             totalBytes = static_cast<size_t>(nLights) * srcCh;
         }
 
-        // Rounded DOWN to whole fixtures: one straddling two universes reads a neighbor's channels.
-        size_t chunk = (protocol == kProtoDdp) ? DDP_MAX_PAYLOAD : MAX_CHANNELS_PER_UNIVERSE;
-        uint8_t packet[DDP_HEADER_SIZE + DDP_MAX_PAYLOAD];  // 1450 B covers all three
-        const uint16_t port = protocolPort(protocol);
         const uint8_t bytesPerLight = (data == corrected_.data() && correction_.outChannels)
                                           ? correction_.outChannels
                                           : sourceBuffer_->channelsPerLight();
+        // Paced from the task when it runs and the frame sits in the corrected buffer, which the task owns until it is done.
+        if (sendTask_.impl && data == corrected_.data()) {
+            frame_ = {data, totalBytes, bytesPerLight};
+            frameState_.exchange(kFrameReady, std::memory_order_acq_rel);
+            platform::notifyTask(sendTask_);
+            return;
+        }
+        sendFrame<false>(data, totalBytes, bytesPerLight, 0);
+    }
+
+    // The packet builds and their inverse parses are shared with the receiver, defined once.
+
+    /// Test-only accessor for the corrected buffer, pinning the no-allocation contract.
+    const Buffer& correctedBuffer() const { return corrected_; }
+
+    /// The gap, shortened so a frame's packets fit in 80% of its `fps` period, leaving room for the next.
+    uint32_t effectiveGap(size_t totalBytes, uint8_t bytesPerLight) const {
+        // The chunk sendFrame uses: whole fixtures per universe, a full universe when a fixture is wider.
+        const size_t whole = bytesPerLight ? (MAX_CHANNELS_PER_UNIVERSE / bytesPerLight) * bytesPerLight : 0;
+        const size_t chunk = protocol == kProtoDdp ? DDP_MAX_PAYLOAD : (whole ? whole : MAX_CHANNELS_PER_UNIVERSE);
+        // An upper bound: one partial packet per destination on top of the whole ones.
+        const uint32_t packets = static_cast<uint32_t>((totalBytes + chunk - 1) / chunk) + nDest_;
+        const uint32_t budget = fps ? 800000u / fps : 0;
+        const uint32_t fit = packets > 1 ? budget / (packets - 1) : budget;
+        return packetGap < fit ? packetGap : fit;
+    }
+
+    /// Whether a task paces the packets, rather than the tick sending a burst: the test seam for the fallback.
+    bool sendsInTask() const { return sendTask_.impl != nullptr; }
+
+    /// How many receivers the parse derived, for a test pinning the fan-out arithmetic.
+    uint8_t destinationCount() const { return nDest_; }
+    /// The address of destination `i`, 0.0.0.0 for a name not resolved yet.
+    const uint8_t* destinationAt(uint8_t i) const { return dest_[i].ip; }
+    /// How many lights of the window destination `i` owns.
+    nrOfLightsType lightsAt(uint8_t i) const { return destCounts_[i]; }
+
+private:
+    /// The send socket, reused for every destination and closed on release.
+    platform::UdpSocket socket_;
+    /// The shared frame this driver reads its window from; borrowed, not owned.
+    Buffer* sourceBuffer_ = nullptr;
+    /// Owned: source bytes after brightness/order/white. Sized off the hot path (resizeCorrected).
+    Buffer corrected_;
+    /// Art-Net/E1.31 per-frame sequence counter; wraps at 255, which both protocols expect.
+    uint8_t sequence_ = 0;
+    /// millis() of the last frame sent: the `fps` rate limiter's reference point.
+    uint32_t lastSendTime_ = 0;
+    /// E1.31 component id, built once in setup() from the MAC so it is stable per device.
+    uint8_t cid_[E131_CID_LENGTH] = {};
+    /// Destination hosts, derived in prepare() (never in tick()); a name's address is refreshed each second.
+    Host dest_[kMaxDestinations] = {};
+    /// Each destination's slice of the window, index-aligned with `dest_`.
+    nrOfLightsType destCounts_[kMaxDestinations] = {};
+    /// How many entries of `dest_` / `destCounts_` are live.
+    uint8_t nDest_ = 0;
+    /// The unresolved-names warning, which the status points at.
+    char statusBuf_[32] = {};
+    /// The light-count warning prepare found, restored once the names resolve.
+    const char* prepareWarn_ = nullptr;
+
+    // Every write to the frame state is a read-modify-write, since a module lives in PSRAM, as TryLock explains.
+    static constexpr uint8_t kFrameIdle = 0;      ///< the tick may correct the next frame
+    static constexpr uint8_t kFrameReady = 1;     ///< a corrected frame waits for the task
+    static constexpr uint8_t kFrameSending = 2;   ///< the task is sending it
+    static constexpr uint8_t kSendRetries = 3;          ///< tries after a failed send, while the transmit queue drains
+    static constexpr uint32_t kRetryBackoffUs = 500;    ///< the wait before each of them
+    /// The task that paces a frame's packets, running while `packetGap` is above 0.
+    platform::WorkerTask sendTask_;
+    /// Who owns the corrected buffer: the tick while idle, the task while ready or sending.
+    std::atomic<uint8_t> frameState_{kFrameIdle};
+    /// Set to end the send task, read before each paced packet.
+    std::atomic<bool> sendStop_{false};
+    /// One packet being built, a member so the send task's stack stays small; the tick and the task never send at once.
+    uint8_t packet_[DDP_HEADER_SIZE + DDP_MAX_PAYLOAD] = {};   // 1450 B covers all three protocols
+    /// The frame the tick hands over: where its bytes are, how many, and their stride.
+    struct Frame { const uint8_t* data; size_t totalBytes; uint8_t bytesPerLight; } frame_ = {nullptr, 0, 0};
+
+    static void sendTrampoline(void* self) { static_cast<NetworkSendDriver*>(self)->runSendLoop(); }
+
+    /// Wait for a frame from the tick, then send it paced, until release or prepare stops the task.
+    void runSendLoop() {
+        while (!sendStop_.load(std::memory_order_acquire)) {
+            uint8_t ready = kFrameReady;
+            if (!frameState_.compare_exchange_strong(ready, kFrameSending, std::memory_order_acq_rel)) {
+                platform::waitNotify(sendTask_, 100);
+                continue;
+            }
+            sendFrame<true>(frame_.data, frame_.totalBytes, frame_.bytesPerLight, effectiveGap(frame_.totalBytes, frame_.bytesPerLight));
+            frameState_.exchange(kFrameIdle, std::memory_order_acq_rel);
+        }
+    }
+
+    // Core 1, beside the receive task; a board that cannot start it sends from the tick, unpaced.
+    void startSendTask() {
+        if (sendTask_.impl) return;
+        sendStop_.store(false, std::memory_order_release);
+        frameState_.exchange(kFrameIdle, std::memory_order_acq_rel);
+        platform::spawnPinnedTask(sendTask_, "mmSend", &sendTrampoline, this, 4096, 3, 1);
+    }
+
+    void stopSendTask() {
+        if (!sendTask_.impl) return;
+        sendStop_.store(true, std::memory_order_release);
+        platform::stopPinnedTask(sendTask_);
+        frameState_.exchange(kFrameIdle, std::memory_order_acq_rel);
+    }
+
+    /// Chunk a frame into packets and send them, `gapUs` apart from the task (`kPaced`) and back to back from the tick, whose instance holds no wait.
+    template <bool kPaced>
+    void sendFrame(const uint8_t* data, size_t totalBytes, uint8_t bytesPerLight, uint32_t gapUs) {
+        // Rounded DOWN to whole fixtures: one straddling two universes reads a neighbor's channels.
+        size_t chunk = (protocol == kProtoDdp) ? DDP_MAX_PAYLOAD : MAX_CHANNELS_PER_UNIVERSE;
+        uint8_t* packet = packet_;
+        const uint16_t port = protocolPort(protocol);
         if (protocol != kProtoDdp && bytesPerLight > 1) {
             const size_t whole = (chunk / bytesPerLight) * bytesPerLight;
             // A fixture wider than a universe keeps the full one, so the failure is visible.
@@ -241,6 +367,7 @@ class NetworkSendDriver : public DriverBase {
         }
 
         const Addressing sendMode = mode();
+        uint32_t packets = 0;   // sent so far this frame, so the first goes out at once
         size_t offset = 0;   // byte cursor into `data`, walking destination by destination
         for (uint8_t d = 0; d < nDest_ && offset < totalBytes; d++) {
             // This destination's run: its light count × the wire stride, clipped to what's left.
@@ -270,11 +397,22 @@ class NetworkSendDriver : public DriverBase {
                                                       src, static_cast<uint16_t>(n));
                         break;
                 }
-                // A failed send drops that packet and continues: one dark tube stalls no other.
+                // A pause before every packet but the first, then a failed send retried after a backoff when paced, else dropped: one dark tube stalls no other.
+                if constexpr (kPaced) {
+                    if (gapUs && packets++ > 0) platform::sleepUs(sendTask_, gapUs);
+                    if (sendStop_.load(std::memory_order_acquire)) return;
+                }
                 uint8_t grp[4];
                 e131MulticastAddr(universe, grp);
-                sendAddressed(sendMode, Traffic::FrameRate, &dest_[d], 1, grp,
-                              [&](const uint8_t ip[4]) { socket_.sendToAddr(ip, port, packet, packetLen); });
+                sendAddressed(sendMode, Traffic::FrameRate, &dest_[d], 1, grp, [&](const uint8_t ip[4]) {
+                    bool ok = socket_.sendToAddr(ip, port, packet, packetLen);
+                    if constexpr (kPaced) {
+                        for (uint8_t r = 0; !ok && r < kSendRetries; r++) {
+                            platform::sleepUs(sendTask_, kRetryBackoffUs);
+                            ok = socket_.sendToAddr(ip, port, packet, packetLen);
+                        }
+                    }
+                });
                 sent += n;
                 universe++;
             }
@@ -284,42 +422,6 @@ class NetworkSendDriver : public DriverBase {
         sequence_++;
     }
 
-    // The packet builds and their inverse parses are shared with the receiver, defined once.
-
-    /// Test-only accessor for the corrected buffer, pinning the no-allocation contract.
-    const Buffer& correctedBuffer() const { return corrected_; }
-
-    /// How many receivers the parse derived, for a test pinning the fan-out arithmetic.
-    uint8_t destinationCount() const { return nDest_; }
-    /// The address of destination `i`, 0.0.0.0 for a name not resolved yet.
-    const uint8_t* destinationAt(uint8_t i) const { return dest_[i].ip; }
-    /// How many lights of the window destination `i` owns.
-    nrOfLightsType lightsAt(uint8_t i) const { return destCounts_[i]; }
-
-private:
-    /// The send socket, reused for every destination and closed on release.
-    platform::UdpSocket socket_;
-    /// The shared frame this driver reads its window from; borrowed, not owned.
-    Buffer* sourceBuffer_ = nullptr;
-    /// Owned: source bytes after brightness/order/white. Sized off the hot path (resizeCorrected).
-    Buffer corrected_;
-    /// Art-Net/E1.31 per-frame sequence counter; wraps at 255, which both protocols expect.
-    uint8_t sequence_ = 0;
-    /// millis() of the last frame sent: the `fps` rate limiter's reference point.
-    uint32_t lastSendTime_ = 0;
-    /// E1.31 component id, built once in setup() from the MAC so it is stable per device.
-    uint8_t cid_[E131_CID_LENGTH] = {};
-    /// Destination hosts, derived in prepare() (never in tick()); a name's address is refreshed each second.
-    Host dest_[kMaxDestinations] = {};
-    /// Each destination's slice of the window, index-aligned with `dest_`.
-    nrOfLightsType destCounts_[kMaxDestinations] = {};
-    /// How many entries of `dest_` / `destCounts_` are live.
-    uint8_t nDest_ = 0;
-    /// The unresolved-names warning, which the status points at.
-    char statusBuf_[32] = {};
-    /// The light-count warning prepare found, restored once the names resolve.
-    const char* prepareWarn_ = nullptr;
-
     /// The UDP port for a protocol index: each wire format has its own registered port.
     static uint16_t protocolPort(uint8_t p) {
         return p == kProtoE131 ? E131_PORT : p == kProtoDdp ? DDP_PORT : ARTNET_PORT;
@@ -336,7 +438,9 @@ class NetworkSendDriver : public DriverBase {
             uint8_t ip[4];
             const HostResolver::State st = HostResolver::lookup(name, ip);
             if (st == HostResolver::State::Busy) return;   // the lookup task held the cache this instant: keep the status as it is
-            if (st == HostResolver::State::Resolved || st == HostResolver::State::Stale) std::memcpy(dest_[d].ip, ip, 4);
+            // Not while the task sends: an address it reads mid-copy would be half old, half new.
+            const bool sending = sendTask_.impl && frameState_.load(std::memory_order_acquire) != kFrameIdle;
+            if (!sending && (st == HostResolver::State::Resolved || st == HostResolver::State::Stale)) std::memcpy(dest_[d].ip, ip, 4);
             if (st == HostResolver::State::Waiting || st == HostResolver::State::Full) waiting++;
         }
         if (waiting) {
@@ -359,7 +463,11 @@ class NetworkSendDriver : public DriverBase {
         const uint8_t ch = correction_.outChannels;
         if (n == 0 || ch == 0) return;
         if (corrected_.count() >= n && corrected_.channelsPerLight() >= ch) return;
+        // The send task reads the buffer while it paces a frame, so a reallocation waits it out and restarts it.
+        const bool wasSending = sendTask_.impl != nullptr;
+        stopSendTask();
         corrected_.allocate(n, ch);
+        if (wasSending) startSendTask();
     }
 };
 
diff --git a/src/light/effects/BeatRipplesEffect.h b/src/light/effects/BeatRipplesEffect.h
index ab4bd4fc0..556621c1e 100644
--- a/src/light/effects/BeatRipplesEffect.h
+++ b/src/light/effects/BeatRipplesEffect.h
@@ -7,9 +7,7 @@ namespace mm {
 /// Effect: a wave surface where every detected beat drops a stone, rippling and interfering.
 /// @card BeatRipplesEffect.gif
 ///
-/// The surface is a real wave simulation, the classic two-buffer scheme.
-/// Ripples pass through each other, reflect off the walls, and interfere into standing patterns.
-/// A detected onset drops a stone, and between beats the surface keeps ringing on its own.
+/// The surface is a real wave simulation, the classic two-buffer scheme: ripples pass through each other, reflect off the walls and interfere, and a detected onset drops a stone.
 ///
 /// Prior art: Gomez 2000, the water effect the demoscene settled on.
 ///
@@ -17,13 +15,9 @@ namespace mm {
 ///
 /// ## The wave equation, and rendering by slope
 ///
-/// Each cell's next height is its four neighbors averaged and doubled, minus its previous height, damped.
-/// That discrete wave equation is what a hand-drawn expanding circle cannot give.
-/// The field renders by slope rather than height: a surface is visible because it bends light.
-/// So the difference between neighboring cells lights a pixel, and crests read as bright lines.
+/// Each cell's next height is its four neighbors averaged and doubled, minus its previous height, damped; the field renders by slope, so crests read as bright lines.
 ///
-/// The loudest band picks where a stone lands, bass near the center and treble out at the rim.
-/// `Layer::extrude` fills a cube with the plane, as Particles and Wave do, since the equation is 2D.
+/// The loudest band picks where a stone lands, bass near the center and treble at the rim; a cube takes the plane extruded, as the equation is 2D.
 class BeatRipplesEffect : public EffectBase {
 public:
     /// Catalog tags for the visual catalog.
@@ -114,7 +108,7 @@ class BeatRipplesEffect : public EffectBase {
         renderSurface(cv, w, h);
     }
 
-    /// One step of the wave equation, which is what makes ripples pass through each other.
+    /// One step of the wave equation, which is what makes ripples pass through each other. @xref{the-wave-equation-and-rendering-by-slope}
     void waveStep() {
         const lengthType w = width(), h = height();
         int16_t* c = cur_.data();
@@ -143,13 +137,15 @@ class BeatRipplesEffect : public EffectBase {
                 int32_t mag = (gx < 0 ? -gx : gx) + (gy < 0 ? -gy : gy);
                 mag = (mag * shine) / 512;
                 const uint8_t bri = static_cast<uint8_t>(mag > 255 ? 255 : mag);
-                // The index follows height, so a crest and a trough differ in color.
-                const int32_t hgt = static_cast<int32_t>(s[o]);
-                const uint8_t index = static_cast<uint8_t>(128 + (hgt > 4000 ? 127 : (hgt < -4000 ? -128 : (hgt * 127) / 4000)));
-                draw::pixel(cv, {x, y, 0}, colorFromPalette(*Palettes::active(), index, bri));
+                draw::pixel(cv, {x, y, 0}, colorFromPalette(*Palettes::active(), paletteIndex(s[o], seq_), bri));
             }
     }
 
+    /// The palette index at a height: it wraps with height, so ripples a few hundred high walk the whole palette, and each stone moves the start along it.
+    static uint8_t paletteIndex(int16_t height, uint32_t stones) {
+        return static_cast<uint8_t>(128u + stones * 8u + static_cast<uint32_t>(height / 8));   // unsigned, so the wrap is modulo 256 by definition
+    }
+
 private:
     /// Scales the 0..255 knobs onto the int16 field, pressing a third of the way to the clamp at 255.
     static constexpr int32_t kSplashScale = 6000;
diff --git a/src/light/effects/ChannelDataSink.h b/src/light/effects/ChannelDataSink.h
new file mode 100644
index 000000000..9612f0566
--- /dev/null
+++ b/src/light/effects/ChannelDataSink.h
@@ -0,0 +1,131 @@
+#pragma once
+
+#include "core/util/ScratchBuffer.h"
+#include "core/util/TryLock.h"     // staging, shared by a writer task and the render copy
+#include "light/effects/EffectBase.h"
+#include "light/layers/Layer.h"    // the mapping a sender-mapped frame is placed through
+#include "platform/platform.h"     // yield, while a writer waits out the render copy
+
+#include <atomic>
+#include <cstring>
+
+namespace mm {
+
+/// Where channel data lands, whatever carried it: Art-Net, E1.31 and DDP over a network, or an FSEQ file from flash or SD.
+///
+/// A member of the effect that owns the transport, so Network Receive and the FSEQ player are thin effects on one copy of this logic.
+///
+/// It holds the last frame, so the lights keep it between frames, and copies a frame only when it changed.
+///
+/// A receiver-mapped frame is copied into the layer, which applies this board's wiring. A sender-mapped one alone on its layer goes to the output as it is.
+///
+/// Beside another writer or under a modifier a sender-mapped frame is placed by the layout's positions, so a modifier transforms it.
+class ChannelDataSink {
+public:
+    /// What a frame costs on its way to the drivers, for a status to name.
+    enum Path : uint8_t {
+        kPathNone,      ///< receiver mapping, which maps once as every layer does
+        kPathOneCopy,   ///< sender mapping straight to the output, or through an identity mapping
+        kPathTwice,     ///< sender mapping placed on the grid and mapped forward again
+    };
+
+    /// Declared as a member of the effect it serves, which owns the memory.
+    explicit ChannelDataSink(EffectBase& owner) : owner_(owner) {}
+
+    /// Size staging by logical cell, or by physical light for a sender-mapped frame. One the layer maps gets a placement by layout position, unless it goes straight to the output.
+    void prepare(bool senderMapped) {
+        const Layer* layer = owner_.layer();
+        senderMapped_ = senderMapped && layer;
+        const size_t lights = senderMapped_ ? layer->physicalLightCount() : owner_.nrOfLights();
+        staging_.resize(lights * owner_.channelsPerLight());
+        const bool placed = senderMapped_ && layer->lut().hasLUT() && layer->wiringSource() != &owner_;
+        placement_.resize(placed ? owner_.nrOfLights() : 0);
+        if (placement_) layer->placeByLayout(placement_.data(), static_cast<nrOfLightsType>(placement_.count()));
+        dirty_.store(true, std::memory_order_release);   // a resize, or a re-enable, paints the layer from staging once
+    }
+
+    /// Whether a frame is in wiring order, which a layer showing only it hands to the output unmapped.
+    bool wiringOrder() const MM_NONBLOCKING { return senderMapped_; }
+
+    /// The render tick: copy a changed frame into the layer, unless the layer hands it to the output as it is; returns the path it took.
+    Path tick() {
+        const Layer* layer = owner_.layer();
+        if (!senderMapped_ || !layer) {
+            copyIntoLayer(layer);
+            return kPathNone;
+        }
+        if (layer->wiringSource() == &owner_) return kPathOneCopy;   // Drivers copies it to the output
+        copyIntoLayer(layer);
+        return layer->lut().hasLUT() ? kPathTwice : kPathOneCopy;
+    }
+
+    /// Copy staging to the output when a write changed it, or whole when asked; a write in progress waits for the next frame.
+    void copyWiringFrame(uint8_t* out, size_t bytes, bool force) {
+        if (!force && !dirty_.load(std::memory_order_acquire)) return;
+        LockGuard guard(lock_);
+        if (!guard) return;
+        dirty_.store(false, std::memory_order_release);
+        std::memcpy(out, staging_.data(), staging_.bytes() < bytes ? staging_.bytes() : bytes);
+    }
+
+    /// The one clamped write into staging, bound-checked before any addition. `kWait` is for a writer task, which waits out the render copy; without it a busy lock drops the write.
+    template <bool kWait = true>
+    void write(size_t offset, const uint8_t* data, size_t len) {
+        if (!staging_ || offset >= staging_.bytes()) return;
+        const size_t n = offset + len > staging_.bytes() ? staging_.bytes() - offset : len;
+        if constexpr (kWait) {
+            // A copy takes microseconds, while a yield costs a whole tick (10 ms at 100 Hz) in which the mailbox fills.
+            for (uint32_t spins = 0; !lock_.tryAcquire(); spins++) if (spins >= kSpins) platform::yield();
+        } else if (!lock_.tryAcquire()) {
+            return;
+        }
+        std::memcpy(staging_.data() + offset, data, n);
+        dirty_.store(true, std::memory_order_release);   // inside the lock, so a copy that takes it next sees this write
+        lock_.release();
+    }
+
+    /// The held frame's bytes, for a test pinning the lifecycle.
+    const uint8_t* data() const { return staging_.data(); }
+    /// How many bytes staging holds.
+    size_t bytes() const { return staging_.bytes(); }
+
+private:
+    /// Copy staging into the layer when it changed or the layer was overwritten, through whichever placement the frame needs.
+    void copyIntoLayer(const Layer* layer) {
+        uint8_t* buf = owner_.buffer();
+        if (!buf || !staging_) return;
+        const uint32_t gen = layer ? layer->bufferGen() : 0;
+        if (!dirty_.load(std::memory_order_acquire) && layer && gen == lastGen_) return;
+        LockGuard guard(lock_);
+        if (!guard) return;   // a write holds staging: copy on the next tick
+        dirty_.store(false, std::memory_order_release);
+        // By the layout's positions for a sender-mapped frame the layer maps, else as it is: row by row, or wiring order on an identity mapping.
+        const size_t bufBytes = static_cast<size_t>(owner_.nrOfLights()) * owner_.channelsPerLight();
+        if (placement_) gatherPlaced(buf, bufBytes);
+        else std::memcpy(buf, staging_.data(), staging_.bytes() < bufBytes ? staging_.bytes() : bufBytes);
+        lastGen_ = gen + 1;   // the Layer bumps the generation after this tick, for our own copy
+    }
+
+    /// Each cell takes the light the layout places at its position; a cell with none keeps its value.
+    void gatherPlaced(uint8_t* buf, size_t bufBytes) {
+        const size_t cpl = owner_.channelsPerLight();
+        const size_t physLights = staging_.bytes() / cpl;
+        const size_t cells = bufBytes / cpl < placement_.count() ? bufBytes / cpl : placement_.count();
+        for (size_t cell = 0; cell < cells; cell++) {
+            const size_t src = placement_[cell];
+            if (src >= physLights) continue;   // kNoDriver, or past a shorter frame
+            MappingLUT::copyLight(buf + cell * cpl, staging_.data() + src * cpl, cpl);
+        }
+    }
+
+    static constexpr uint32_t kSpins = 256;   ///< tries before a writer sleeps, a few microseconds of spinning
+    EffectBase& owner_;
+    ScratchBuffer<uint8_t> staging_{owner_};             ///< the held frame
+    ScratchBuffer<nrOfLightsType> placement_{owner_};    ///< each cell's physical light by layout position, only under static modifiers
+    TryLock lock_;                                       ///< staging, between a writer's writes and the render copy
+    std::atomic<bool> dirty_{true};                      ///< staging changed since the last copy
+    uint32_t lastGen_ = 0;                               ///< the layer's write generation after our last copy
+    bool senderMapped_ = false;                          ///< the frame is in wiring order, as prepare was told
+};
+
+}  // namespace mm
diff --git a/src/light/effects/EffectBase.h b/src/light/effects/EffectBase.h
index d3c59cf3c..6f62851b6 100644
--- a/src/light/effects/EffectBase.h
+++ b/src/light/effects/EffectBase.h
@@ -50,6 +50,11 @@ class EffectBase : public MoonModule {
     /// Which axes the effect iterates, read at frame time: a hardcoded bound is a buffer overrun.
     virtual Dim dimensions() const { return Dim::D3; }
 
+    /// Whether the frame arrives in the order the lights are wired, so a layer showing it alone hands it to the output unmapped.
+    virtual bool deliversWiringOrder() const MM_NONBLOCKING { return false; }
+    /// Copy that wiring-order frame into the output, all of it when `force` says the output holds something else.
+    virtual void copyWiringFrame(uint8_t* /*out*/, size_t /*bytes*/, bool /*force*/) {}
+
     /// The parent, always a Layer, defined in Layer.h once Layer is complete.
     Layer* layer() const;
 
diff --git a/src/light/effects/FseqPlayerEffect.h b/src/light/effects/FseqPlayerEffect.h
new file mode 100644
index 000000000..8b8e0cc99
--- /dev/null
+++ b/src/light/effects/FseqPlayerEffect.h
@@ -0,0 +1,54 @@
+#pragma once
+
+#include "light/effects/ChannelDataSink.h"   // where the frames land, held and placed, as Network Receive's do
+#include "light/effects/EffectBase.h"
+
+namespace mm {
+
+/// Effect: an FSEQ show played from a file, xLights' and Falcon Player's frame-by-frame channel data.
+///
+/// FSEQ is mapped by the sender, so its frames land in the channel-data sink as a sender-mapped Network Receive stream does, one copy alone on its layer.
+///
+/// It reads uncompressed v2 as FPP's FSEQ_Sequence_File_Format.txt lays it out, and `moondeck/run/fseq_play.py` writes reference files.
+///
+/// It reads no file yet and says so: the reading lands in prepare, which opens the file and sizes the sink, and in tick, which writes the clock's frame.
+class FseqPlayerEffect : public EffectBase {
+public:
+    /// Catalog tags: a recorded show, played back.
+    const char* tags() const override { return "🎞️"; }
+    /// The show to play, a path on flash or SD.
+    char file[64] = "";
+    /// Start again at the end.
+    bool loop = true;
+    /// The playback speed, in percent of the file's step time.
+    uint8_t speed = 100;
+
+    /// Publish the file, looping and the speed.
+    void defineControls() override {
+        controls_.addText("file", file, sizeof(file));   // a path: the file picker opens a text editor, which a binary show has no use for
+        controls_.addControl("loop", loop);
+        controls_.addControl("speed", speed, 1, 255);
+    }
+
+    /// A new file sizes the sink again.
+    bool affectsPrepare(const char* name) const override { return std::strcmp(name, "file") == 0; }
+
+    /// Size the sink to the layer in wiring order, a frame of the file being one light per physical light.
+    void prepare() override {
+        sink_.prepare(/*senderMapped=*/true);
+        setStatus("reads no FSEQ file yet: playback is the next step");
+    }
+
+    /// Let the sink place the held frame.
+    void tick() MM_NONBLOCKING override { sink_.tick(); }
+
+    /// An FSEQ frame is in wiring order.
+    bool deliversWiringOrder() const MM_NONBLOCKING override { return sink_.wiringOrder(); }
+    /// The sink hands its held frame to the output.
+    void copyWiringFrame(uint8_t* out, size_t bytes, bool force) override { sink_.copyWiringFrame(out, bytes, force); }
+
+private:
+    ChannelDataSink sink_{*this};   ///< where the frames land, held and placed
+};
+
+}  // namespace mm
diff --git a/src/light/effects/NetworkReceiveEffect.h b/src/light/effects/NetworkReceiveEffect.h
index bfbbdad23..70e6529ab 100644
--- a/src/light/effects/NetworkReceiveEffect.h
+++ b/src/light/effects/NetworkReceiveEffect.h
@@ -1,23 +1,25 @@
 #pragma once
 
 #include "core/util/format.h"   // formatTo: nonblocking formatting into a fixed buffer
+#include "light/effects/ChannelDataSink.h"   // staging, the held frame and its placement
 #include "light/effects/EffectBase.h"
 
 #include "light/util/ArtNetPacket.h"   // shared ArtNet wire formats (build + parse)
 #include "light/util/DdpPacket.h"      // shared DDP wire format
 #include "light/util/E131Packet.h"     // shared E1.31/sACN wire format
-#include "light/layers/Layer.h"   // Layer::bufferGen: is the held frame still ours?
 #include "platform/platform.h"    // platform::UdpSocket: the three receive sockets
 
+#include <atomic>
+#include <cstring>
+
 namespace mm {
 
+
 // Author: MoonLight original (E1.31 / Art-Net receive)
 /// Effect that paints the layer from received Art-Net/E1.31/DDP pixels.
 /// @card NetworkReceiveEffect.gif
 ///
-/// External light data is another module writing into the layer buffer.
-/// So it composes with modifiers and blending like any generated effect.
-/// This is the end-to-end pair with NetworkSendDriver, and the receive side for industry senders.
+/// External light data written into the layer buffer, so it composes with modifiers and blending; the receive side for NetworkSendDriver and industry senders.
 ///
 /// Prior art: MoonLight's D_NetworkIn, WLED's realtime UDP input, and MoonLight v1's ArtNetInModule.
 ///
@@ -25,17 +27,11 @@ namespace mm {
 ///
 /// ## Three protocols at once
 ///
-/// The effect binds ArtNet 6454, E1.31 5568 and DDP 4048, validating each packet against its format.
-/// There is deliberately no protocol control: whatever a sender speaks works.
-/// The status field then shows which protocol is arriving and from where.
-/// Controllers find the device by broadcasting ArtPoll, which this answers with ArtPollReply.
+/// It binds Art-Net 6454, E1.31 5568 and DDP 4048 with no protocol control, so whatever a sender speaks works; the status names it, and an ArtPoll gets an ArtPollReply.
 ///
-/// ## Hold-last-frame, through a staging buffer
+/// ## Mapped by the receiver or by the sender
 ///
-/// Packets drain into an owned staging buffer, which is copied to the layer each tick.
-/// Without that the lights would strobe black between frames.
-/// The drain is non-blocking and bounded per tick, so a packet flood cannot wedge the render loop.
-/// Sequence fields and DDP's push flag are ignored, so the last write into staging wins.
+/// A receiver-mapped frame arrives row by row and the layer applies this board's wiring; a sender-mapped one arrives in wiring order, placed by the channel-data sink.
 class NetworkReceiveEffect : public EffectBase {
 public:
     /// Catalog tags: network input, of MoonLight and v1 lineage.
@@ -47,15 +43,53 @@ class NetworkReceiveEffect : public EffectBase {
     uint16_t universeStart = 0;
     /// Bytes a universe maps to, which also clamps the payload against bleeding into the next.
     uint16_t channelsPerUniverse = static_cast<uint16_t>(MAX_CHANNELS_PER_UNIVERSE);
+    /// Who maps a frame onto the wiring, in the `mapped_by` options' order: row by row with this board applying its wiring, or in the order the lights are wired.
+    enum MappedBy : uint8_t { kMappedByReceiver, kMappedBySender, kMappedByCount };
+    /// The `mapped_by` option names.
+    static constexpr const char* kMappers[kMappedByCount] = {"receiver", "sender"};
+    /// Who maps the frame onto the wiring. @xref{mapped-by-the-receiver-or-by-the-sender}
+    uint8_t mappedBy = kMappedByReceiver;
+    /// Packets received in the last second, of any protocol.
+    uint16_t packetsPerS = 0;
+    /// Frames received in the last second: a DDP push, or the first universe of an Art-Net or E1.31 frame.
+    uint16_t framesPerS = 0;
 
-    /// Publish the universe start and the per-universe stride.
+    /// Publish the universe start, the per-universe stride and who maps.
     void defineControls() override {
         controls_.addControl("universe_start", universeStart);
         controls_.addControl("channels_per_universe", channelsPerUniverse);
+        controls_.addSelect("mapped_by", mappedBy, kMappers, kMappedByCount);
+        controls_.addControl("packets_per_s", packetsPerS, 0, 65535);
+        controls_.setReadOnly(controls_.count() - 1, true);
+        controls_.setLive(controls_.count() - 1);
+        controls_.addControl("frames_per_s", framesPerS, 0, 65535);
+        controls_.setReadOnly(controls_.count() - 1, true);
+        controls_.setLive(controls_.count() - 1);
+    }
+
+    /// Publish what arrived since the last call as a per-second rate, so loss shows against what the sender sent.
+    void tick1s() MM_NONBLOCKING override {
+        const uint32_t now = platform::millis();
+        const uint32_t span = now - rateSinceMs_;
+        rateSinceMs_ = now;
+        const uint32_t packets = packets_.exchange(0, std::memory_order_relaxed);
+        const uint32_t frames = frames_.exchange(0, std::memory_order_relaxed);
+        if (span > 0) {
+            packetsPerS = saturate16(static_cast<uint32_t>(uint64_t{packets} * 1000 / span));
+            framesPerS = saturate16(static_cast<uint32_t>(uint64_t{frames} * 1000 / span));
+        }
+        EffectBase::tick1s();
     }
 
-    /// Close the three sockets, then chain so the staging buffer is freed too.
+    /// Who maps sizes staging, by logical cells or by physical lights, so only it rebuilds.
+    bool affectsPrepare(const char* name) const override { return std::strcmp(name, "mapped_by") == 0; }
+
+    /// A task still running would read a destroyed object, so the destructor stops it too.
+    ~NetworkReceiveEffect() override { stopReceiveTask(); }
+
+    /// Stop the receive task, close the three sockets, then chain so the staging buffer is freed too.
     void release() override {
+        stopReceiveTask();
         // Chaining is required, or the registered staging buffer leaks on disable.
         artnetSocket_.close();
         e131Socket_.close();
@@ -64,8 +98,9 @@ class NetworkReceiveEffect : public EffectBase {
         clearStatus();
     }
 
-    /// Bind the three receive sockets independently, and size the staging buffer to the layer.
+    /// Bind the three receive sockets independently, and size the staging buffer to the layer. @xref{three-protocols-at-once}
     void prepare() override {
+        stopReceiveTask();   // the task writes into staging, which is resized below
         const bool artnetOk = artnetSocket_.open() && artnetSocket_.bind(ARTNET_PORT);
         const bool e131Ok = e131Socket_.open() && e131Socket_.bind(E131_PORT);
         const bool ddpOk = ddpSocket_.open() && ddpSocket_.bind(DDP_PORT);
@@ -74,109 +109,169 @@ class NetworkReceiveEffect : public EffectBase {
         } else {
             setStatus(kBindFailMsg, Severity::Error);
         }
-        // One byte per channel byte, zero-filled so a fresh grid starts dark.
-        staging_.resize(static_cast<size_t>(nrOfLights()) * channelsPerLight());
-        dirty_ = true;   // a resize (or a re-enable) must repaint the layer from staging once
+        sink_.prepare(mappedBy == kMappedBySender);
+        packets_.exchange(0, std::memory_order_relaxed);   // the rates restart with the stream, not from boot
+        frames_.exchange(0, std::memory_order_relaxed);
+        rateSinceMs_ = platform::millis();
+        startReceiveTask();
     }
 
-    /// Drain all three sockets, then copy staging to the layer when anything changed.
+    /// Drain the sockets where no task does, then let the sink place a changed frame, the status naming the path it took.
     void tick() MM_NONBLOCKING override {
-        if (!staging_) return;
-        // Bounded per socket, so a flood waits in the socket buffers rather than wedging the tick.
+        if (!receiveTask_.impl) drainSockets<false>();   // a board without tasks, the Teensy, drains here as packets wait
+        publishSender(sink_.tick());
+    }
+
+    /// A sender-mapped frame is in wiring order.
+    bool deliversWiringOrder() const MM_NONBLOCKING override { return sink_.wiringOrder(); }
+
+    /// The sink hands its held frame to the output.
+    void copyWiringFrame(uint8_t* out, size_t bytes, bool force) override { sink_.copyWiringFrame(out, bytes, force); }
+
+    /// Place one universe's payload, clamped to its stride and ignoring universes outside the buffer; `kWait` as for applyBytes.
+    template <bool kWait = true>
+    void applyDmx(uint16_t universe, const uint8_t* data, uint16_t len) {
+        if (universe < universeStart || channelsPerUniverse == 0) return;
+        if (len > channelsPerUniverse) len = channelsPerUniverse;
+        applyBytes<kWait>(static_cast<size_t>(universe - universeStart) * channelsPerUniverse, data, len);
+    }
+
+    /// Write a payload into the sink at its byte offset; the task waits out one render copy, the tick drains only where no task runs.
+    template <bool kWait = true>
+    void applyBytes(size_t offset, const uint8_t* data, uint16_t len) { sink_.write<kWait>(offset, data, len); }
+
+    /// Whether a receive task drains the sockets, rather than the render tick: the test seam for the fallback.
+    bool receivesInTask() const { return receiveTask_.impl != nullptr; }
+
+    /// Test seam: the staging bytes, so a test can pin the buffer's lifecycle.
+    const uint8_t* stagingData() const { return sink_.data(); }
+    /// Test seam: how many staging bytes are allocated.
+    size_t stagingBytes() const { return sink_.bytes(); }
+
+    /// Note the last sender, per packet from the receive path; a test calls it to stand in for one.
+    void recordSender(const char* proto, const uint8_t ip[4]) {
+        senderIp_.store(static_cast<uint32_t>(ip[0]) << 24 | static_cast<uint32_t>(ip[1]) << 16 |
+                        static_cast<uint32_t>(ip[2]) << 8 | ip[3], std::memory_order_relaxed);
+        senderProto_.store(proto, std::memory_order_release);
+    }
+
+private:
+    static constexpr int kMaxPacketsPerDrain = 128;   ///< packets one drain takes per socket, so a flood cannot hold the caller
+    static constexpr uint32_t kWaitMs = 20;   ///< how long the task waits for a packet before it checks for a stop
+    static constexpr const char* kBindFailMsg = "UDP bind failed, port in use?";
+    // A member rather than a stack buffer: setStatus holds the pointer, so the string must outlive it.
+    char recvStatus_[56] = "";          ///< "receiving <protocol> from <ip>, <path>", sized for the longest form
+    const char* lastProto_ = nullptr;   ///< the last protocol literal the status was built from
+    uint8_t lastPath_ = 0;              ///< the last path the status was built from
+    /// The status note for each of the sink's paths: none for receiver mapping, which maps once as every layer does.
+    static constexpr const char* kPathNotes[3] = {"", ", one copy", ", mapped twice"};
+    uint8_t     lastIp_[4] = {};        ///< the last sender IP the status was built from
+
+    platform::UdpSocket artnetSocket_;   ///< ArtNet, port 6454
+    platform::UdpSocket e131Socket_;     ///< E1.31, port 5568
+    platform::UdpSocket ddpSocket_;      ///< DDP, port 4048
+    uint8_t pkt_[1500] = {};             ///< one datagram of any protocol, DDP reaching 1450
+    ChannelDataSink sink_{*this};        ///< where the frames land, held and placed
+    std::atomic<uint32_t> packets_{0};   ///< packets since the last tick1s, counted by the receive path
+    std::atomic<uint32_t> frames_{0};    ///< frames since the last tick1s, counted by the receive path
+    uint32_t rateSinceMs_ = 0;           ///< when the counts last restarted, which the rates divide by
+    platform::WorkerTask receiveTask_;        ///< drains the sockets as packets arrive, on core 1
+    std::atomic<bool> receiveStop_{false};
+    std::atomic<const char*> senderProto_{nullptr};   ///< the last sender's protocol, which the render tick publishes
+    std::atomic<uint32_t> senderIp_{0};               ///< and its address, as the four octets in order
+
+    static void receiveTrampoline(void* self) { static_cast<NetworkReceiveEffect*>(self)->runReceiveLoop(); }
+
+    /// Wait for packets and drain them, until release or prepare stops the task.
+    void runReceiveLoop() {
+        platform::UdpSocket* sockets[3] = {&artnetSocket_, &e131Socket_, &ddpSocket_};
+        while (!receiveStop_.load(std::memory_order_acquire)) {
+            if (platform::UdpSocket::waitReadable(sockets, 3, kWaitMs) > 0) drainSockets<true>();
+        }
+    }
+
+    // lwIP holds a frame's burst in a small mailbox, so a task on core 1 drains it as it arrives; a board without tasks drains in the tick.
+    void startReceiveTask() {
+        receiveStop_.store(false, std::memory_order_release);
+        platform::spawnPinnedTask(receiveTask_, "mmReceive", &receiveTrampoline, this, 4096, 3, 1);
+    }
+
+    void stopReceiveTask() {
+        if (!receiveTask_.impl) return;
+        receiveStop_.store(true, std::memory_order_release);
+        platform::stopPinnedTask(receiveTask_);
+    }
+
+    /// Drain all three sockets into staging, bounded per socket so a flood cannot hold the caller; `kWait` when the receive task drains.
+    template <bool kWait>
+    void drainSockets() {
         uint16_t universe = 0, dataLen = 0;
         uint32_t byteOffset = 0;
         const uint8_t* data = nullptr;
         uint8_t srcIp[4];
-        for (int i = 0; i < kMaxPacketsPerTick; i++) {
+        for (int i = 0; i < kMaxPacketsPerDrain; i++) {
             const int n = artnetSocket_.recvFrom(pkt_, sizeof(pkt_), srcIp);
             if (n <= 0) break;
             if (parseArtDmxPacket(pkt_, static_cast<size_t>(n), universe, data, dataLen)) {
-                applyDmx(universe, data, dataLen);
-                noteReceiving("Art-Net", srcIp);
+                countPacket(universe == universeStart);   // before the write, so a frame seen in the layer is already counted
+                applyDmx<kWait>(universe, data, dataLen);
+                recordSender("Art-Net", srcIp);
             } else if (isArtPoll(pkt_, static_cast<size_t>(n))) {
                 replyToPoll(srcIp);   // make the device show up in controller node lists
             }
         }
-        for (int i = 0; i < kMaxPacketsPerTick; i++) {
+        for (int i = 0; i < kMaxPacketsPerDrain; i++) {
             const int n = e131Socket_.recvFrom(pkt_, sizeof(pkt_), srcIp);
             if (n <= 0) break;
             if (parseE131Packet(pkt_, static_cast<size_t>(n), universe, data, dataLen)) {
-                applyDmx(universe, data, dataLen);
-                noteReceiving("E1.31", srcIp);
+                countPacket(universe == universeStart);
+                applyDmx<kWait>(universe, data, dataLen);
+                recordSender("E1.31", srcIp);
             }
         }
-        for (int i = 0; i < kMaxPacketsPerTick; i++) {
+        for (int i = 0; i < kMaxPacketsPerDrain; i++) {
             const int n = ddpSocket_.recvFrom(pkt_, sizeof(pkt_), srcIp);
             if (n <= 0) break;
-            if (parseDdpPacket(pkt_, static_cast<size_t>(n), byteOffset, data, dataLen)) {
-                applyBytes(byteOffset, data, dataLen);
-                noteReceiving("DDP", srcIp);
+            bool push = false;
+            if (parseDdpPacket(pkt_, static_cast<size_t>(n), byteOffset, data, dataLen, &push)) {
+                countPacket(push);
+                applyBytes<kWait>(byteOffset, data, dataLen);
+                recordSender("DDP", srcIp);
             }
         }
-        // An unchanged buffer needs no copy, so the layer's write generation decides.
-        uint8_t* buf = buffer();
-        if (!buf) return;
-        const auto* layer = static_cast<const Layer*>(parent());
-        const uint32_t gen = layer ? layer->bufferGen() : 0;
-        if (!dirty_ && layer && gen == lastGen_) return;
-        dirty_ = false;
-        const size_t bufBytes = static_cast<size_t>(nrOfLights()) * channelsPerLight();
-        std::memcpy(buf, staging_.data(), staging_.bytes() < bufBytes ? staging_.bytes() : bufBytes);
-        // The Layer bumps the generation after this tick, so record what our own copy produces.
-        lastGen_ = gen + 1;
     }
 
-    /// Place one universe's payload, clamped to its stride and ignoring universes outside the buffer.
-    void applyDmx(uint16_t universe, const uint8_t* data, uint16_t len) {
-        if (universe < universeStart || channelsPerUniverse == 0) return;
-        if (len > channelsPerUniverse) len = channelsPerUniverse;
-        applyBytes(static_cast<size_t>(universe - universeStart) * channelsPerUniverse,
-                   data, len);
+    // Read-modify-writes on both sides, since a module lives in PSRAM, as TryLock explains.
+    /// Count one packet, and a frame when it starts or ends one.
+    void countPacket(bool frame) {
+        packets_.fetch_add(1, std::memory_order_relaxed);
+        if (frame) frames_.fetch_add(1, std::memory_order_relaxed);
     }
+    /// A per-second count as its 16-bit control, held at the top rather than wrapping.
+    static uint16_t saturate16(uint32_t v) { return v > 0xFFFF ? 0xFFFF : static_cast<uint16_t>(v); }
 
-    /// The one clamped write into staging, bound-checked before any addition against an overflow.
-    void applyBytes(size_t offset, const uint8_t* data, uint16_t len) {
-        if (!staging_ || offset >= staging_.bytes()) return;
-        size_t n = len;
-        if (offset + n > staging_.bytes()) n = staging_.bytes() - offset;
-        std::memcpy(staging_.data() + offset, data, n);
-        dirty_ = true;   // the one write into staging, which is what tick() copies out
+    /// Show the last sender in the status, from the render side, which owns the status.
+    void publishSender(ChannelDataSink::Path path) {
+        const char* proto = senderProto_.load(std::memory_order_acquire);
+        if (!proto) return;
+        const uint32_t v = senderIp_.load(std::memory_order_relaxed);
+        const uint8_t ip[4] = {static_cast<uint8_t>(v >> 24), static_cast<uint8_t>(v >> 16),
+                               static_cast<uint8_t>(v >> 8), static_cast<uint8_t>(v)};
+        noteReceiving(proto, ip, path);
     }
 
-    /// Test seam: the staging bytes, so a test can pin the buffer's lifecycle.
-    const uint8_t* stagingData() const { return staging_.data(); }
-    /// Test seam: how many staging bytes are allocated.
-    size_t stagingBytes() const { return staging_.bytes(); }
-
-private:
-    static constexpr int kMaxPacketsPerTick = 128;
-    static constexpr const char* kBindFailMsg = "UDP bind failed, port in use?";
-    // A member rather than a stack buffer: setStatus holds the pointer, so the string must outlive it.
-    char recvStatus_[40] = "";          ///< "receiving <protocol> from <ip>", sized for the longest form
-    const char* lastProto_ = nullptr;   ///< the last protocol literal the status was built from
-    uint8_t     lastIp_[4] = {};        ///< the last sender IP the status was built from
-
-    platform::UdpSocket artnetSocket_;   ///< ArtNet, port 6454
-    platform::UdpSocket e131Socket_;     ///< E1.31, port 5568
-    platform::UdpSocket ddpSocket_;      ///< DDP, port 4048
-    uint8_t pkt_[1500] = {};             ///< one datagram of any protocol, DDP reaching 1450
-    ScratchBuffer<uint8_t> staging_{*this};   ///< the held frame, sized to the layer
-    /// Staging changed since the last copy, starting true so a fresh buffer paints once.
-    bool dirty_ = true;
-    /// The layer's write generation as of our last copy, which is what makes skipping it safe.
-    uint32_t lastGen_ = 0;
-
     /// Update the receiving diagnostic, short-circuiting the common case since this is the hot path.
-    void noteReceiving(const char* proto, const uint8_t ip[4]) {
+    void noteReceiving(const char* proto, const uint8_t ip[4], uint8_t path) {
         const char* s = status();
         if (s != nullptr && s != recvStatus_) return;   // a bind error (or foreign status) wins
-        // Already showing this source, so skip both the format and the setStatus.
-        if (s == recvStatus_ && proto == lastProto_ && std::memcmp(ip, lastIp_, 4) == 0) return;
+        // Already showing this source and path, so skip both the format and the setStatus.
+        if (s == recvStatus_ && proto == lastProto_ && path == lastPath_ && std::memcmp(ip, lastIp_, 4) == 0) return;
         lastProto_ = proto;
+        lastPath_ = path;
         std::memcpy(lastIp_, ip, 4);
-        mm::formatTo(recvStatus_, sizeof(recvStatus_), "receiving %s from %u.%u.%u.%u", proto,
+        mm::formatTo(recvStatus_, sizeof(recvStatus_), "receiving %s from %u.%u.%u.%u%s", proto,
                       static_cast<unsigned>(ip[0]), static_cast<unsigned>(ip[1]),
-                      static_cast<unsigned>(ip[2]), static_cast<unsigned>(ip[3]));
+                      static_cast<unsigned>(ip[2]), static_cast<unsigned>(ip[3]), kPathNotes[path]);
         setStatus(recvStatus_, Severity::Status);
     }
 
diff --git a/src/light/effects/PictureEffect.h b/src/light/effects/PictureEffect.h
new file mode 100644
index 000000000..77f3f7568
--- /dev/null
+++ b/src/light/effects/PictureEffect.h
@@ -0,0 +1,164 @@
+#pragma once
+
+#include "light/effects/EffectBase.h"
+#include "core/services/PictureService.h"   // the picture it samples, as audio effects include AudioService
+
+namespace mm {
+
+/// Effect: the active Picture service's picture, sampled onto the layer, so a picture of any size shows on a layout of any size.
+///
+/// Geometry stays with the modifiers: a rotate, mirror or tile transforms the picture as it does any effect. A cube shows it on every slice.
+///
+/// A cell's source rectangle is a column range times a row range, so two small tables sized at prepare hold them, refilled without allocating.
+///
+/// Area sampling averages in linear light, squaring each value and taking the root of the mean, gamma 2 standing in for the display curve.
+class PictureEffect : public EffectBase {
+public:
+    /// Catalog tags for the visual catalog.
+    const char* tags() const override { return "🖼️"; }
+    /// A picture is a plane, and a cube takes it extruded.
+    Dim dimensions() const override { return Dim::D2; }
+
+    /// The ways `fit` places the picture, in option order.
+    enum Fit : uint8_t { kFit, kFill, kStretch, kFitCount };
+    /// Keep the picture's aspect with bands or cropped, or distort it to the grid.
+    uint8_t fit = kFit;
+    /// The ways `sampling` reads a cell's part of the picture, in option order.
+    enum Sampling : uint8_t { kPoint, kArea, kSamplingCount };
+    /// One pixel per cell, or the average of the cell's rectangle.
+    uint8_t sampling = kPoint;
+
+    /// Publish the placement and the sampling.
+    void defineControls() override {
+        static constexpr const char* kFits[] = {"fit", "fill", "stretch"};
+        static constexpr const char* kSamplings[] = {"point", "area"};
+        controls_.addSelect("fit", fit, kFits, kFitCount);
+        controls_.addSelect("sampling", sampling, kSamplings, kSamplingCount);
+    }
+    /// The placement changes the ranges and the sampling the picture drawn, so both redraw.
+    bool affectsPrepare(const char* name) const override { return std::strcmp(name, "fit") == 0 || std::strcmp(name, "sampling") == 0; }
+
+    /// Size the range tables to the grid; the first picture fills them.
+    void prepare() override {
+        cols_.resize(width());
+        rows_.resize(height());
+        picW_ = picH_ = 0;   // stale, so the next tick refills and draws
+    }
+
+    /// Sample a picture that is new, or redraw one the layer overwrote; with nothing to sample the layer is cleared once.
+    void tick() MM_NONBLOCKING override {
+        const PictureService::Reader reader;
+        if (!reader) return;   // the source is swapping or filling its only picture: sample on the next tick
+        const PictureFrame* f = &reader.frame();
+        const Layer* l = layer();
+        const uint32_t layerGen = l ? l->bufferGen() : 0;
+        if (!f->rgb || !cols_ || !rows_) {
+            setStatus("no picture: add a Picture service under Services");
+            // An effect owns its background, so a missing picture shows as black rather than the last frame.
+            if (lastGen_ != kNoPicture || layerGen != lastLayerGen_) draw::fill(canvas(), RGB{0, 0, 0});
+            lastGen_ = kNoPicture;
+            lastLayerGen_ = layerGen + 1;
+            picW_ = picH_ = 0;   // a picture arriving later refills the ranges
+            return;
+        }
+        if (status()) clearStatus();
+        bool redraw = false;
+        if (f->width != picW_ || f->height != picH_) {
+            fillRanges(cols_.data(), static_cast<uint16_t>(cols_.count()), f->width, f->height, true);
+            fillRanges(rows_.data(), static_cast<uint16_t>(rows_.count()), f->width, f->height, false);
+            picW_ = f->width;
+            picH_ = f->height;
+            redraw = true;
+        }
+        if (!redraw && f->generation == lastGen_ && layerGen == lastLayerGen_) return;
+        gather(*f);
+        lastGen_ = f->generation;
+        lastLayerGen_ = layerGen + 1;   // the Layer bumps the generation after this tick, for our own write
+    }
+
+private:
+    /// One axis of a cell's source rectangle, [lo, hi) in picture pixels; empty outside a fitted picture.
+    struct Range { uint16_t lo, hi; };
+
+    /// Each cell's range along one axis: the grid's `n` cells over the picture's `picW` × `picH`, `columns` naming the axis.
+    void fillRanges(Range* out, uint16_t n, uint16_t picW, uint16_t picH, bool columns) const {
+        const uint32_t gw = cols_.count(), gh = rows_.count();
+        uint32_t usedW = gw, usedH = gh;
+        spannedCells(picW, picH, usedW, usedH);
+        const int32_t used = static_cast<int32_t>(columns ? usedW : usedH);
+        const uint32_t pic = columns ? picW : picH;
+        const int32_t offset = (static_cast<int32_t>(columns ? gw : gh) - used) / 2;   // negative when cropped
+        for (uint32_t i = 0; i < n; i++) {
+            const int32_t k = static_cast<int32_t>(i) - offset;
+            if (k < 0 || k >= used) { out[i] = {0, 0}; continue; }
+            uint32_t lo = static_cast<uint32_t>(k) * pic / static_cast<uint32_t>(used), hi = (static_cast<uint32_t>(k) + 1) * pic / static_cast<uint32_t>(used);
+            if (hi <= lo) hi = lo + 1;   // a picture smaller than the grid: neighboring cells share a pixel
+            out[i] = {static_cast<uint16_t>(lo), static_cast<uint16_t>(hi)};
+        }
+    }
+
+    /// The cells the picture spans: the grid itself when stretched, else its aspect sets one side, smaller than the grid with bands or larger and cropped.
+    void spannedCells(uint16_t picW, uint16_t picH, uint32_t& usedW, uint32_t& usedH) const {
+        if (fit == kStretch || !picW || !picH) return;
+        const bool wider = static_cast<uint32_t>(picW) * usedH >= static_cast<uint32_t>(picH) * usedW;
+        const uint32_t scaledH = (static_cast<uint32_t>(picH) * usedW + picW / 2) / picW;   // its height at the grid's width
+        const uint32_t scaledW = (static_cast<uint32_t>(picW) * usedH + picH / 2) / picH;   // its width at the grid's height
+        if (wider == (fit == kFit)) usedH = scaledH ? scaledH : 1;
+        else usedW = scaledW ? scaledW : 1;
+    }
+
+    /// One pass over the grid, each cell from its rectangle.
+    void gather(const PictureFrame& f) {
+        const draw::Canvas cv = canvas();
+        const uint32_t gw = cols_.count(), gh = rows_.count();
+        for (uint32_t y = 0; y < gh; y++) {
+            const Range r = rows_[y];
+            for (uint32_t x = 0; x < gw; x++) {
+                const Range c = cols_[x];
+                const size_t cell = static_cast<size_t>(y) * gw + x;
+                if (r.hi == r.lo || c.hi == c.lo) { draw::pixel(cv, cell, RGB{0, 0, 0}); continue; }
+                draw::pixel(cv, cell, sampling == kArea ? average(f, c, r) : at(f, (c.lo + c.hi - 1) / 2, (r.lo + r.hi - 1) / 2));
+            }
+        }
+    }
+
+    /// The pixel at (x, y).
+    static RGB at(const PictureFrame& f, uint32_t x, uint32_t y) {
+        const uint8_t* p = f.rgb + (static_cast<size_t>(y) * f.width + x) * 3;
+        return RGB{p[0], p[1], p[2]};
+    }
+
+    /// The rectangle's mean in linear light, from at most four reads per axis.
+    static RGB average(const PictureFrame& f, Range c, Range r) {
+        const uint32_t sx = (c.hi - c.lo + 3u) / 4u, sy = (r.hi - r.lo + 3u) / 4u;
+        uint32_t sum[3] = {0, 0, 0}, n = 0;
+        for (uint32_t y = r.lo; y < r.hi; y += sy)
+            for (uint32_t x = c.lo; x < c.hi; x += sx) {
+                const RGB p = at(f, x, y);
+                sum[0] += static_cast<uint32_t>(p.r) * p.r;
+                sum[1] += static_cast<uint32_t>(p.g) * p.g;
+                sum[2] += static_cast<uint32_t>(p.b) * p.b;
+                n++;
+            }
+        return RGB{isqrt(sum[0] / n), isqrt(sum[1] / n), isqrt(sum[2] / n)};
+    }
+
+    /// The integer square root of a value below 65,536, the bitwise method.
+    static uint8_t isqrt(uint32_t v) {
+        uint32_t root = 0;
+        for (uint32_t bit = 1u << 14; bit; bit >>= 2) {
+            if (v >= root + bit) { v -= root + bit; root = (root >> 1) + bit; }
+            else root >>= 1;
+        }
+        return static_cast<uint8_t>(root);
+    }
+
+    ScratchBuffer<Range> cols_{*this};   ///< each grid column's picture columns
+    ScratchBuffer<Range> rows_{*this};   ///< each grid row's picture rows
+    uint16_t picW_ = 0, picH_ = 0;       ///< the picture size the tables were filled for
+    static constexpr uint32_t kNoPicture = UINT32_MAX;   ///< what lastGen_ holds after clearing for a missing picture
+    uint32_t lastGen_ = 0;               ///< the picture last sampled
+    uint32_t lastLayerGen_ = 0;          ///< the layer's write generation after that sample
+};
+
+}  // namespace mm
diff --git a/src/light/layers/Layer.h b/src/light/layers/Layer.h
index f99e2e1c1..ec633d787 100644
--- a/src/light/layers/Layer.h
+++ b/src/light/layers/Layer.h
@@ -310,6 +310,50 @@ class Layer : public MoonModule {
     /// The physical box depth.
     lengthType physicalDepth() const { return physicalDepth_; }
 
+    /// The effect whose wiring-order frame goes to the output unmapped, or null: the sole enabled layer, mapped, no enabled modifier, one enabled effect that delivers wiring order.
+    EffectBase* wiringSource() const {
+        if (!lut_.hasLUT()) return nullptr;   // an identity mapping is already one copy
+        EffectBase* source = soleEffect();
+        return source && source->deliversWiringOrder() && soleLayer() ? source : nullptr;
+    }
+
+    /// The one enabled effect, or null when there is none, there are two sharing the buffer, or a modifier transforms the frame.
+    EffectBase* soleEffect() const {
+        EffectBase* source = nullptr;
+        for (uint8_t i = 0; i < childCount(); i++) {
+            MoonModule* c = child(i);
+            if (!c->enabled() || (c->role() != ModuleRole::Modifier && c->role() != ModuleRole::Effect)) continue;
+            if (c->role() == ModuleRole::Modifier || source) return nullptr;
+            source = static_cast<EffectBase*>(c);
+        }
+        return source;
+    }
+
+    /// Whether this is the only enabled layer, since a stack blends logical buffers.
+    bool soleLayer() const {
+        const MoonModule* p = parent();
+        if (!p) return true;
+        uint8_t layers = 0;
+        for (uint8_t i = 0; i < p->childCount(); i++)
+            if (p->child(i)->role() == ModuleRole::Layer && p->child(i)->enabled()) layers++;
+        return layers == 1;
+    }
+
+    /// Each logical cell's physical light by the layout's own positions, `kNoDriver` where none: a wiring-order frame placed this way lands before the modifiers, which then transform it.
+    void placeByLayout(nrOfLightsType* out, nrOfLightsType cells) const {
+        for (nrOfLightsType c = 0; c < cells; c++) out[c] = kNoDriver;
+        if (!layouts_) return;
+        struct Ctx { nrOfLightsType* out; nrOfLightsType cells; lengthType w, h, d; };
+        Ctx ctx{out, cells, width_, height_, depth_};
+        // A gap stays dark, so its slot is not placed; a position outside the folded box has no cell.
+        layouts_->placeLights(CoordSink{[](void* c, nrOfLightsType idx, lengthType x, lengthType y, lengthType z) {
+            auto* k = static_cast<Ctx*>(c);
+            if (x >= k->w || y >= k->h || z >= k->d) return;
+            const nrOfLightsType cell = static_cast<nrOfLightsType>(z) * k->w * k->h + static_cast<nrOfLightsType>(y) * k->w + x;
+            if (cell < k->cells && k->out[cell] == kNoDriver) k->out[cell] = idx;
+        }, [](void*, nrOfLightsType, lengthType, lengthType, lengthType) {}, &ctx});
+    }
+
     /// Whether a mapping was wanted but could not be built, so the layer degraded to identity.
     bool lutSkipped() const { return lutSkipped_; }
 
@@ -320,7 +364,7 @@ class Layer : public MoonModule {
         clearStatus();  // re-evaluated below if a degrade path is taken
 
         // Each modifier stashes its output size, so the per-light fold reads the box at its stage.
-        uint8_t staticCount = 0;
+        staticCount_ = 0;
         hasLive_ = false;
         Coord3D box{physicalWidth_, physicalHeight_, physicalDepth_};
         for (uint8_t i = 0; i < childCount(); i++) {
@@ -329,7 +373,7 @@ class Layer : public MoonModule {
             if (m->hasModifyLive()) { hasLive_ = true; continue; }   // dynamic: per-frame, not baked
             m->modifyLogicalSize(box);
             clampLogical(box);
-            staticCount++;
+            staticCount_++;
         }
 
         // Final logical box = the running box after the last static modifier.
@@ -345,7 +389,7 @@ class Layer : public MoonModule {
         const bool anyGap = layouts_ && layouts_->hasBlackPixels();
 
         // The frame-rate floor for the common case: box cell i is driver light i. Keep it first.
-        if (staticCount == 0 && dense && !anyGap && isNaturalOrder()) {
+        if (staticCount_ == 0 && dense && !anyGap && isNaturalOrder()) {
             lut_.setIdentity(boxCount);
             allocateBuffer(boxCount);
             return;
@@ -514,6 +558,7 @@ class Layer : public MoonModule {
     uint32_t bufferGen_ = 0;   // bumped by every write to buffer_; see bufferGen()
     char statusBuf_[20] = {};  // "999×999×999" fits; owned (setStatus borrows the pointer)
     bool     hasLive_ = false;          // any enabled modifier animates per frame (gates the live pass)
+    uint8_t  staticCount_ = 0;          // enabled modifiers folded into the mapping at build time
     uint8_t* liveScratch_ = nullptr;    // snapshot for the live pass; allocated only when hasLive_
     size_t   liveScratchBytes_ = 0;
 
diff --git a/src/light/layers/MappingLUT.h b/src/light/layers/MappingLUT.h
index 416f283a7..ddb4afd75 100644
--- a/src/light/layers/MappingLUT.h
+++ b/src/light/layers/MappingLUT.h
@@ -7,31 +7,21 @@
 
 namespace mm {
 
-/// The table mapping each logical light to the physical lights it drives.
-///
-/// A logical light can map to one physical light, to none, or to many.
-/// The sequential identity case needs no table at all and is the fast path.
+/// The table mapping each logical light to the physical lights it drives: one, none or many, with no table at all on the sequential identity fast path.
 ///
 /// @moreinfo
 ///
 /// ## Four mapping kinds
 ///
-/// Identity means the logical index is the physical index, which a plain grid gives.
-/// A shuffled map reorders, as a serpentine grid does.
-/// An unmapped logical light has no physical output, which a sparse layout produces.
-/// A multimap drives several physical lights from one logical light, which mirroring produces.
-/// The last three need a table.
+/// Identity (a plain grid) needs no table; a shuffled map (serpentine), an unmapped light (a sparse layout) and a multimap (mirroring) each need one.
 ///
 /// ## Compressed sparse row
 ///
-/// Two arrays: one indexes each logical light into a run, the other holds the flat destinations.
-/// The container supplies the total, so every destination is in bounds by construction.
+/// One array indexes each logical light into a run, the other holds the flat destinations, and the container supplies the total, so every destination is in bounds.
 ///
 /// ## Paged destinations
 ///
-/// A large map on a board without PSRAM can exceed the largest contiguous block while heap remains.
-/// The destinations then split into power-of-two pages that each fit a fragmented heap.
-/// Paging is the exception: output is identical either way, so it stays an allocation detail.
+/// A large map on a board without PSRAM can outgrow the largest free block, so the destinations split into power-of-two pages; the output is identical either way.
 class MappingLUT {
 public:
     /// An empty table, in identity mode until one is built.
@@ -121,7 +111,7 @@ class MappingLUT {
         overwrites_ = true;
     }
 
-    /// Whether a table is allocated, rather than the identity fast path.
+    /// Whether a table is allocated, rather than the identity fast path. @xref{four-mapping-kinds}
     bool hasLUT() const { return !identity_; }
     /// Whether the destinations are split into pages.
     bool isPaged() const { return paged_; }
@@ -149,7 +139,7 @@ class MappingLUT {
              + static_cast<size_t>(maxDest) * sizeof(nrOfLightsType);
     }
 
-    /// Walk the physical destinations of one logical light, on the hot path.
+    /// Walk the physical destinations of one logical light, on the hot path. @xref{compressed-sparse-row}
     template<typename F>
     void forEachDestination(nrOfLightsType logicalIdx, F&& callback) const {
         if (identity_) {
@@ -173,8 +163,15 @@ class MappingLUT {
         }
     }
 
+    /// One light's channels, the common three unrolled since it runs per light on a gather.
+    static void copyLight(uint8_t* d, const uint8_t* s, size_t cpl) MM_NONBLOCKING {
+        if (cpl == 3) { d[0] = s[0]; d[1] = s[1]; d[2] = s[2]; }
+        else std::memcpy(d, s, cpl);
+    }
+
 private:
-    // Tier the destinations allocation. Returns false only on tier 3.
+
+    // Tier the destinations allocation, false only on tier 3. @xref{paged-destinations}
     bool allocateDestinations(size_t destBytes, nrOfLightsType maxDestinations) {
         if (destBytes == 0) { paged_ = false; return true; }  // nothing to map
 
diff --git a/src/light/util/DdpPacket.h b/src/light/util/DdpPacket.h
index 1def28ffc..896db6c54 100644
--- a/src/light/util/DdpPacket.h
+++ b/src/light/util/DdpPacket.h
@@ -29,11 +29,13 @@ namespace mm {
 constexpr uint16_t DDP_PORT = 4048;
 constexpr size_t DDP_HEADER_SIZE = 10;
 constexpr size_t DDP_MAX_PAYLOAD = 1440;  // 480 RGB / 360 RGBW lights; divisible by 3 and 4
+/// The flags bit marking a frame's last packet.
+constexpr uint8_t DDP_FLAG_PUSH = 0x01;
 
 /// Build a data packet; `push` marks a frame's last packet, which a double-buffering receiver shows on.
 inline size_t buildDdpPacket(uint8_t* outBuf, uint32_t offset, bool push,
                              const uint8_t* data, uint16_t dataLen) {
-    outBuf[0] = static_cast<uint8_t>(0x40 | (push ? 0x01 : 0x00));
+    outBuf[0] = static_cast<uint8_t>(0x40 | (push ? DDP_FLAG_PUSH : 0x00));
     outBuf[1] = 0;                       // sequence unused
     outBuf[2] = 0x01;                    // RGB
     outBuf[3] = 0x01;                    // default display
@@ -47,9 +49,9 @@ inline size_t buildDdpPacket(uint8_t* outBuf, uint32_t offset, bool push,
     return DDP_HEADER_SIZE + dataLen;
 }
 
-/// Parse and validate a data packet, zero-copy; everything but the version and length is ignored.
+/// Parse and validate a data packet, zero-copy, reporting its push flag when asked; the version and length are the only checks.
 inline bool parseDdpPacket(const uint8_t* pkt, size_t len, uint32_t& offsetOut,
-                           const uint8_t*& dataOut, uint16_t& dataLenOut) {
+                           const uint8_t*& dataOut, uint16_t& dataLenOut, bool* pushOut = nullptr) {
     if (!pkt || len < DDP_HEADER_SIZE) return false;
     if ((pkt[0] & 0xC0) != 0x40) return false;   // version must be 01
     const uint16_t dataLen = static_cast<uint16_t>((pkt[8] << 8) | pkt[9]);
@@ -58,6 +60,7 @@ inline bool parseDdpPacket(const uint8_t* pkt, size_t len, uint32_t& offsetOut,
               | (static_cast<uint32_t>(pkt[6]) << 8) | pkt[7];
     dataOut = pkt + DDP_HEADER_SIZE;
     dataLenOut = dataLen;
+    if (pushOut) *pushOut = (pkt[0] & DDP_FLAG_PUSH) != 0;
     return true;
 }
 
diff --git a/src/module_types.cpp b/src/module_types.cpp
index bccb04f55..37ea1823c 100644
--- a/src/module_types.cpp
+++ b/src/module_types.cpp
@@ -63,6 +63,8 @@
 #include "light/effects/FixedPointEffect.h"
 #include "light/effects/MovingHeadEffect.h"
 #include "light/effects/PacmanEffect.h"
+#include "light/effects/FseqPlayerEffect.h"
+#include "light/effects/PictureEffect.h"
 #include "light/effects/PlasmaEffect.h"
 #include "light/effects/PulseEffect.h"
 #include "light/effects/MetaballsEffect.h"
@@ -175,6 +177,7 @@
 #include "core/system/ControlModule.h"
 #include "core/services/Services.h"
 #include "core/services/AudioService.h"
+#include "core/services/PictureService.h"
 #include "core/services/OscModule.h"
 #include "core/system/I2cBusModule.h"
 #include "core/system/TasksModule.h"
@@ -261,6 +264,8 @@ void mm::registerModuleTypes() {
     mm::ModuleFactory::registerType<mm::NoiseMeterEffect>("NoiseMeterEffect", "light/effects.md#noisemeter");
     mm::ModuleFactory::registerType<mm::PaintBrushEffect>("PaintBrushEffect", "light/effects.md#paintbrush");
     mm::ModuleFactory::registerType<mm::ParticlesEffect>("ParticlesEffect", "light/effects.md#particles");
+    mm::ModuleFactory::registerType<mm::FseqPlayerEffect>("FseqPlayerEffect", "light/effects.md#fseqplayer");
+    mm::ModuleFactory::registerType<mm::PictureEffect>("PictureEffect", "light/effects.md#picture");
     mm::ModuleFactory::registerType<mm::PlasmaEffect>("PlasmaEffect", "light/effects.md#plasma");
     mm::ModuleFactory::registerType<mm::PraxisEffect>("PraxisEffect", "light/effects.md#praxis");
     mm::ModuleFactory::registerType<mm::PulseEffect>("PulseEffect", "light/effects.md#pulse");
@@ -355,6 +360,7 @@ void mm::registerModuleTypes() {
     mm::ModuleFactory::registerType<mm::ControlModule>("ControlModule", "core/system.md#control");
     mm::ModuleFactory::registerType<mm::Services>("Services", "core/services.md#services");
     mm::ModuleFactory::registerType<mm::AudioService>("AudioService", "core/services.md#audio");
+    mm::ModuleFactory::registerType<mm::PictureService>("PictureService", "core/services.md#picture");
     mm::ModuleFactory::registerType<mm::OscModule>("OscModule", "core/services.md#osc");
     mm::ModuleFactory::registerType<mm::I2cBusModule>("I2cBusModule", "core/system.md#i2c-bus");
     mm::ModuleFactory::registerType<mm::TasksModule>("TasksModule", "core/system.md#tasks");
diff --git a/src/platform/desktop/platform_desktop.cpp b/src/platform/desktop/platform_desktop.cpp
index e576b9915..08b5e9bea 100644
--- a/src/platform/desktop/platform_desktop.cpp
+++ b/src/platform/desktop/platform_desktop.cpp
@@ -175,6 +175,7 @@
 #include <winhttp.h>    // https POST: Windows' own TLS, so the .exe needs no bundled library
 #else
 #include <sys/socket.h>
+#include <sys/select.h>   // select: a receive task's wait over its UDP sockets
 #include <netinet/in.h>
 #include <arpa/inet.h>
 #include <netdb.h>      // getaddrinfo: hostname resolution for TcpConnection::connect
@@ -511,6 +512,13 @@ bool waitNotify(WorkerTask& t, uint32_t timeoutMs) {
     return true;                    // woken by a notify OR stop; the fn re-checks its stop flag
 }
 
+void sleepUs(WorkerTask& t, uint32_t us) {
+    auto* w = static_cast<DesktopWorker*>(t.impl);
+    if (!w) return;
+    std::unique_lock<std::mutex> lk(w->mtx);
+    w->cv.wait_for(lk, std::chrono::microseconds(us), [w] { return w->stop; });
+}
+
 void stopPinnedTask(WorkerTask& t) {
     auto* w = static_cast<DesktopWorker*>(t.impl);
     if (!w) return;
@@ -1785,6 +1793,9 @@ bool wifiStaInit(const char* ssid, const char* /*password*/) {
 static uint8_t testStaIp_[4] = {};
 void setTestWifiStaIPv4(const uint8_t* ip) { for (int i = 0; i < 4; i++) testStaIp_[i] = ip ? ip[i] : 0; }
 bool wifiStaConnected() MM_NONBLOCKING { return testStaIp_[0] || testStaIp_[1] || testStaIp_[2] || testStaIp_[3]; }
+static std::atomic<bool> testStaAssociated_{false};
+void setTestWifiStaAssociated(bool associated) { testStaAssociated_.store(associated, std::memory_order_relaxed); }
+bool wifiStaAssociated() MM_NONBLOCKING { return testStaAssociated_.load(std::memory_order_relaxed) || wifiStaConnected(); }
 void wifiStaGetIPv4(uint8_t out[4]) MM_NONBLOCKING { for (int i = 0; i < 4; i++) out[i] = testStaIp_[i]; }
 // Addressing is managed by the system here, so the setters reach only the test seams: a per-interface counter, and the faked cable's address.
 static std::atomic<uint32_t> testStaticApplies[2] = {};   // indexed by NetIface
@@ -1895,6 +1906,9 @@ bool resolveHost(const char* name, uint8_t ip[4]) {
     ::freeaddrinfo(res);
     return true;
 }
+
+// resolveHost runs on the resolver's worker task here, so this step answers Failed: it is reached only when that task could not be created.
+LookupStep resolveHostStep(const char*, uint8_t*) { return LookupStep::Failed; }
 // Advertising is a device concern, so these are stubs; discovery itself is datagram presence and runs here too, testable over real loopback.
 
 // No update partition here, and the route guards on the capability, so this stub exists for compile coverage only.
@@ -2136,6 +2150,28 @@ int UdpSocket::recvFrom(uint8_t* buf, size_t maxLen, uint8_t srcIp[4], uint16_t*
     return static_cast<int>(n);
 }
 
+// select() over the bound sockets, the textbook wait for a receive task; the render loop keeps polling recvFrom instead.
+int UdpSocket::waitReadable(UdpSocket* const* sockets, int count, uint32_t timeoutMs) {
+    fd_set readable;
+    FD_ZERO(&readable);
+    int maxFd = -1;
+    for (int i = 0; i < count; i++) {
+        if (!sockets[i] || sockets[i]->fd_ < 0) continue;
+#ifndef _WIN32
+        if (sockets[i]->fd_ >= FD_SETSIZE) continue;   // FD_SET past the set's size is undefined on POSIX
+#endif
+        FD_SET(sock(sockets[i]->fd_), &readable);
+        if (sockets[i]->fd_ > maxFd) maxFd = sockets[i]->fd_;
+    }
+    if (maxFd < 0) { delayMs(timeoutMs); return 0; }   // nothing open: wait out the period rather than spin
+    timeval tv{};
+    tv.tv_sec = static_cast<decltype(tv.tv_sec)>(timeoutMs / 1000);
+    tv.tv_usec = static_cast<decltype(tv.tv_usec)>((timeoutMs % 1000) * 1000);
+    const int r = ::select(maxFd + 1, &readable, nullptr, nullptr, &tv);
+    if (r < 0) { delayMs(timeoutMs); return 0; }   // an error must not spin the receive loop
+    return r;
+}
+
 // Test override forcing a multicast join to fail, since a test cannot take the host's network away.
 static std::atomic<bool> testJoinFails{false};
 void setTestJoinFails(bool fail) { testJoinFails.store(fail, std::memory_order_relaxed); }
diff --git a/src/platform/esp32/platform_esp32.cpp b/src/platform/esp32/platform_esp32.cpp
index 5dc602cf4..fb9e92f79 100644
--- a/src/platform/esp32/platform_esp32.cpp
+++ b/src/platform/esp32/platform_esp32.cpp
@@ -1355,6 +1355,10 @@ bool wifiStaConnected() MM_NONBLOCKING {
     return wifiStaConnected_.load(std::memory_order_relaxed);
 }
 
+bool wifiStaAssociated() MM_NONBLOCKING {
+    return wifiStaAssociated_.load(std::memory_order_relaxed);
+}
+
 void wifiStaGetIPv4(uint8_t out[4]) MM_NONBLOCKING {
     netifIPv4(staNetif_, out);
 }
@@ -1551,6 +1555,7 @@ bool wifiSetTxPower(int8_t quarterDbm) {
 // Stubs so the linker is satisfied: platform.h declares these and NetworkModule's discarded `if constexpr (hasWiFi)` branch still ODR-uses them. With hasWiFi false the calls are not generated, so --gc-sections drops the stubs.
 bool wifiStaInit(const char* /*ssid*/, const char* /*password*/) { return false; }
 bool wifiStaConnected() MM_NONBLOCKING { return false; }
+bool wifiStaAssociated() MM_NONBLOCKING { return false; }
 void wifiStaGetIPv4(uint8_t out[4]) MM_NONBLOCKING { out[0] = out[1] = out[2] = out[3] = 0; }
 void wifiStaStop() {}
 int wifiStaRssi() { return 0; }
@@ -1847,6 +1852,9 @@ bool resolveHost(const char* name, uint8_t ip[4]) {
     return true;
 }
 
+// resolveHost runs on the resolver's worker task here, so this step answers Failed: it is reached only when that task could not be created.
+LookupStep resolveHostStep(const char*, uint8_t*) { return LookupStep::Failed; }
+
 // Advertise-only: discovery is datagram presence, each device broadcasting and listening on its own port. Keeping it off this protocol keeps the advertisement stable, since a query for a service this device hosts destabilizes its own.
 
 // Outbound HTTP request (plain HTTP, LAN, no TLS), see platform.h. A bounded blocking lwIP call, which the caller (HueDriver) runs off the render path on tick1s. Mirrors the desktop impl.
@@ -1984,6 +1992,24 @@ int UdpSocket::recvFrom(uint8_t* buf, size_t maxLen, uint8_t srcIp[4], uint16_t*
     return static_cast<int>(n);
 }
 
+// select() over the bound sockets, the textbook wait for a receive task; the render loop keeps polling recvFrom instead.
+int UdpSocket::waitReadable(UdpSocket* const* sockets, int count, uint32_t timeoutMs) {
+    fd_set readable;
+    FD_ZERO(&readable);
+    int maxFd = -1;
+    for (int i = 0; i < count; i++) {
+        if (!sockets[i] || sockets[i]->fd_ < 0) continue;
+        FD_SET(sockets[i]->fd_, &readable);
+        if (sockets[i]->fd_ > maxFd) maxFd = sockets[i]->fd_;
+    }
+    if (maxFd < 0) { delayMs(timeoutMs); return 0; }   // nothing open: wait out the period rather than spin
+    timeval tv{};
+    tv.tv_sec = static_cast<decltype(tv.tv_sec)>(timeoutMs / 1000);
+    tv.tv_usec = static_cast<decltype(tv.tv_usec)>((timeoutMs % 1000) * 1000);
+    const int r = ::select(maxFd + 1, &readable, nullptr, nullptr, &tv);
+    return r < 0 ? 0 : r;
+}
+
 // Join an IPv4 multicast group so the bound socket receives datagrams sent to it (WLED audio sync multicasts to 239.0.0.1). INADDR_ANY as the interface lets lwip pick the default route's netif.
 bool UdpSocket::membership(const char* group, bool join) {
     if (fd_ < 0 || !group) return false;
diff --git a/src/platform/esp32/platform_esp32_es8311.cpp b/src/platform/esp32/platform_esp32_es8311.cpp
index 3666653a6..57c772792 100644
--- a/src/platform/esp32/platform_esp32_es8311.cpp
+++ b/src/platform/esp32/platform_esp32_es8311.cpp
@@ -8,7 +8,7 @@
 /// ## The domain code is unchanged
 ///
 /// It calls the codec init, a no-op on a board with a direct microphone, before the microphone init, and reads samples as always.
-/// The driver is the vendor's own managed component, built for the chips whose boards carry one.
+/// The driver is the vendor's own managed component, an ES8311 or an ES7210, built into the images whose boards carry one.
 /// The codec is a device on the board's I2C bus, which platform_esp32_i2c.cpp opens and owns.
 /// Everything else gets an inert stub that reports success, having nothing to bring up, so the one call works everywhere.
 
@@ -17,12 +17,12 @@
 #include "sdkconfig.h"
 #include "soc/soc_caps.h"
 
-// esp_codec_dev is pulled for the S31 and the P4 (idf_component.yml rule), so the implementation is gated on its presence and the file compiles on every other target.
-#if SOC_I2S_SUPPORTED && __has_include("esp_codec_dev.h")
-#define MM_HAS_ES8311 1
+// esp_codec_dev is pulled where MM_AUDIO_CODEC is set (idf_component.yml rule), so the implementation is gated on it and the file compiles in every other image.
+#if SOC_I2S_SUPPORTED && CONFIG_MM_AUDIO_CODEC
+#define MM_HAS_AUDIO_CODEC 1
 #endif
 
-#if MM_HAS_ES8311
+#if MM_HAS_AUDIO_CODEC
 
 #include "driver/i2c_master.h"
 #include "esp_codec_dev.h"
@@ -35,7 +35,7 @@ namespace mm::platform {
 
 namespace {
 
-const char* ES_TAG = "mm_es8311";
+const char* ES_TAG = "mm_codec";
 
 // The codec device and its interfaces, kept alive between init and deinit: once opened it keeps streaming, and the I2S read drains it.
 struct CodecState {
@@ -68,9 +68,30 @@ void deinitState(CodecState* st) {
 
 i2c_master_bus_handle_t i2cBusHandle();   // platform_esp32_i2c.cpp: the board's bus, which the codec attaches to
 
+namespace {
+// The codec's own part, set up for a microphone: MCLK at 256 times the sample rate, the ratio both parts key their tables on.
+const audio_codec_if_t* newCodec(CodecType type, const audio_codec_ctrl_if_t* ctrl) {
+    if (type == CodecType::Es8311) {
+        es8311_codec_cfg_t cfg = {};
+        cfg.ctrl_if = ctrl;
+        cfg.codec_mode = ESP_CODEC_DEV_WORK_MODE_ADC;   // record / mic only
+        cfg.use_mclk = true;                            // the microphone's mclkPin clocks the codec
+        cfg.mclk_div = 256;
+        cfg.pa_pin = -1;                                // mic path needs no power amp
+        return es8311_codec_new(&cfg);
+    }
+    // The first microphone only, in the left slot the mono read takes; a board's second one serves beamforming, which the spectrum does not use.
+    es7210_codec_cfg_t cfg = {};
+    cfg.ctrl_if = ctrl;
+    cfg.mic_selected = ES7210_SEL_MIC1;
+    cfg.mclk_div = 256;
+    return es7210_codec_new(&cfg);
+}
+}  // namespace
+
 bool audioCodecInit(CodecType type, uint8_t i2cAddr, uint32_t sampleRate) {
     if (type == CodecType::None) return true;     // direct-mic board: nothing to do
-    if (type != CodecType::Es8311) return false;  // unknown codec for this build
+    if (type != CodecType::Es8311 && type != CodecType::Es7210) return false;  // unknown codec for this build
     if (!i2cBusHandle()) { ESP_LOGE(ES_TAG, "no I2C bus open for the codec"); return false; }
 
     audioCodecDeinit();   // idempotent: a re-init (pin/rate change) rebuilds cleanly
@@ -86,15 +107,8 @@ bool audioCodecInit(CodecType type, uint8_t i2cAddr, uint32_t sampleRate) {
     st->ctrl = audio_codec_new_i2c_ctrl(&i2cCtrlCfg);
     if (!st->ctrl) { ESP_LOGE(ES_TAG, "codec i2c ctrl failed"); deinitState(st); return false; }
 
-    es8311_codec_cfg_t es8311Cfg = {};
-    es8311Cfg.ctrl_if = st->ctrl;
-    es8311Cfg.codec_mode = ESP_CODEC_DEV_WORK_MODE_ADC;   // record / mic only
-    es8311Cfg.use_mclk = true;                            // the microphone's mclkPin clocks the codec
-    es8311Cfg.mclk_div = 256;                             // MCLK = 256 * sample_rate (the standard
-                                                          // I2S ratio; the codec's coeff table is keyed on it, 0 fails "configure rate").
-    es8311Cfg.pa_pin = -1;                                // mic path needs no power amp
-    st->codec = es8311_codec_new(&es8311Cfg);
-    if (!st->codec) { ESP_LOGE(ES_TAG, "es8311_codec_new failed"); deinitState(st); return false; }
+    st->codec = newCodec(type, st->ctrl);
+    if (!st->codec) { ESP_LOGE(ES_TAG, "codec_new failed"); deinitState(st); return false; }
 
     esp_codec_dev_cfg_t devCfg = {};
     devCfg.codec_if = st->codec;
@@ -124,7 +138,7 @@ void audioCodecDeinit() {
 
 }  // namespace mm::platform
 
-#else  // !MM_HAS_ES8311 — no codec on this target: inert stub.
+#else  // !MM_HAS_AUDIO_CODEC: no codec in this image, an inert stub.
 
 #include <new>
 
@@ -136,4 +150,4 @@ bool audioCodecInit(CodecType type, uint8_t, uint32_t) {
 void audioCodecDeinit() {}
 }  // namespace mm::platform
 
-#endif  // MM_HAS_ES8311
+#endif  // MM_HAS_AUDIO_CODEC
diff --git a/src/platform/esp32/platform_esp32_improv.cpp b/src/platform/esp32/platform_esp32_improv.cpp
index 9df4efd1d..b3ecced95 100644
--- a/src/platform/esp32/platform_esp32_improv.cpp
+++ b/src/platform/esp32/platform_esp32_improv.cpp
@@ -15,7 +15,8 @@
 ///
 /// Several chips have a built-in USB peripheral exposing a serial endpoint with no bridge chip, and many cheap boards wire the socket to it rather than to the hardware port.
 /// So the bytes arrive on one or the other, and both are listened on, which makes one firmware work on either kind of board.
-/// The install is soft-failing: when the secondary console grabbed the peripheral first, that path is skipped and the hardware port carries on alone.
+/// Installing the USB driver takes the peripheral from the console's direct writes, so the console is switched to the driver too, as IDF's own console setup does.
+/// Log text and Improv frames then share the port, each frame carrying its own header; a failed install leaves the hardware port carrying on alone.
 ///
 /// One parser per transport, each keeping its own framing state and buffer.
 /// A shared one would let a partial frame on one side be corrupted by bytes arriving on the other, its state machine not knowing they came from different sources.
@@ -43,6 +44,7 @@
 
 #include "core/util/ImprovFrame.h"
 #include "core/util/ImprovOpReassembler.h"
+#include "core/util/JoinWindow.h"
 
 #include "driver/uart.h"
 #include "esp_log.h"
@@ -57,6 +59,7 @@
 // The built-in USB peripheral, which many boards wire their socket to instead of the hardware port: @xref{two-transports-because-the-port-may-be-either|why both are listened on}.
 #if SOC_USB_SERIAL_JTAG_SUPPORTED
 #include "driver/usb_serial_jtag.h"
+#include "driver/usb_serial_jtag_vfs.h"   // the console's writes through the driver, once it owns the port
 #endif
 
 #include <atomic>
@@ -207,18 +210,20 @@ static void improvHandleProvision(const improv::ImprovCommand& cmd) {
     g_improv.ready->store(true, std::memory_order_release);
     improvSendCurrentState(improv::STATE_PROVISIONING);
 
-    // Wait up to 30 s for a usable IP. Polls existing platform state, no extra wiring. Loop until the lease actually lands (a non-zero address), not merely until association: DHCP completes shortly after WIFI_EVENT_STA_CONNECTED, so breaking on wifiStaConnected() alone could read 0.0.0.0.
+    // Wait for a usable address over the station's own window, so a wrong password or a missing network is answered when the cascade gives up, inside the installer's 30 s. The module starts the join on its next one-second tick and checks once a second, which the 2 s covers.
     uint8_t ip[4] = {};
-    for (int i = 0; i < 300; i++) {  // 30 s @ 100 ms
+    bool associated = false;
+    for (uint32_t waited = 0; waited < mm::staWindowMs(associated) + 2000; waited += 100) {
         vTaskDelay(pdMS_TO_TICKS(100));
+        associated = wifiStaAssociated();
         if (wifiStaConnected()) {
             wifiStaGetIPv4(ip);
-            if (ip[0] || ip[1] || ip[2] || ip[3]) break;   // have a real address
+            if (ip[0] || ip[1] || ip[2] || ip[3]) break;   // the lease landed, not merely the association
         }
     }
-    // No usable lease (never associated, or associated but DHCP never completed) is a failure, same as the timeout, http://0.0.0.0/ would be worse than an honest error.
+    // No usable lease is a failure: http://0.0.0.0/ would be worse than an honest error.
     if (!ip[0] && !ip[1] && !ip[2] && !ip[3]) {
-        improvSetStatus("error: no IP after 30s");
+        improvSetStatus(associated ? "error: joined but no address" : "error: could not join: wrong password or network not found");
         improvSendError(improv::ERROR_UNABLE_TO_CONNECT);
         return;
     }
@@ -371,13 +376,15 @@ static void improvTask(void* /*arg*/) {
         usb_serial_jtag_driver_config_t jtag_cfg = USB_SERIAL_JTAG_DRIVER_CONFIG_DEFAULT();
         esp_err_t jtag_err = usb_serial_jtag_driver_install(&jtag_cfg);
         if (jtag_err == ESP_OK) {
+            usb_serial_jtag_vfs_use_driver();   // or the log's direct FIFO writes collide with the driver and the port goes silent
             g_jtagReady = true;
         } else {
             ESP_LOGW(IMPROV_TAG, "usb_serial_jtag_install failed: %s",
                      esp_err_to_name(jtag_err));
         }
     } else {
-        // Someone else already installed it (rare). We can still read + write through it.
+        // Someone else already installed it (rare). We read and write through it, and the console must too.
+        usb_serial_jtag_vfs_use_driver();
         g_jtagReady = true;
     }
 #endif
diff --git a/src/platform/esp32/platform_esp32_worker.cpp b/src/platform/esp32/platform_esp32_worker.cpp
index 2dc3a9261..7d6954aea 100644
--- a/src/platform/esp32/platform_esp32_worker.cpp
+++ b/src/platform/esp32/platform_esp32_worker.cpp
@@ -37,6 +37,8 @@
 #include "freertos/FreeRTOS.h"
 #include "freertos/task.h"
 #include "esp_task_wdt.h"   // the render loop and the encode worker each subscribe themselves so a wedge self-heals (reboot) not hangs
+#include "esp_log.h"         // sleepUs says once when it falls back to a scheduler tick
+#include "esp_timer.h"       // sleepUs: a one-shot timer wakes the task, finer than the scheduler tick
 
 #include <atomic>
 #include <new>
@@ -56,12 +58,20 @@ struct EspWorker {
     std::atomic<bool> finished{false};
     // Ownership handshake for the timeout path: normally stopPinnedTask waits for `finished` and frees `w`. If it TIMES OUT (the worker couldn't be scheduled, a same-core teardown), it hands ownership to the trampoline by setting `detached`, and whichever of the two runs last frees `w`. The atomic-exchange below makes exactly one side win, so `w` is freed once and never used-after-free.
     std::atomic<bool> detached{false};
+    /// The one-shot timer sleepUs arms, created on the task's first sleep and deleted as the task ends.
+    esp_timer_handle_t sleepTimer = nullptr;
+    bool sleepFellBack = false;   ///< a timer failed once and the task slept a whole tick, logged that first time
 };
 
 // The trampoline: run the caller's function, which owns its own loop and returns once it sees the stop flag, then delete the task. The function manages its own watchdog membership, subscribing at loop start and unsubscribing before returning; one that never subscribes leaves the feed a no-op, so this stays generic.
 void workerTrampoline(void* arg) {
     auto* w = static_cast<EspWorker*>(arg);
     w->fn(w->user);                     // runs until stopPinnedTask flips w->stop and wakes it
+    if (w->sleepTimer) {
+        esp_timer_stop(w->sleepTimer);
+        esp_timer_delete(w->sleepTimer);
+        w->sleepTimer = nullptr;
+    }
     w->finished.store(true, std::memory_order_release);
     // If stopPinnedTask already timed out and detached, IT is gone and won't free `w`, we own it now. The exchange makes exactly one side observe `detached==true` first: whoever sees it frees `w`.
     if (w->detached.exchange(true, std::memory_order_acq_rel)) delete w;
@@ -98,6 +108,28 @@ bool waitNotify(WorkerTask& t, uint32_t timeoutMs) {
     return ulTaskNotifyTake(pdTRUE, pdMS_TO_TICKS(timeoutMs)) != 0;
 }
 
+// Without a timer the task sleeps a whole scheduler tick, which stretches a paced frame tenfold, so the first time says so.
+static void sleepTick(EspWorker* w) {
+    if (!w->sleepFellBack) ESP_LOGW("mm_worker", "sleepUs: no timer, sleeping a scheduler tick per gap");
+    w->sleepFellBack = true;
+    vTaskDelay(1);
+}
+
+// A one-shot esp_timer notifies the task, so a gap below the 10 ms scheduler tick costs no busy-wait; a stop's notification ends it early, as it should.
+void sleepUs(WorkerTask& t, uint32_t us) {
+    auto* w = static_cast<EspWorker*>(t.impl);
+    if (!w || w->stop.load(std::memory_order_acquire)) return;
+    if (!w->sleepTimer) {
+        const esp_timer_create_args_t args = {
+            .callback = [](void* arg) { xTaskNotifyGive(static_cast<EspWorker*>(arg)->handle); },
+            .arg = w, .dispatch_method = ESP_TIMER_TASK, .name = "sleepUs", .skip_unhandled_events = true};
+        if (esp_timer_create(&args, &w->sleepTimer) != ESP_OK) { w->sleepTimer = nullptr; sleepTick(w); return; }
+    }
+    if (esp_timer_start_once(w->sleepTimer, us) != ESP_OK) { sleepTick(w); return; }
+    ulTaskNotifyTake(pdTRUE, pdMS_TO_TICKS(us / 1000 + 20));   // bounded, so a lost wake costs one gap and no hang
+    esp_timer_stop(w->sleepTimer);   // a stop that woke it early leaves the timer armed
+}
+
 void stopPinnedTask(WorkerTask& t) {
     auto* w = static_cast<EspWorker*>(t.impl);
     if (!w) return;
diff --git a/src/platform/platform.h b/src/platform/platform.h
index 21765d7f7..e87d80e7a 100644
--- a/src/platform/platform.h
+++ b/src/platform/platform.h
@@ -157,6 +157,8 @@ bool spawnPinnedTask(WorkerTask& t, const char* name, WorkerFn fn, void* user,
 void notifyTask(WorkerTask& t);
 /// Block inside the spawned fn until notifyTask fires or `timeoutMs` elapses; false on timeout.
 bool waitNotify(WorkerTask& t, uint32_t timeoutMs);
+/// Block inside the spawned fn for `us` microseconds, finer than the scheduler tick and leaving the core free; a stop wakes it early.
+void sleepUs(WorkerTask& t, uint32_t us);
 /// Signal stop and wake, then block until the worker fn has returned and the task is torn down.
 void stopPinnedTask(WorkerTask& t);
 /// Subscribe THIS task to the watchdog, so a wedge reboots instead of hanging silently.
@@ -618,6 +620,8 @@ uint32_t ethRestartCountForTest();
 bool wifiStaInit(const char* ssid, const char* password);
 /// Whether the station is associated and holds an IP.
 bool wifiStaConnected() MM_NONBLOCKING;
+/// Whether the station has joined its network, with or without an address yet: WiFi's counterpart of ethLinkUp.
+bool wifiStaAssociated() MM_NONBLOCKING;
 /// The station's IP as raw octets, on ethGetIPv4's contract.
 void wifiStaGetIPv4(uint8_t out[4]) MM_NONBLOCKING;
 /// This device's IP from whichever interface is up, Ethernet first, all-zero before either is.
@@ -682,6 +686,8 @@ void netGetIPv4(NetIface iface, uint8_t ip[4], uint8_t gw[4], uint8_t mask[4], u
 #ifndef ESP_PLATFORM   // a host-test seam, which no ESP32 code calls
 /// Make wifiStaInit succeed, so a host test can drive the station cascade a radio-less desktop never enters.
 void setTestWifiStaAvailable(bool available);
+/// Make the station joined to its network while it waits for an address, for a host test.
+void setTestWifiStaAssociated(bool associated);
 #endif
 #ifndef ESP_PLATFORM   // a host-test seam, which no ESP32 code calls
 /// The network the station was last asked to join, so a host test sees the order the cascade tries them in.
@@ -748,6 +754,10 @@ void mdnsStop();
 void mdnsShutdown();
 /// Resolve a host name to its IPv4 address, `.local` by mDNS and any other by DNS; it blocks, so only a background task calls it.
 bool resolveHost(const char* name, uint8_t ip[4]);
+/// How far a non-blocking lookup has come.
+enum class LookupStep : uint8_t { Pending, Resolved, Failed };
+/// Start or continue resolving `name` without blocking, for a board with no worker task. One name at a time: a new name abandons the one in flight, and a start may allocate once.
+LookupStep resolveHostStep(const char* name, uint8_t ip[4]);
 
 /// Store the DHCP hostname the next bring-up advertises; call it before ethInit or wifiStaInit.
 void setHostname(const char* name);
@@ -841,6 +851,8 @@ class UdpSocket {
     // A datagram longer than `maxLen` is truncated; `srcIp` and `srcPort` also answer who sent it, which a reply is addressed to.
     /// Receive one datagram without blocking: bytes copied, or -1 when nothing is pending.
     int recvFrom(uint8_t* buf, size_t maxLen, uint8_t srcIp[4] = nullptr, uint16_t* srcPort = nullptr);
+    /// Block until any of `sockets` has a datagram waiting or `timeoutMs` passes: how many are readable, 0 on a timeout, -1 where a platform cannot wait.
+    static int waitReadable(UdpSocket* const* sockets, int count, uint32_t timeoutMs);
     /// Send once to an explicit address.
     bool sendToAddr(const uint8_t ip[4], uint16_t port, const uint8_t* data, size_t len);
     // Without the membership the OS never delivers those datagrams, however correct the port.
@@ -1305,7 +1317,7 @@ void hub75Deinit(Hub75Handle& h);
 // I2S audio input: two seams only, the read and the FFT, with everything between them domain code.
 
 /// Which codec sits in front of the microphone, none for a microphone that speaks I2S itself.
-enum class CodecType : uint8_t { None = 0, Es8311 = 1 };
+enum class CodecType : uint8_t { None = 0, Es8311 = 1, Es7210 = 2 };
 
 // The codec is a device on the board's I2C bus (i2cBusOpen), so only its address is its own; its master clock is the microphone's `mclkPin`.
 /// Configure the audio codec at this 7-bit address, where the board has one; true when there is nothing to do.
diff --git a/src/platform/teensy/platform_teensy.cpp b/src/platform/teensy/platform_teensy.cpp
index a20eaab3c..726433c8a 100644
--- a/src/platform/teensy/platform_teensy.cpp
+++ b/src/platform/teensy/platform_teensy.cpp
@@ -9,6 +9,7 @@
 #include <QNEthernet.h>
 #include "qnethernet/qnethernet_dual_driver.h"
 #include <qnethernet/QNDNSClient.h>
+#include <qnethernet/util/ip_tools.h>
 #include <lwip/opt.h>
 
 #include <cerrno>
@@ -126,6 +127,7 @@ const char* renderTaskName() { return ""; }
 bool spawnPinnedTask(WorkerTask&, const char*, WorkerFn, void*, size_t, uint8_t, int) { return false; }
 void notifyTask(WorkerTask&) {}
 bool waitNotify(WorkerTask&, uint32_t) { return false; }
+void sleepUs(WorkerTask&, uint32_t) {}
 void stopPinnedTask(WorkerTask&) {}
 // --- Watchdog: WDOG1 on the one loop, which feeds it every tick --------------------------------
 
@@ -483,6 +485,47 @@ bool resolveHost(const char* name, uint8_t ip[4]) {
     return true;
 }
 
+namespace {
+enum class DnsState : uint8_t { Idle, InFlight, Found, Failed };
+// The one lookup in flight; lwIP answers it through the callback while Ethernet.loop runs in yield.
+struct DnsStep {
+    char name[64] = {};
+    DnsState state = DnsState::Idle;
+    uint8_t ip[4] = {};
+    uint32_t startMs = 0;
+    uint32_t generation = 0;   // tells an abandoned lookup's late answer from the current one
+};
+DnsStep g_dns;
+}  // namespace
+
+LookupStep resolveHostStep(const char* name, uint8_t ip[4]) {
+    // A lookup the lost connection carried is abandoned, so a reconnect starts afresh and its late answer is ignored.
+    if (!ethConnected()) {
+        if (g_dns.state != DnsState::Idle) { ++g_dns.generation; g_dns.state = DnsState::Idle; }
+        return LookupStep::Failed;
+    }
+    if (!name || std::strlen(name) >= sizeof(g_dns.name)) return LookupStep::Failed;
+    if (g_dns.state == DnsState::Idle || std::strcmp(g_dns.name, name) != 0) {
+        std::strcpy(g_dns.name, name);
+        const uint32_t generation = ++g_dns.generation;
+        g_dns.state = DnsState::InFlight;
+        g_dns.startMs = ::millis();
+        const bool started = DNSClient::getHostByName(g_dns.name, [generation](const ip_addr_t* found) {
+            if (generation != g_dns.generation) return;
+            if (found) copyIp(IPAddress(qindesign::network::util::ip_addr_get_ip4_uint32(found)), g_dns.ip);
+            g_dns.state = found ? DnsState::Found : DnsState::Failed;
+        }, kResolveTimeoutMs);
+        if (!started) g_dns.state = DnsState::Failed;
+    }
+    // QNEthernet drops an answer that arrives after the timeout without calling back, so the timeout is read here.
+    if (g_dns.state == DnsState::InFlight && ::millis() - g_dns.startMs >= kResolveTimeoutMs) g_dns.state = DnsState::Failed;
+    if (g_dns.state == DnsState::InFlight) return LookupStep::Pending;
+    const bool found = g_dns.state == DnsState::Found;
+    if (found) std::memcpy(ip, g_dns.ip, 4);
+    g_dns.state = DnsState::Idle;
+    return found ? LookupStep::Resolved : LookupStep::Failed;
+}
+
 // --- WiFi: none on a Teensy ---------------------------------------------------------------------
 
 void wifiStaGetIPv4(uint8_t out[4]) MM_NONBLOCKING { std::memset(out, 0, 4); }
@@ -566,6 +609,9 @@ bool UdpSocket::bind(uint16_t port, const uint8_t[4]) {
     return false;
 }
 
+// One loop and no tasks: the receive side polls recvFrom from the render loop, so there is nothing to wait in.
+int UdpSocket::waitReadable(UdpSocket* const*, int, uint32_t) { return -1; }
+
 int UdpSocket::recvFrom(uint8_t* buf, size_t maxLen, uint8_t srcIp[4], uint16_t* srcPort) {
     if (fd_ < 0) return -1;
     EthernetUDP& udp = g_udp[fd_];
diff --git a/src/ui/app.js b/src/ui/app.js
index 6f5e8328b..6603f9b93 100644
--- a/src/ui/app.js
+++ b/src/ui/app.js
@@ -5395,6 +5395,8 @@ const EMOJI_LABEL = {
     "\u{1F3B5}": "reacts to volume: how loud the room is",
     "\u{1F3B6}": "reacts to frequency: which notes are playing",
     "\u{1F4E1}": "takes its picture from the network",
+    "\u{1F5BC}\uFE0F": "samples the Picture service's picture",
+    "\u{1F39E}\uFE0F": "plays a recorded show from a file",
     "\u{1F3AF}": "aims moving heads",
     "\u{1F47E}": "pixel art: games and sprites",
     "\u{1F9EC}": "a simulation: cells evolving off their own last frame",
diff --git a/teensy/patches/QNEthernet-recv-window-on-read.patch b/teensy/patches/QNEthernet-recv-window-on-read.patch
new file mode 100644
index 000000000..2144a82dc
--- /dev/null
+++ b/teensy/patches/QNEthernet-recv-window-on-read.patch
@@ -0,0 +1,38 @@
+Open the TCP receive window as the application reads, not as the stack copies:
+acknowledging on copy let the peer send into a full buffer, which refused the
+segment, dropped the ones behind it and cost a retransmit each.
+
+diff --git a/src/qnethernet/QNEthernetClient.cpp b/src/qnethernet/QNEthernetClient.cpp
+index 080c35e..33780a4 100644
+--- a/src/qnethernet/QNEthernetClient.cpp
++++ b/src/qnethernet/QNEthernetClient.cpp
+@@ -573,6 +573,7 @@ int EthernetClient::read() {
+   if (!isAvailable(*state)) {
+     return -1;
+   }
++  altcp_recved((*state)->pcb, 1);  // Reopen the window by what was consumed
+   return (*state)->buf[(*state)->bufPos++];
+ }
+ 
+@@ -617,6 +618,7 @@ int EthernetClient::read(uint8_t* const buf, const size_t size) {
+     (void)std::copy_n(&(*state)->buf.data()[(*state)->bufPos], actualSize, buf);
+   }
+   (*state)->bufPos += actualSize;
++  altcp_recved((*state)->pcb, static_cast<uint16_t>(actualSize));  // Reopen the window by what was consumed
+   return actualSize;
+ }
+ 
+diff --git a/src/qnethernet/internal/ConnectionManager.cpp b/src/qnethernet/internal/ConnectionManager.cpp
+index 5befd32..011da4a 100644
+--- a/src/qnethernet/internal/ConnectionManager.cpp
++++ b/src/qnethernet/internal/ConnectionManager.cpp
+@@ -212,7 +212,8 @@ err_t ConnectionManager::recvFunc(void* const arg, struct altcp_pcb* const tpcb,
+     }
+   }
+ 
+-  altcp_recved(tpcb, p->tot_len);
++  // The window reopens as the application reads, in EthernetClient::read, so
++  // the peer never sends more than this buffer has room for.
+   (void)pbuf_free(p);
+ 
+   return ERR_OK;
diff --git a/test/CMakeLists.txt b/test/CMakeLists.txt
index 3b7bc7432..f2cefcded 100644
--- a/test/CMakeLists.txt
+++ b/test/CMakeLists.txt
@@ -19,6 +19,7 @@ add_executable(mm_tests
     unit/core/unit_fields.cpp
     unit/core/unit_crc.cpp
     unit/core/unit_AudioService_codec.cpp
+    unit/core/unit_PictureService.cpp
     unit/core/unit_I2cBusModule.cpp
     unit/core/unit_SdCardService.cpp
     unit/core/unit_AudioService_sync.cpp
@@ -55,6 +56,7 @@ add_executable(mm_tests
     unit/core/unit_HttpServerModule_connections.cpp
     unit/core/unit_HttpServerModule_sdcard.cpp
     unit/core/unit_HttpServerModule_subscribe.cpp
+    unit/core/unit_HttpServerModule_upload.cpp
     unit/core/unit_StateDocument.cpp
     unit/core/unit_ImprovFrame.cpp
     unit/core/unit_ImprovOpReassembler.cpp
@@ -141,6 +143,8 @@ add_executable(mm_tests
     unit/light/unit_MirrorModifier.cpp
     unit/light/unit_NoiseMeterEffect.cpp
     unit/light/unit_PaintBrushEffect.cpp
+    unit/light/unit_PictureEffect.cpp
+    unit/light/unit_FseqPlayerEffect.cpp
     unit/light/unit_PraxisEffect.cpp
     unit/light/unit_RandomEffect.cpp
     unit/light/unit_RippleXZModifier.cpp
diff --git a/test/js/improv-frame.test.mjs b/test/js/improv-frame.test.mjs
index 07e1e5244..fcf93085a 100644
--- a/test/js/improv-frame.test.mjs
+++ b/test/js/improv-frame.test.mjs
@@ -15,6 +15,11 @@ import {
     IMPROV_CMD_APPLY_OP,
     IMPROV_FRAME_TYPE_RPC,
     IMPROV_MAGIC,
+    IMPROV_FRAME_TYPE_ERROR,
+    IMPROV_FRAME_TYPE_RPC_RESULT,
+    IMPROV_ERROR_OP_REFUSED,
+    applyOpReply,
+    parseImprovFrames,
 } from "../../mooninstaller/improv-frame.js";
 
 const hex = (u8) => Array.from(u8).map((b) => b.toString(16).padStart(2, "0")).join(" ");
@@ -125,3 +130,45 @@ test("no catalog entry has a container document the device cannot reassemble (51
         }
     }
 });
+
+const join = (...parts) => {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let o = 0;
+    for (const p of parts) { out.set(p, o); o += p.length; }
+    return out;
+};
+const ack = () => buildImprovFrame(IMPROV_FRAME_TYPE_RPC_RESULT, new Uint8Array([IMPROV_CMD_APPLY_OP, 0]));
+const refusal = () => buildImprovFrame(IMPROV_FRAME_TYPE_ERROR, new Uint8Array([IMPROV_ERROR_OP_REFUSED]));
+
+test("a reply is found between lines of log text", () => {
+    const text = new TextEncoder().encode("I (123) tick 125 fps\n");
+    const { frames, rest } = parseImprovFrames(join(text, ack(), text));
+    assert.equal(frames.length, 1);
+    assert.equal(applyOpReply(frames[0]), "ack");
+    assert.ok(rest.length < IMPROV_MAGIC.length, "the log text after it is not kept");
+});
+
+test("a reply split across two reads is kept until it is whole", () => {
+    const frame = refusal();
+    const first = parseImprovFrames(frame.subarray(0, 7));
+    assert.equal(first.frames.length, 0);
+    const second = parseImprovFrames(join(first.rest, frame.subarray(7)));
+    assert.equal(second.frames.length, 1);
+    assert.equal(applyOpReply(second.frames[0]), "refused");
+});
+
+test("a frame whose checksum fails is skipped and the next one still read", () => {
+    const bad = ack();
+    bad[bad.length - 1] ^= 0xff;
+    const { frames } = parseImprovFrames(join(bad, refusal()));
+    assert.deepEqual(frames.map(applyOpReply), ["refused"]);
+});
+
+test("an APPLY_OP reply is an ack, a refusal to resend, or an operation the firmware lacks", () => {
+    assert.equal(applyOpReply({ type: IMPROV_FRAME_TYPE_ERROR, payload: new Uint8Array([0x03]) }), "refused", "an error left from a failed join is resent past");
+    assert.equal(applyOpReply({ type: IMPROV_FRAME_TYPE_RPC_RESULT, payload: new Uint8Array([IMPROV_CMD_APPLY_OP, 0]) }), "ack");
+    assert.equal(applyOpReply({ type: IMPROV_FRAME_TYPE_ERROR, payload: new Uint8Array([IMPROV_ERROR_OP_REFUSED]) }), "refused");
+    assert.equal(applyOpReply({ type: IMPROV_FRAME_TYPE_ERROR, payload: new Uint8Array([0x02]) }), "unsupported");
+    assert.equal(applyOpReply({ type: IMPROV_FRAME_TYPE_ERROR, payload: new Uint8Array([0x00]) }), null, "no error is no reply");
+    assert.equal(applyOpReply({ type: 0x01, payload: new Uint8Array([0x04]) }), null, "a state frame is not a reply");
+});
diff --git a/test/python/test_fseq_play.py b/test/python/test_fseq_play.py
new file mode 100644
index 000000000..d91e4b55f
--- /dev/null
+++ b/test/python/test_fseq_play.py
@@ -0,0 +1,67 @@
+# /// script
+# dependencies = ["pytest"]
+# ///
+"""FSEQ reference sender tests: the file format FPP documents, and the DDP framing Network Receive parses."""
+
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[2] / "moondeck" / "run"))
+
+import fseq_play  # noqa: E402
+
+
+def test_a_written_file_reads_back_as_uncompressed_v2(tmp_path):
+    """The header carries the version, the channel count, the frame count and the step time a player needs."""
+    path = tmp_path / "show.fseq"
+    fseq_play.write_fseq(path, [bytes(12), bytes(12)], 50)
+    info = fseq_play.read_header(path)
+    assert info["version"] == "2.0"
+    assert info["channels"] == 12 and info["frames"] == 2 and info["step_ms"] == 50
+    assert info["compression"] == 0 and info["sparse_ranges"] == 0
+    assert info["data_offset"] >= info["header_len"] and info["data_offset"] % 4 == 0
+
+
+def test_frames_follow_the_header_at_the_data_offset(tmp_path):
+    """A player seeks to the data offset and reads one channel count per frame."""
+    path = tmp_path / "show.fseq"
+    frames = [bytes([1, 2, 3]), bytes([4, 5, 6])]
+    fseq_play.write_fseq(path, frames, 25)
+    info = fseq_play.read_header(path)
+    raw = path.read_bytes()[info["data_offset"]:]
+    assert raw == b"".join(frames)
+
+
+def test_a_file_that_is_not_fseq_is_refused(tmp_path):
+    """Anything without the PSEQ identifier stops the tool rather than playing noise."""
+    path = tmp_path / "not.fseq"
+    path.write_bytes(b"GIF89a" + bytes(40))
+    try:
+        fseq_play.read_header(path)
+    except SystemExit:
+        return
+    raise AssertionError("a non-FSEQ file was accepted")
+
+
+def test_serpentine_wiring_reverses_every_other_row():
+    """Wiring order is what xLights writes: row 1 of a serpentine panel runs right to left."""
+    assert fseq_play.wiring_index(0, 0, 4, True) == 0
+    assert fseq_play.wiring_index(3, 0, 4, True) == 3
+    assert fseq_play.wiring_index(0, 1, 4, True) == 7
+    assert fseq_play.wiring_index(3, 1, 4, True) == 4
+    assert fseq_play.wiring_index(0, 1, 4, False) == 4
+
+
+def test_the_sweep_marks_the_logical_corner_in_wiring_order():
+    """The white light sits at logical (0, 0) wherever the wiring puts it, so a wrong mapping shows."""
+    frame = fseq_play.sweep_frame(4, 2, 0, True)
+    assert frame[0:3] == b"\xff\xff\xff"
+
+
+def test_a_frame_becomes_ddp_packets_with_the_push_on_the_last():
+    """1440-byte chunks, byte offsets, the version bits, and the push flag only on the final packet."""
+    packets = fseq_play.ddp_packets(bytes(3000))
+    assert [len(p) - fseq_play.DDP_HEADER for p in packets] == [1440, 1440, 120]
+    assert [int.from_bytes(p[4:8], "big") for p in packets] == [0, 1440, 2880]
+    assert all(p[0] & 0xC0 == 0x40 for p in packets)
+    assert [p[0] & 0x01 for p in packets] == [0, 0, 1]
diff --git a/test/python/test_improv_smoke_test.py b/test/python/test_improv_smoke_test.py
new file mode 100644
index 000000000..89db63237
--- /dev/null
+++ b/test/python/test_improv_smoke_test.py
@@ -0,0 +1,23 @@
+"""The smoke test's URL reading: a provisioned board's URL comes from either step, so the network check runs whenever the board reports one."""
+
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[2] / "moondeck" / "build"))
+
+import improv_smoke_test  # noqa: E402
+
+
+def test_the_provision_step_reports_the_url():
+    out = "==> using host SSID: home\n==> provisioned: http://192.168.1.20/\n"
+    assert improv_smoke_test._device_url(out) == "http://192.168.1.20/"
+
+
+def test_the_probe_reports_a_provisioned_boards_url():
+    """A board already provisioned keeps its credentials, so the probe's current state is where its URL is."""
+    out = "      → GET_CURRENT_STATE\n        state: provisioned\n        url: http://192.168.1.127/\n"
+    assert improv_smoke_test._device_url(out) == "http://192.168.1.127/"
+
+
+def test_output_without_a_url_reports_none():
+    assert improv_smoke_test._device_url("==> device reports PROVISIONED already\n") is None
diff --git a/test/scenarios/core/scenario_Control_a_palette_preset_changes_only_the_palette.json b/test/scenarios/core/scenario_Control_a_palette_preset_changes_only_the_palette.json
index 33c59cbb8..c15b3f530 100644
--- a/test/scenarios/core/scenario_Control_a_palette_preset_changes_only_the_palette.json
+++ b/test/scenarios/core/scenario_Control_a_palette_preset_changes_only_the_palette.json
@@ -175,13 +175,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 8,
-            "p95": 324,
+            "p95": 14,
             "min": 5,
-            "max": 462,
+            "max": 14,
             "n": 32,
-            "samples": [5, 462, 324, 5, 5, 5, 7, 5, 6, 5, 6, 6, 6, 5, 5, 13, 6, 5, 11, 8, 8, 8, 8, 8, 9, 14, 8, 8, 8, 11, 8, 11]
+            "samples": [5, 7, 5, 6, 5, 6, 6, 6, 5, 5, 13, 6, 5, 11, 8, 8, 8, 8, 8, 9, 14, 8, 8, 8, 11, 8, 11, 9, 8, 8, 14, 7]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
diff --git a/test/scenarios/core/scenario_State_one_document_adds_an_effect_with_its_controls.json b/test/scenarios/core/scenario_State_one_document_adds_an_effect_with_its_controls.json
index 5866729d6..0797a64ed 100644
--- a/test/scenarios/core/scenario_State_one_document_adds_an_effect_with_its_controls.json
+++ b/test/scenarios/core/scenario_State_one_document_adds_an_effect_with_its_controls.json
@@ -70,13 +70,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 387,
+            "p95": 8,
             "min": 1,
-            "max": 555,
-            "n": 31,
-            "samples": [367, 555, 1, 387, 1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 1, 1, 4, 1, 7, 7, 8, 7, 7, 8, 7, 7, 7, 7, 8, 9, 7]
+            "max": 9,
+            "n": 32,
+            "samples": [1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 1, 1, 4, 1, 7, 7, 8, 7, 7, 8, 7, 7, 7, 7, 8, 9, 7, 7, 7, 7, 7, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
diff --git a/test/scenarios/device/scenario_NetworkReceive_two_boards.json b/test/scenarios/device/scenario_NetworkReceive_two_boards.json
new file mode 100644
index 000000000..83382f727
--- /dev/null
+++ b/test/scenarios/device/scenario_NetworkReceive_two_boards.json
@@ -0,0 +1,3826 @@
+{
+  "name": "scenario_NetworkReceive_two_boards",
+  "module": "NetworkReceiveEffect",
+  "also": [
+    "NetworkSendDriver",
+    "Layer",
+    "GridLayout"
+  ],
+  "mode": "mutate",
+  "live_only": true,
+  "boards": [
+    "sender"
+  ],
+  "description": "Two boards: the sender board sends with Network Send, this device receives with Network Receive. Sweeps grid size, identity against serpentine layout, mapped by the receiver against the sender, one layer against two, and the three protocols, reading Network Receive's tick and its packets and frames per second against what the sender sent.",
+  "top": [
+    "Layouts",
+    "Effects"
+  ],
+  "steps": [
+    {
+      "name": "sender-clear-layouts",
+      "device": "sender",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "$patch": "replace"
+        }
+      },
+      "description": "The sender's canvas: one grid, one layer with a changing effect, and a Network Send aimed at the receiver."
+    },
+    {
+      "name": "sender-clear-effects",
+      "device": "sender",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "$patch": "replace"
+        }
+      }
+    },
+    {
+      "name": "sender-grid",
+      "device": "sender",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "Grid": {
+            "type": "GridLayout",
+            "width": 16,
+            "height": 16
+          }
+        }
+      }
+    },
+    {
+      "name": "sender-layer",
+      "device": "sender",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer": {
+            "type": "Layer",
+            "Rainbow": {
+              "type": "RainbowEffect"
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "sender-send",
+      "device": "sender",
+      "op": "apply_state",
+      "document": {
+        "Drivers": {
+          "Send": {
+            "type": "NetworkSendDriver",
+            "hosts": "{host}",
+            "protocol": 2,
+            "fps": 40
+          }
+        }
+      }
+    },
+    {
+      "name": "receiver-clear-layouts",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "$patch": "replace"
+        }
+      },
+      "description": "The receiver's canvas: one grid and one layer holding Network Receive; its own drivers stay, so the forward mapping is the real one."
+    },
+    {
+      "name": "receiver-clear-effects",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "$patch": "replace"
+        }
+      }
+    },
+    {
+      "name": "receiver-grid",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "Grid": {
+            "type": "GridLayout",
+            "width": 16,
+            "height": 16
+          }
+        }
+      }
+    },
+    {
+      "name": "receiver-layer",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer": {
+            "type": "Layer",
+            "NetworkReceive": {
+              "type": "NetworkReceiveEffect"
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "sender-16x16-width",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 16
+    },
+    {
+      "name": "sender-16x16-height",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 16
+    },
+    {
+      "name": "receiver-16x16-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 16
+    },
+    {
+      "name": "receiver-16x16-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 16
+    },
+    {
+      "name": "16x16-identity",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": false
+    },
+    {
+      "name": "16x16-identity-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "16x16-identity-receiver",
+      "description": "256 lights, identity layout, mapped by the receiver, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2853,
+            "p95": 3234,
+            "min": 2853,
+            "max": 3234,
+            "n": 2,
+            "samples": [3234, 2853]
+          },
+          "free_heap": {
+            "p50": 8460931,
+            "p95": 8463743,
+            "min": 8460931,
+            "max": 8463743,
+            "n": 2,
+            "samples": [8460931, 8463743]
+          },
+          "max_alloc_block": {
+            "p50": 32768,
+            "p95": 38912,
+            "min": 32768,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 32768]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 64,
+            "p95": 65,
+            "min": 64,
+            "max": 65,
+            "n": 2,
+            "samples": [64, 65]
+          },
+          "free_heap": {
+            "p50": 33857139,
+            "p95": 33917587,
+            "min": 33857139,
+            "max": 33917587,
+            "n": 2,
+            "samples": [33917587, 33857139]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2925,
+            "p95": 3229,
+            "min": 2740,
+            "max": 3229,
+            "n": 4,
+            "samples": [2925, 3031, 2740, 3229]
+          },
+          "free_heap": {
+            "p50": 8464491,
+            "p95": 8464907,
+            "min": 8459951,
+            "max": 8464907,
+            "n": 4,
+            "samples": [8464491, 8459951, 8464883, 8464907]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 40960,
+            "max": 49152,
+            "n": 4,
+            "samples": [47104, 47104, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 70,
+            "p95": 83,
+            "min": 64,
+            "max": 83,
+            "n": 6,
+            "samples": [64, 78, 80, 70, 83, 65]
+          },
+          "free_heap": {
+            "p50": 33857083,
+            "p95": 33917559,
+            "min": 33828655,
+            "max": 33917559,
+            "n": 6,
+            "samples": [33917559, 33912323, 33855979, 33828655, 33857083, 33857099]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 249856,
+            "min": 159744,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 192512, 159744, 192512, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2144,
+            "p95": 2144,
+            "min": 2144,
+            "max": 2144,
+            "n": 1,
+            "samples": [2144]
+          },
+          "free_heap": {
+            "p50": 298520,
+            "p95": 298520,
+            "min": 298520,
+            "max": 298520,
+            "n": 1,
+            "samples": [298520]
+          },
+          "max_alloc_block": {
+            "p50": 236328,
+            "p95": 236328,
+            "min": 236328,
+            "max": 236328,
+            "n": 1,
+            "samples": [236328]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2147,
+            "p95": 2163,
+            "min": 2147,
+            "max": 2163,
+            "n": 2,
+            "samples": [2147, 2163]
+          },
+          "free_heap": {
+            "p50": 297928,
+            "p95": 299048,
+            "min": 297928,
+            "max": 299048,
+            "n": 2,
+            "samples": [297928, 299048]
+          },
+          "max_alloc_block": {
+            "p50": 181024,
+            "p95": 274432,
+            "min": 181024,
+            "max": 274432,
+            "n": 2,
+            "samples": [181024, 274432]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "16x16-identity-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "16x16-identity-sender",
+      "description": "256 lights, identity layout, mapped by the sender, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2859,
+            "p95": 2908,
+            "min": 2859,
+            "max": 2908,
+            "n": 2,
+            "samples": [2908, 2859]
+          },
+          "free_heap": {
+            "p50": 8457291,
+            "p95": 8459071,
+            "min": 8457291,
+            "max": 8459071,
+            "n": 2,
+            "samples": [8457291, 8459071]
+          },
+          "max_alloc_block": {
+            "p50": 38912,
+            "p95": 43008,
+            "min": 38912,
+            "max": 43008,
+            "n": 2,
+            "samples": [38912, 43008]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 64,
+            "p95": 68,
+            "min": 64,
+            "max": 68,
+            "n": 2,
+            "samples": [64, 68]
+          },
+          "free_heap": {
+            "p50": 33857139,
+            "p95": 33917599,
+            "min": 33857139,
+            "max": 33917599,
+            "n": 2,
+            "samples": [33917599, 33857139]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2746,
+            "p95": 2831,
+            "min": 2745,
+            "max": 2831,
+            "n": 4,
+            "samples": [2746, 2831, 2805, 2745]
+          },
+          "free_heap": {
+            "p50": 8464495,
+            "p95": 8464883,
+            "min": 8463579,
+            "max": 8464883,
+            "n": 4,
+            "samples": [8464495, 8463579, 8464883, 8464883]
+          },
+          "max_alloc_block": {
+            "p50": 40960,
+            "p95": 49152,
+            "min": 34816,
+            "max": 49152,
+            "n": 4,
+            "samples": [47104, 34816, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 64,
+            "p95": 76,
+            "min": 64,
+            "max": 76,
+            "n": 6,
+            "samples": [64, 64, 66, 76, 64, 65]
+          },
+          "free_heap": {
+            "p50": 33856435,
+            "p95": 33917575,
+            "min": 33829071,
+            "max": 33917575,
+            "n": 6,
+            "samples": [33917575, 33912307, 33853199, 33829071, 33856435, 33857119]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 249856,
+            "min": 163840,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 188416, 163840, 192512, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2154,
+            "p95": 2154,
+            "min": 2154,
+            "max": 2154,
+            "n": 1,
+            "samples": [2154]
+          },
+          "free_heap": {
+            "p50": 298616,
+            "p95": 298616,
+            "min": 298616,
+            "max": 298616,
+            "n": 1,
+            "samples": [298616]
+          },
+          "max_alloc_block": {
+            "p50": 236328,
+            "p95": 236328,
+            "min": 236328,
+            "max": 236328,
+            "n": 1,
+            "samples": [236328]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2150,
+            "p95": 2155,
+            "min": 2150,
+            "max": 2155,
+            "n": 2,
+            "samples": [2155, 2150]
+          },
+          "free_heap": {
+            "p50": 298192,
+            "p95": 298872,
+            "min": 298192,
+            "max": 298872,
+            "n": 2,
+            "samples": [298872, 298192]
+          },
+          "max_alloc_block": {
+            "p50": 181024,
+            "p95": 274432,
+            "min": 181024,
+            "max": 274432,
+            "n": 2,
+            "samples": [181024, 274432]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "16x16-serpentine",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": true
+    },
+    {
+      "name": "16x16-serpentine-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "16x16-serpentine-receiver",
+      "description": "256 lights, serpentine layout, mapped by the receiver, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3296,
+            "p95": 3391,
+            "min": 3296,
+            "max": 3391,
+            "n": 2,
+            "samples": [3296, 3391]
+          },
+          "free_heap": {
+            "p50": 8450231,
+            "p95": 8455807,
+            "min": 8450231,
+            "max": 8455807,
+            "n": 2,
+            "samples": [8450231, 8455807]
+          },
+          "max_alloc_block": {
+            "p50": 38912,
+            "p95": 43008,
+            "min": 38912,
+            "max": 43008,
+            "n": 2,
+            "samples": [38912, 43008]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 101,
+            "p95": 107,
+            "min": 101,
+            "max": 107,
+            "n": 2,
+            "samples": [101, 107]
+          },
+          "free_heap": {
+            "p50": 33854539,
+            "p95": 33914091,
+            "min": 33854539,
+            "max": 33914091,
+            "n": 2,
+            "samples": [33914091, 33854539]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 249856,
+            "min": 192512,
+            "max": 249856,
+            "n": 2,
+            "samples": [249856, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2847,
+            "p95": 3554,
+            "min": 2839,
+            "max": 3554,
+            "n": 4,
+            "samples": [2839, 3554, 2850, 2847]
+          },
+          "free_heap": {
+            "p50": 8457411,
+            "p95": 8461427,
+            "min": 8456627,
+            "max": 8461427,
+            "n": 4,
+            "samples": [8457411, 8456627, 8461427, 8461419]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 40960,
+            "max": 49152,
+            "n": 4,
+            "samples": [47104, 47104, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 110,
+            "p95": 125,
+            "min": 101,
+            "max": 125,
+            "n": 6,
+            "samples": [101, 125, 125, 111, 110, 106]
+          },
+          "free_heap": {
+            "p50": 33853799,
+            "p95": 33914951,
+            "min": 33821775,
+            "max": 33914951,
+            "n": 6,
+            "samples": [33914951, 33909687, 33850159, 33821775, 33853799, 33854519]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 249856,
+            "min": 159744,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 192512, 159744, 192512, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2165,
+            "p95": 2165,
+            "min": 2165,
+            "max": 2165,
+            "n": 1,
+            "samples": [2165]
+          },
+          "free_heap": {
+            "p50": 296312,
+            "p95": 296312,
+            "min": 296312,
+            "max": 296312,
+            "n": 1,
+            "samples": [296312]
+          },
+          "max_alloc_block": {
+            "p50": 236328,
+            "p95": 236328,
+            "min": 236328,
+            "max": 236328,
+            "n": 1,
+            "samples": [236328]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2143,
+            "p95": 2170,
+            "min": 2143,
+            "max": 2170,
+            "n": 2,
+            "samples": [2170, 2143]
+          },
+          "free_heap": {
+            "p50": 294680,
+            "p95": 295880,
+            "min": 294680,
+            "max": 295880,
+            "n": 2,
+            "samples": [294680, 295880]
+          },
+          "max_alloc_block": {
+            "p50": 181024,
+            "p95": 274432,
+            "min": 181024,
+            "max": 274432,
+            "n": 2,
+            "samples": [181024, 274432]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "16x16-serpentine-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "16x16-serpentine-sender",
+      "description": "256 lights, serpentine layout, mapped by the sender, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2945,
+            "p95": 3020,
+            "min": 2945,
+            "max": 3020,
+            "n": 2,
+            "samples": [2945, 3020]
+          },
+          "free_heap": {
+            "p50": 8448551,
+            "p95": 8461059,
+            "min": 8448551,
+            "max": 8461059,
+            "n": 2,
+            "samples": [8461059, 8448551]
+          },
+          "max_alloc_block": {
+            "p50": 38912,
+            "p95": 40960,
+            "min": 38912,
+            "max": 40960,
+            "n": 2,
+            "samples": [38912, 40960]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 111,
+            "p95": 120,
+            "min": 111,
+            "max": 120,
+            "n": 2,
+            "samples": [111, 120]
+          },
+          "free_heap": {
+            "p50": 33854527,
+            "p95": 33914991,
+            "min": 33854527,
+            "max": 33914991,
+            "n": 2,
+            "samples": [33914991, 33854527]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2927,
+            "p95": 3209,
+            "min": 2846,
+            "max": 3209,
+            "n": 4,
+            "samples": [2846, 2927, 3184, 3209]
+          },
+          "free_heap": {
+            "p50": 8459743,
+            "p95": 8461403,
+            "min": 8457811,
+            "max": 8461403,
+            "n": 4,
+            "samples": [8461059, 8459743, 8461403, 8457811]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 40960,
+            "max": 49152,
+            "n": 4,
+            "samples": [47104, 47104, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 114,
+            "p95": 116,
+            "min": 111,
+            "max": 116,
+            "n": 6,
+            "samples": [115, 111, 114, 114, 111, 116]
+          },
+          "free_heap": {
+            "p50": 33854163,
+            "p95": 33914623,
+            "min": 33817971,
+            "max": 33914623,
+            "n": 6,
+            "samples": [33914623, 33913715, 33850103, 33817971, 33854511, 33854163]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 155648,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 188416, 155648, 188416, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2146,
+            "p95": 2146,
+            "min": 2146,
+            "max": 2146,
+            "n": 1,
+            "samples": [2146]
+          },
+          "free_heap": {
+            "p50": 295464,
+            "p95": 295464,
+            "min": 295464,
+            "max": 295464,
+            "n": 1,
+            "samples": [295464]
+          },
+          "max_alloc_block": {
+            "p50": 236328,
+            "p95": 236328,
+            "min": 236328,
+            "max": 236328,
+            "n": 1,
+            "samples": [236328]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2142,
+            "p95": 2155,
+            "min": 2142,
+            "max": 2155,
+            "n": 2,
+            "samples": [2142, 2155]
+          },
+          "free_heap": {
+            "p50": 294944,
+            "p95": 295624,
+            "min": 294944,
+            "max": 295624,
+            "n": 2,
+            "samples": [295624, 294944]
+          },
+          "max_alloc_block": {
+            "p50": 181024,
+            "p95": 274432,
+            "min": 181024,
+            "max": 274432,
+            "n": 2,
+            "samples": [181024, 274432]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "sender-64x64-width",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64
+    },
+    {
+      "name": "sender-64x64-height",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64
+    },
+    {
+      "name": "receiver-64x64-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64
+    },
+    {
+      "name": "receiver-64x64-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64
+    },
+    {
+      "name": "64x64-identity",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": false
+    },
+    {
+      "name": "64x64-identity-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "64x64-identity-receiver",
+      "description": "4096 lights, identity layout, mapped by the receiver, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3462,
+            "p95": 4383,
+            "min": 3462,
+            "max": 4383,
+            "n": 2,
+            "samples": [3462, 4383]
+          },
+          "free_heap": {
+            "p50": 8391303,
+            "p95": 8419323,
+            "min": 8391303,
+            "max": 8419323,
+            "n": 2,
+            "samples": [8419323, 8391303]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 107,
+            "p95": 111,
+            "min": 107,
+            "max": 111,
+            "n": 2,
+            "samples": [107, 111]
+          },
+          "free_heap": {
+            "p50": 33810315,
+            "p95": 33872371,
+            "min": 33810315,
+            "max": 33872371,
+            "n": 2,
+            "samples": [33872371, 33810315]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3316,
+            "p95": 4221,
+            "min": 3227,
+            "max": 4221,
+            "n": 4,
+            "samples": [3316, 4221, 3425, 3227]
+          },
+          "free_heap": {
+            "p50": 8412323,
+            "p95": 8419047,
+            "min": 8398727,
+            "max": 8419047,
+            "n": 4,
+            "samples": [8414843, 8398727, 8412323, 8419047]
+          },
+          "max_alloc_block": {
+            "p50": 40960,
+            "p95": 49152,
+            "min": 31744,
+            "max": 49152,
+            "n": 4,
+            "samples": [47104, 31744, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 115,
+            "p95": 146,
+            "min": 105,
+            "max": 146,
+            "n": 6,
+            "samples": [105, 146, 141, 117, 115, 108]
+          },
+          "free_heap": {
+            "p50": 33811007,
+            "p95": 33872331,
+            "min": 33775623,
+            "max": 33872331,
+            "n": 6,
+            "samples": [33872331, 33858195, 33796351, 33775623, 33811207, 33811007]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 155648,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 237568, 180224, 155648, 192512, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2436,
+            "p95": 2436,
+            "min": 2436,
+            "max": 2436,
+            "n": 1,
+            "samples": [2436]
+          },
+          "free_heap": {
+            "p50": 256168,
+            "p95": 256168,
+            "min": 256168,
+            "max": 256168,
+            "n": 1,
+            "samples": [256168]
+          },
+          "max_alloc_block": {
+            "p50": 191208,
+            "p95": 191208,
+            "min": 191208,
+            "max": 191208,
+            "n": 1,
+            "samples": [191208]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2513,
+            "p95": 2526,
+            "min": 2513,
+            "max": 2526,
+            "n": 2,
+            "samples": [2526, 2513]
+          },
+          "free_heap": {
+            "p50": 253176,
+            "p95": 257712,
+            "min": 253176,
+            "max": 257712,
+            "n": 2,
+            "samples": [253176, 257712]
+          },
+          "max_alloc_block": {
+            "p50": 181024,
+            "p95": 192336,
+            "min": 181024,
+            "max": 192336,
+            "n": 2,
+            "samples": [181024, 192336]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "64x64-identity-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "64x64-identity-sender",
+      "description": "4096 lights, identity layout, mapped by the sender, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3588,
+            "p95": 3994,
+            "min": 3588,
+            "max": 3994,
+            "n": 2,
+            "samples": [3588, 3994]
+          },
+          "free_heap": {
+            "p50": 8405431,
+            "p95": 8411811,
+            "min": 8405431,
+            "max": 8411811,
+            "n": 2,
+            "samples": [8411811, 8405431]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 107,
+            "p95": 113,
+            "min": 107,
+            "max": 113,
+            "n": 2,
+            "samples": [107, 113]
+          },
+          "free_heap": {
+            "p50": 33811887,
+            "p95": 33872367,
+            "min": 33811887,
+            "max": 33872367,
+            "n": 2,
+            "samples": [33872367, 33811887]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 249856,
+            "min": 192512,
+            "max": 249856,
+            "n": 2,
+            "samples": [249856, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3355,
+            "p95": 3714,
+            "min": 3233,
+            "max": 3714,
+            "n": 4,
+            "samples": [3233, 3714, 3405, 3355]
+          },
+          "free_heap": {
+            "p50": 8415659,
+            "p95": 8419447,
+            "min": 8415307,
+            "max": 8419447,
+            "n": 4,
+            "samples": [8415307, 8417775, 8419447, 8415659]
+          },
+          "max_alloc_block": {
+            "p50": 40960,
+            "p95": 47104,
+            "min": 31744,
+            "max": 47104,
+            "n": 4,
+            "samples": [47104, 43008, 40960, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 109,
+            "p95": 119,
+            "min": 106,
+            "max": 119,
+            "n": 6,
+            "samples": [109, 119, 118, 113, 106, 109]
+          },
+          "free_heap": {
+            "p50": 33808863,
+            "p95": 33869527,
+            "min": 33768571,
+            "max": 33869527,
+            "n": 6,
+            "samples": [33864351, 33869527, 33808863, 33768571, 33811863, 33808403]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 147456,
+            "max": 249856,
+            "n": 6,
+            "samples": [241664, 249856, 188416, 147456, 188416, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2433,
+            "p95": 2433,
+            "min": 2433,
+            "max": 2433,
+            "n": 1,
+            "samples": [2433]
+          },
+          "free_heap": {
+            "p50": 265000,
+            "p95": 265000,
+            "min": 265000,
+            "max": 265000,
+            "n": 1,
+            "samples": [265000]
+          },
+          "max_alloc_block": {
+            "p50": 191208,
+            "p95": 191208,
+            "min": 191208,
+            "max": 191208,
+            "n": 1,
+            "samples": [191208]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2502,
+            "p95": 2505,
+            "min": 2502,
+            "max": 2505,
+            "n": 2,
+            "samples": [2505, 2502]
+          },
+          "free_heap": {
+            "p50": 256448,
+            "p95": 257384,
+            "min": 256448,
+            "max": 257384,
+            "n": 2,
+            "samples": [257384, 256448]
+          },
+          "max_alloc_block": {
+            "p50": 181024,
+            "p95": 192336,
+            "min": 181024,
+            "max": 192336,
+            "n": 2,
+            "samples": [181024, 192336]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "64x64-serpentine",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": true
+    },
+    {
+      "name": "64x64-serpentine-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "64x64-serpentine-receiver",
+      "description": "4096 lights, serpentine layout, mapped by the receiver, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 5678,
+            "p95": 5954,
+            "min": 5678,
+            "max": 5954,
+            "n": 2,
+            "samples": [5954, 5678]
+          },
+          "free_heap": {
+            "p50": 8328391,
+            "p95": 8346095,
+            "min": 8328391,
+            "max": 8346095,
+            "n": 2,
+            "samples": [8346095, 8328391]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 857,
+            "p95": 1143,
+            "min": 857,
+            "max": 1143,
+            "n": 2,
+            "samples": [857, 1143]
+          },
+          "free_heap": {
+            "p50": 33750383,
+            "p95": 33810483,
+            "min": 33750383,
+            "max": 33810483,
+            "n": 2,
+            "samples": [33810483, 33750383]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 245760,
+            "min": 192512,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 6268,
+            "p95": 7297,
+            "min": 5767,
+            "max": 7297,
+            "n": 4,
+            "samples": [6268, 5767, 7297, 6484]
+          },
+          "free_heap": {
+            "p50": 8353319,
+            "p95": 8357303,
+            "min": 8324719,
+            "max": 8357303,
+            "n": 4,
+            "samples": [8353319, 8324719, 8353791, 8357303]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 47104,
+            "min": 31744,
+            "max": 47104,
+            "n": 4,
+            "samples": [47104, 31744, 40960, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 930,
+            "p95": 1034,
+            "min": 821,
+            "max": 1034,
+            "n": 6,
+            "samples": [829, 1034, 985, 968, 821, 930]
+          },
+          "free_heap": {
+            "p50": 33750315,
+            "p95": 33810479,
+            "min": 33708383,
+            "max": 33810479,
+            "n": 6,
+            "samples": [33810479, 33809039, 33734987, 33708383, 33750315, 33750355]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 151552,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 180224, 151552, 192512, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2475,
+            "p95": 2475,
+            "min": 2475,
+            "max": 2475,
+            "n": 1,
+            "samples": [2475]
+          },
+          "free_heap": {
+            "p50": 206360,
+            "p95": 206360,
+            "min": 206360,
+            "max": 206360,
+            "n": 1,
+            "samples": [206360]
+          },
+          "max_alloc_block": {
+            "p50": 178904,
+            "p95": 178904,
+            "min": 178904,
+            "max": 178904,
+            "n": 1,
+            "samples": [178904]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2512,
+            "p95": 2516,
+            "min": 2512,
+            "max": 2516,
+            "n": 2,
+            "samples": [2512, 2516]
+          },
+          "free_heap": {
+            "p50": 212168,
+            "p95": 215344,
+            "min": 212168,
+            "max": 215344,
+            "n": 2,
+            "samples": [212168, 215344]
+          },
+          "max_alloc_block": {
+            "p50": 168720,
+            "p95": 180032,
+            "min": 168720,
+            "max": 180032,
+            "n": 2,
+            "samples": [168720, 180032]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "64x64-serpentine-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "64x64-serpentine-sender",
+      "description": "4096 lights, serpentine layout, mapped by the sender, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 5924,
+            "p95": 6309,
+            "min": 5924,
+            "max": 6309,
+            "n": 2,
+            "samples": [5924, 6309]
+          },
+          "free_heap": {
+            "p50": 8323455,
+            "p95": 8356839,
+            "min": 8323455,
+            "max": 8356839,
+            "n": 2,
+            "samples": [8356839, 8323455]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 1103,
+            "p95": 1292,
+            "min": 1103,
+            "max": 1292,
+            "n": 2,
+            "samples": [1103, 1292]
+          },
+          "free_heap": {
+            "p50": 33748791,
+            "p95": 33810827,
+            "min": 33748791,
+            "max": 33810827,
+            "n": 2,
+            "samples": [33810827, 33748791]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 5816,
+            "p95": 6237,
+            "min": 5683,
+            "max": 6237,
+            "n": 4,
+            "samples": [5683, 6237, 5816, 6035]
+          },
+          "free_heap": {
+            "p50": 8357267,
+            "p95": 8357715,
+            "min": 8355167,
+            "max": 8357715,
+            "n": 4,
+            "samples": [8355167, 8357715, 8357267, 8357315]
+          },
+          "max_alloc_block": {
+            "p50": 40960,
+            "p95": 49152,
+            "min": 31744,
+            "max": 49152,
+            "n": 4,
+            "samples": [47104, 31744, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 1057,
+            "p95": 1276,
+            "min": 799,
+            "max": 1276,
+            "n": 6,
+            "samples": [1063, 1276, 1057, 799, 1019, 1214]
+          },
+          "free_heap": {
+            "p50": 33750327,
+            "p95": 33810803,
+            "min": 33718011,
+            "max": 33810803,
+            "n": 6,
+            "samples": [33810803, 33807955, 33749715, 33718011, 33750327, 33750351]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 253952,
+            "min": 159744,
+            "max": 253952,
+            "n": 6,
+            "samples": [253952, 249856, 192512, 159744, 188416, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2544,
+            "p95": 2544,
+            "min": 2544,
+            "max": 2544,
+            "n": 1,
+            "samples": [2544]
+          },
+          "free_heap": {
+            "p50": 209944,
+            "p95": 209944,
+            "min": 209944,
+            "max": 209944,
+            "n": 1,
+            "samples": [209944]
+          },
+          "max_alloc_block": {
+            "p50": 178904,
+            "p95": 178904,
+            "min": 178904,
+            "max": 178904,
+            "n": 1,
+            "samples": [178904]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2502,
+            "p95": 2600,
+            "min": 2502,
+            "max": 2600,
+            "n": 2,
+            "samples": [2600, 2502]
+          },
+          "free_heap": {
+            "p50": 212432,
+            "p95": 214984,
+            "min": 212432,
+            "max": 214984,
+            "n": 2,
+            "samples": [214984, 212432]
+          },
+          "max_alloc_block": {
+            "p50": 168720,
+            "p95": 180032,
+            "min": 168720,
+            "max": 180032,
+            "n": 2,
+            "samples": [168720, 180032]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "sender-128x96-width",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 128
+    },
+    {
+      "name": "sender-128x96-height",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 96
+    },
+    {
+      "name": "receiver-128x96-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 128
+    },
+    {
+      "name": "receiver-128x96-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 96
+    },
+    {
+      "name": "128x96-identity",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": false
+    },
+    {
+      "name": "128x96-identity-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "128x96-identity-receiver",
+      "description": "12288 lights, identity layout, mapped by the receiver, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 5855,
+            "p95": 8160,
+            "min": 5855,
+            "max": 8160,
+            "n": 2,
+            "samples": [8160, 5855]
+          },
+          "free_heap": {
+            "p50": 8283407,
+            "p95": 8315687,
+            "min": 8283407,
+            "max": 8315687,
+            "n": 2,
+            "samples": [8315687, 8283407]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 305,
+            "p95": 1579,
+            "min": 305,
+            "max": 1579,
+            "n": 2,
+            "samples": [305, 1579]
+          },
+          "free_heap": {
+            "p50": 33713591,
+            "p95": 33814627,
+            "min": 33713591,
+            "max": 33814627,
+            "n": 2,
+            "samples": [33814627, 33713591]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 245760,
+            "min": 192512,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 6464,
+            "p95": 6632,
+            "min": 5826,
+            "max": 6632,
+            "n": 3,
+            "samples": [5826, 6464, 6632]
+          },
+          "free_heap": {
+            "p50": 8320995,
+            "p95": 8321399,
+            "min": 8313403,
+            "max": 8321399,
+            "n": 3,
+            "samples": [8320995, 8313403, 8321399]
+          },
+          "max_alloc_block": {
+            "p50": 43008,
+            "p95": 49152,
+            "min": 40960,
+            "max": 49152,
+            "n": 3,
+            "samples": [43008, 40960, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 642,
+            "p95": 1803,
+            "min": 441,
+            "max": 1803,
+            "n": 6,
+            "samples": [441, 1167, 642, 618, 756, 1803]
+          },
+          "free_heap": {
+            "p50": 33712011,
+            "p95": 33773723,
+            "min": 33678311,
+            "max": 33773723,
+            "n": 6,
+            "samples": [33773723, 33767207, 33687611, 33678311, 33713543, 33712011]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 151552,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 237568, 151552, 159744, 192512, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2789,
+            "p95": 2789,
+            "min": 2789,
+            "max": 2789,
+            "n": 1,
+            "samples": [2789]
+          },
+          "free_heap": {
+            "p50": 173712,
+            "p95": 173712,
+            "min": 173712,
+            "max": 173712,
+            "n": 1,
+            "samples": [173712]
+          },
+          "max_alloc_block": {
+            "p50": 110640,
+            "p95": 110640,
+            "min": 110640,
+            "max": 110640,
+            "n": 1,
+            "samples": [110640]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 5022,
+            "p95": 6680,
+            "min": 5022,
+            "max": 6680,
+            "n": 2,
+            "samples": [5022, 6680]
+          },
+          "free_heap": {
+            "p50": 181312,
+            "p95": 187736,
+            "min": 181312,
+            "max": 187736,
+            "n": 2,
+            "samples": [181312, 187736]
+          },
+          "max_alloc_block": {
+            "p50": 139176,
+            "p95": 144144,
+            "min": 139176,
+            "max": 144144,
+            "n": 2,
+            "samples": [144144, 139176]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "128x96-identity-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "128x96-identity-sender",
+      "description": "12288 lights, identity layout, mapped by the sender, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 5713,
+            "p95": 5931,
+            "min": 5713,
+            "max": 5931,
+            "n": 2,
+            "samples": [5931, 5713]
+          },
+          "free_heap": {
+            "p50": 8293355,
+            "p95": 8313563,
+            "min": 8293355,
+            "max": 8313563,
+            "n": 2,
+            "samples": [8313563, 8293355]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 238,
+            "p95": 1361,
+            "min": 238,
+            "max": 1361,
+            "n": 2,
+            "samples": [238, 1361]
+          },
+          "free_heap": {
+            "p50": 33713819,
+            "p95": 33823831,
+            "min": 33713819,
+            "max": 33823831,
+            "n": 2,
+            "samples": [33823831, 33713819]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 249856,
+            "min": 192512,
+            "max": 249856,
+            "n": 2,
+            "samples": [249856, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 6798,
+            "p95": 6800,
+            "min": 5390,
+            "max": 6800,
+            "n": 3,
+            "samples": [5390, 6798, 6800]
+          },
+          "free_heap": {
+            "p50": 8319699,
+            "p95": 8320811,
+            "min": 8302479,
+            "max": 8320811,
+            "n": 3,
+            "samples": [8320811, 8302479, 8319699]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 31744,
+            "max": 49152,
+            "n": 3,
+            "samples": [47104, 31744, 49152]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 692,
+            "p95": 1855,
+            "min": 573,
+            "max": 1855,
+            "n": 6,
+            "samples": [573, 692, 849, 619, 773, 1855]
+          },
+          "free_heap": {
+            "p50": 33699547,
+            "p95": 33775951,
+            "min": 33673223,
+            "max": 33775951,
+            "n": 6,
+            "samples": [33775951, 33772723, 33673223, 33678627, 33699547, 33710431]
+          },
+          "max_alloc_block": {
+            "p50": 159744,
+            "p95": 253952,
+            "min": 151552,
+            "max": 253952,
+            "n": 6,
+            "samples": [253952, 249856, 151552, 159744, 159744, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2714,
+            "p95": 2714,
+            "min": 2714,
+            "max": 2714,
+            "n": 1,
+            "samples": [2714]
+          },
+          "free_heap": {
+            "p50": 177504,
+            "p95": 177504,
+            "min": 177504,
+            "max": 177504,
+            "n": 1,
+            "samples": [177504]
+          },
+          "max_alloc_block": {
+            "p50": 110640,
+            "p95": 110640,
+            "min": 110640,
+            "max": 110640,
+            "n": 1,
+            "samples": [110640]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2667,
+            "p95": 9569,
+            "min": 2667,
+            "max": 9569,
+            "n": 2,
+            "samples": [9569, 2667]
+          },
+          "free_heap": {
+            "p50": 179856,
+            "p95": 180160,
+            "min": 179856,
+            "max": 180160,
+            "n": 2,
+            "samples": [180160, 179856]
+          },
+          "max_alloc_block": {
+            "p50": 144144,
+            "p95": 146352,
+            "min": 144144,
+            "max": 146352,
+            "n": 2,
+            "samples": [144144, 146352]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "128x96-serpentine",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": true
+    },
+    {
+      "name": "128x96-serpentine-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "128x96-serpentine-receiver",
+      "description": "12288 lights, serpentine layout, mapped by the receiver, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 15141,
+            "p95": 19005,
+            "min": 15141,
+            "max": 19005,
+            "n": 2,
+            "samples": [15141, 19005]
+          },
+          "free_heap": {
+            "p50": 8118775,
+            "p95": 8131755,
+            "min": 8118775,
+            "max": 8131755,
+            "n": 2,
+            "samples": [8131755, 8118775]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 220,
+            "p95": 10027,
+            "min": 220,
+            "max": 10027,
+            "n": 2,
+            "samples": [220, 10027]
+          },
+          "free_heap": {
+            "p50": 33528679,
+            "p95": 33823835,
+            "min": 33528679,
+            "max": 33823835,
+            "n": 2,
+            "samples": [33823835, 33528679]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 17380,
+            "p95": 17707,
+            "min": 11817,
+            "max": 17707,
+            "n": 3,
+            "samples": [11817, 17380, 17707]
+          },
+          "free_heap": {
+            "p50": 8128427,
+            "p95": 8133703,
+            "min": 8128283,
+            "max": 8133703,
+            "n": 3,
+            "samples": [8128283, 8133703, 8128427]
+          },
+          "max_alloc_block": {
+            "p50": 43008,
+            "p95": 47104,
+            "min": 40960,
+            "max": 47104,
+            "n": 3,
+            "samples": [47104, 40960, 43008]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 7118,
+            "p95": 9483,
+            "min": 6352,
+            "max": 9483,
+            "n": 6,
+            "samples": [7118, 6496, 8005, 7296, 6352, 9483]
+          },
+          "free_heap": {
+            "p50": 33525467,
+            "p95": 33589531,
+            "min": 33481595,
+            "max": 33589531,
+            "n": 6,
+            "samples": [33589531, 33574931, 33524287, 33481595, 33527943, 33525467]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 147456,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 237568, 192512, 147456, 188416, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2806,
+            "p95": 2806,
+            "min": 2806,
+            "max": 2806,
+            "n": 1,
+            "samples": [2806]
+          },
+          "free_heap": {
+            "p50": 130232,
+            "p95": 130232,
+            "min": 130232,
+            "max": 130232,
+            "n": 1,
+            "samples": [130232]
+          },
+          "max_alloc_block": {
+            "p50": 37160,
+            "p95": 37160,
+            "min": 37160,
+            "max": 37160,
+            "n": 1,
+            "samples": [37160]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2695,
+            "p95": 2888,
+            "min": 2695,
+            "max": 2888,
+            "n": 2,
+            "samples": [2888, 2695]
+          },
+          "free_heap": {
+            "p50": 157368,
+            "p95": 182608,
+            "min": 157368,
+            "max": 182608,
+            "n": 2,
+            "samples": [157368, 182608]
+          },
+          "max_alloc_block": {
+            "p50": 107264,
+            "p95": 131024,
+            "min": 107264,
+            "max": 131024,
+            "n": 2,
+            "samples": [107264, 131024]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "128x96-serpentine-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "128x96-serpentine-sender",
+      "description": "12288 lights, serpentine layout, mapped by the sender, DDP at 40 fps.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 14975,
+            "p95": 17066,
+            "min": 14975,
+            "max": 17066,
+            "n": 2,
+            "samples": [17066, 14975]
+          },
+          "free_heap": {
+            "p50": 8104315,
+            "p95": 8131827,
+            "min": 8104315,
+            "max": 8131827,
+            "n": 2,
+            "samples": [8131827, 8104315]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 2,
+            "samples": [38912, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 240,
+            "p95": 11754,
+            "min": 240,
+            "max": 11754,
+            "n": 2,
+            "samples": [240, 11754]
+          },
+          "free_heap": {
+            "p50": 33526107,
+            "p95": 33811451,
+            "min": 33526107,
+            "max": 33811451,
+            "n": 2,
+            "samples": [33811451, 33526107]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 241664,
+            "min": 192512,
+            "max": 241664,
+            "n": 2,
+            "samples": [241664, 192512]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 17814,
+            "p95": 18405,
+            "min": 13366,
+            "max": 18405,
+            "n": 3,
+            "samples": [13366, 18405, 17814]
+          },
+          "free_heap": {
+            "p50": 8131899,
+            "p95": 8134983,
+            "min": 8127959,
+            "max": 8134983,
+            "n": 3,
+            "samples": [8134983, 8131899, 8127959]
+          },
+          "max_alloc_block": {
+            "p50": 45056,
+            "p95": 47104,
+            "min": 40960,
+            "max": 47104,
+            "n": 3,
+            "samples": [47104, 40960, 45056]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 9044,
+            "p95": 13022,
+            "min": 8119,
+            "max": 13022,
+            "n": 6,
+            "samples": [8119, 9745, 9737, 9044, 8159, 13022]
+          },
+          "free_heap": {
+            "p50": 33516363,
+            "p95": 33588763,
+            "min": 33493455,
+            "max": 33588763,
+            "n": 6,
+            "samples": [33588763, 33587655, 33516363, 33493455, 33513107, 33527975]
+          },
+          "max_alloc_block": {
+            "p50": 180224,
+            "p95": 249856,
+            "min": 159744,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 180224, 159744, 176128, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2573,
+            "p95": 2573,
+            "min": 2573,
+            "max": 2573,
+            "n": 1,
+            "samples": [2573]
+          },
+          "free_heap": {
+            "p50": 170224,
+            "p95": 170224,
+            "min": 170224,
+            "max": 170224,
+            "n": 1,
+            "samples": [170224]
+          },
+          "max_alloc_block": {
+            "p50": 104792,
+            "p95": 104792,
+            "min": 104792,
+            "max": 104792,
+            "n": 1,
+            "samples": [104792]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2340,
+            "p95": 2489,
+            "min": 2340,
+            "max": 2489,
+            "n": 2,
+            "samples": [2489, 2340]
+          },
+          "free_heap": {
+            "p50": 152456,
+            "p95": 160616,
+            "min": 152456,
+            "max": 160616,
+            "n": 2,
+            "samples": [160616, 152456]
+          },
+          "max_alloc_block": {
+            "p50": 32656,
+            "p95": 33488,
+            "min": 32656,
+            "max": 33488,
+            "n": 2,
+            "samples": [33488, 32656]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "second-layer",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer2": {
+            "type": "Layer",
+            "Solid": {
+              "type": "SolidEffect"
+            }
+          }
+        }
+      },
+      "description": "A second layer on top, at the largest size, so the drivers blend."
+    },
+    {
+      "name": "two-layers-identity",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": false
+    },
+    {
+      "name": "two-layers-identity-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "two-layers-identity-receiver",
+      "description": "12288 lights on two layers, identity layout, mapped by the receiver.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 15955,
+            "p95": 17511,
+            "min": 15955,
+            "max": 17511,
+            "n": 2,
+            "samples": [15955, 17511]
+          },
+          "free_heap": {
+            "p50": 8255203,
+            "p95": 8278235,
+            "min": 8255203,
+            "max": 8278235,
+            "n": 2,
+            "samples": [8278235, 8255203]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 32768,
+            "min": 31744,
+            "max": 32768,
+            "n": 2,
+            "samples": [32768, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2925,
+            "p95": 7845,
+            "min": 2925,
+            "max": 7845,
+            "n": 2,
+            "samples": [2925, 7845]
+          },
+          "free_heap": {
+            "p50": 33674863,
+            "p95": 33792107,
+            "min": 33674863,
+            "max": 33792107,
+            "n": 2,
+            "samples": [33792107, 33674863]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 245760,
+            "min": 188416,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 13197,
+            "p95": 17495,
+            "min": 13185,
+            "max": 17495,
+            "n": 3,
+            "samples": [13185, 13197, 17495]
+          },
+          "free_heap": {
+            "p50": 8275107,
+            "p95": 8282175,
+            "min": 8260723,
+            "max": 8282175,
+            "n": 3,
+            "samples": [8260723, 8282175, 8275107]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 40960,
+            "min": 31744,
+            "max": 40960,
+            "n": 3,
+            "samples": [31744, 31744, 40960]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 5880,
+            "p95": 8906,
+            "min": 5506,
+            "max": 8906,
+            "n": 6,
+            "samples": [5506, 7261, 7776, 5880, 5739, 8906]
+          },
+          "free_heap": {
+            "p50": 33672403,
+            "p95": 33734995,
+            "min": 33629295,
+            "max": 33734995,
+            "n": 6,
+            "samples": [33734995, 33733939, 33667219, 33629295, 33674591, 33672403]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 249856,
+            "min": 147456,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 249856, 192512, 147456, 163840, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2621,
+            "p95": 2621,
+            "min": 2621,
+            "max": 2621,
+            "n": 1,
+            "samples": [2621]
+          },
+          "free_heap": {
+            "p50": 153744,
+            "p95": 153744,
+            "min": 153744,
+            "max": 153744,
+            "n": 1,
+            "samples": [153744]
+          },
+          "max_alloc_block": {
+            "p50": 56232,
+            "p95": 56232,
+            "min": 56232,
+            "max": 56232,
+            "n": 1,
+            "samples": [56232]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2956,
+            "p95": 3086,
+            "min": 2956,
+            "max": 3086,
+            "n": 2,
+            "samples": [2956, 3086]
+          },
+          "free_heap": {
+            "p50": 108384,
+            "p95": 112544,
+            "min": 108384,
+            "max": 112544,
+            "n": 2,
+            "samples": [112544, 108384]
+          },
+          "max_alloc_block": {
+            "p50": 70384,
+            "p95": 72592,
+            "min": 70384,
+            "max": 72592,
+            "n": 2,
+            "samples": [70384, 72592]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "two-layers-identity-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "two-layers-identity-sender",
+      "description": "12288 lights on two layers, identity layout, mapped by the sender.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 12343,
+            "p95": 12684,
+            "min": 12343,
+            "max": 12684,
+            "n": 2,
+            "samples": [12343, 12684]
+          },
+          "free_heap": {
+            "p50": 8254203,
+            "p95": 8282035,
+            "min": 8254203,
+            "max": 8282035,
+            "n": 2,
+            "samples": [8282035, 8254203]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 32768,
+            "min": 31744,
+            "max": 32768,
+            "n": 2,
+            "samples": [32768, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2926,
+            "p95": 9864,
+            "min": 2926,
+            "max": 9864,
+            "n": 2,
+            "samples": [2926, 9864]
+          },
+          "free_heap": {
+            "p50": 33674851,
+            "p95": 33794311,
+            "min": 33674851,
+            "max": 33794311,
+            "n": 2,
+            "samples": [33794311, 33674851]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 245760,
+            "min": 188416,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 11963,
+            "p95": 14760,
+            "min": 11702,
+            "max": 14760,
+            "n": 3,
+            "samples": [11963, 11702, 14760]
+          },
+          "free_heap": {
+            "p50": 8280143,
+            "p95": 8284487,
+            "min": 8274991,
+            "max": 8284487,
+            "n": 3,
+            "samples": [8280143, 8284487, 8274991]
+          },
+          "max_alloc_block": {
+            "p50": 34816,
+            "p95": 40960,
+            "min": 31744,
+            "max": 40960,
+            "n": 3,
+            "samples": [34816, 31744, 40960]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 5908,
+            "p95": 11332,
+            "min": 5431,
+            "max": 11332,
+            "n": 6,
+            "samples": [5464, 5431, 8511, 5920, 5908, 11332]
+          },
+          "free_heap": {
+            "p50": 33673615,
+            "p95": 33735275,
+            "min": 33643619,
+            "max": 33735275,
+            "n": 6,
+            "samples": [33735275, 33727675, 33673615, 33643619, 33674575, 33673059]
+          },
+          "max_alloc_block": {
+            "p50": 163840,
+            "p95": 249856,
+            "min": 151552,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 237568, 163840, 151552, 163840, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3402,
+            "p95": 3402,
+            "min": 3402,
+            "max": 3402,
+            "n": 1,
+            "samples": [3402]
+          },
+          "free_heap": {
+            "p50": 125376,
+            "p95": 125376,
+            "min": 125376,
+            "max": 125376,
+            "n": 1,
+            "samples": [125376]
+          },
+          "max_alloc_block": {
+            "p50": 56232,
+            "p95": 56232,
+            "min": 56232,
+            "max": 56232,
+            "n": 1,
+            "samples": [56232]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3086,
+            "p95": 3187,
+            "min": 3086,
+            "max": 3187,
+            "n": 2,
+            "samples": [3187, 3086]
+          },
+          "free_heap": {
+            "p50": 108384,
+            "p95": 114000,
+            "min": 108384,
+            "max": 114000,
+            "n": 2,
+            "samples": [114000, 108384]
+          },
+          "max_alloc_block": {
+            "p50": 70384,
+            "p95": 72592,
+            "min": 70384,
+            "max": 72592,
+            "n": 2,
+            "samples": [70384, 72592]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "two-layers-serpentine",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": true
+    },
+    {
+      "name": "two-layers-serpentine-mapped-by-receiver-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "two-layers-serpentine-receiver",
+      "description": "12288 lights on two layers, serpentine layout, mapped by the receiver.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 27983,
+            "p95": 29558,
+            "min": 27983,
+            "max": 29558,
+            "n": 2,
+            "samples": [29558, 27983]
+          },
+          "free_heap": {
+            "p50": 7986755,
+            "p95": 7990423,
+            "min": 7986755,
+            "max": 7990423,
+            "n": 2,
+            "samples": [7990423, 7986755]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 32768,
+            "min": 31744,
+            "max": 32768,
+            "n": 2,
+            "samples": [32768, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 10036,
+            "p95": 18778,
+            "min": 10036,
+            "max": 18778,
+            "n": 2,
+            "samples": [10036, 18778]
+          },
+          "free_heap": {
+            "p50": 33389439,
+            "p95": 33607119,
+            "min": 33389439,
+            "max": 33607119,
+            "n": 2,
+            "samples": [33607119, 33389439]
+          },
+          "max_alloc_block": {
+            "p50": 184320,
+            "p95": 245760,
+            "min": 184320,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 184320]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 26122,
+            "p95": 29137,
+            "min": 24020,
+            "max": 29137,
+            "n": 3,
+            "samples": [24020, 29137, 26122]
+          },
+          "free_heap": {
+            "p50": 7987047,
+            "p95": 7995311,
+            "min": 7985827,
+            "max": 7995311,
+            "n": 3,
+            "samples": [7987047, 7995311, 7985827]
+          },
+          "max_alloc_block": {
+            "p50": 34816,
+            "p95": 38912,
+            "min": 31744,
+            "max": 38912,
+            "n": 3,
+            "samples": [34816, 31744, 38912]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 13954,
+            "p95": 18171,
+            "min": 13117,
+            "max": 18171,
+            "n": 6,
+            "samples": [13117, 15544, 16165, 13897, 13954, 18171]
+          },
+          "free_heap": {
+            "p50": 33378951,
+            "p95": 33451463,
+            "min": 33354651,
+            "max": 33451463,
+            "n": 6,
+            "samples": [33451463, 33443755, 33378951, 33354651, 33360111, 33389347]
+          },
+          "max_alloc_block": {
+            "p50": 155648,
+            "p95": 249856,
+            "min": 151552,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 237568, 151552, 151552, 155648, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2623,
+            "p95": 2623,
+            "min": 2623,
+            "max": 2623,
+            "n": 1,
+            "samples": [2623]
+          },
+          "free_heap": {
+            "p50": 121456,
+            "p95": 121456,
+            "min": 121456,
+            "max": 121456,
+            "n": 1,
+            "samples": [121456]
+          },
+          "max_alloc_block": {
+            "p50": 56232,
+            "p95": 56232,
+            "min": 56232,
+            "max": 56232,
+            "n": 1,
+            "samples": [56232]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3268,
+            "p95": 6608,
+            "min": 3268,
+            "max": 6608,
+            "n": 2,
+            "samples": [6608, 3268]
+          },
+          "free_heap": {
+            "p50": 101400,
+            "p95": 105696,
+            "min": 101400,
+            "max": 105696,
+            "n": 2,
+            "samples": [101400, 105696]
+          },
+          "max_alloc_block": {
+            "p50": 70384,
+            "p95": 72592,
+            "min": 70384,
+            "max": 72592,
+            "n": 2,
+            "samples": [70384, 72592]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "two-layers-serpentine-mapped-by-sender-set",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 1
+    },
+    {
+      "name": "two-layers-serpentine-sender",
+      "description": "12288 lights on two layers, serpentine layout, mapped by the sender.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 30612,
+            "p95": 33261,
+            "min": 30612,
+            "max": 33261,
+            "n": 2,
+            "samples": [30612, 33261]
+          },
+          "free_heap": {
+            "p50": 7985299,
+            "p95": 7995931,
+            "min": 7985299,
+            "max": 7995931,
+            "n": 2,
+            "samples": [7995931, 7985299]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 32768,
+            "min": 31744,
+            "max": 32768,
+            "n": 2,
+            "samples": [32768, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 11930,
+            "p95": 21562,
+            "min": 11930,
+            "max": 21562,
+            "n": 2,
+            "samples": [11930, 21562]
+          },
+          "free_heap": {
+            "p50": 33388063,
+            "p95": 33607139,
+            "min": 33388063,
+            "max": 33607139,
+            "n": 2,
+            "samples": [33607139, 33388063]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 245760,
+            "min": 188416,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 37919,
+            "p95": 38723,
+            "min": 31174,
+            "max": 38723,
+            "n": 3,
+            "samples": [31174, 38723, 37919]
+          },
+          "free_heap": {
+            "p50": 7996311,
+            "p95": 7999035,
+            "min": 7993927,
+            "max": 7999035,
+            "n": 3,
+            "samples": [7993927, 7996311, 7999035]
+          },
+          "max_alloc_block": {
+            "p50": 34816,
+            "p95": 36864,
+            "min": 31744,
+            "max": 36864,
+            "n": 3,
+            "samples": [34816, 31744, 36864]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 15741,
+            "p95": 22861,
+            "min": 15496,
+            "max": 22861,
+            "n": 6,
+            "samples": [15720, 18273, 17333, 15741, 15496, 22861]
+          },
+          "free_heap": {
+            "p50": 33383299,
+            "p95": 33451479,
+            "min": 33360551,
+            "max": 33451479,
+            "n": 6,
+            "samples": [33451479, 33447359, 33383299, 33360551, 33379587, 33389399]
+          },
+          "max_alloc_block": {
+            "p50": 184320,
+            "p95": 249856,
+            "min": 151552,
+            "max": 249856,
+            "n": 6,
+            "samples": [249856, 229376, 184320, 151552, 163840, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3346,
+            "p95": 3346,
+            "min": 3346,
+            "max": 3346,
+            "n": 1,
+            "samples": [3346]
+          },
+          "free_heap": {
+            "p50": 114512,
+            "p95": 114512,
+            "min": 114512,
+            "max": 114512,
+            "n": 1,
+            "samples": [114512]
+          },
+          "max_alloc_block": {
+            "p50": 56232,
+            "p95": 56232,
+            "min": 56232,
+            "max": 56232,
+            "n": 1,
+            "samples": [56232]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3137,
+            "p95": 3255,
+            "min": 3137,
+            "max": 3255,
+            "n": 2,
+            "samples": [3137, 3255]
+          },
+          "free_heap": {
+            "p50": 99488,
+            "p95": 104312,
+            "min": 99488,
+            "max": 104312,
+            "n": 2,
+            "samples": [104312, 99488]
+          },
+          "max_alloc_block": {
+            "p50": 70384,
+            "p95": 72592,
+            "min": 70384,
+            "max": 72592,
+            "n": 2,
+            "samples": [70384, 72592]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "one-layer-again",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer2": null
+        }
+      }
+    },
+    {
+      "name": "sender-64x64-width",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64
+    },
+    {
+      "name": "sender-64x64-height",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64
+    },
+    {
+      "name": "receiver-64x64-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64
+    },
+    {
+      "name": "receiver-64x64-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64
+    },
+    {
+      "name": "protocols-identity",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "serpentine",
+      "value": false
+    },
+    {
+      "name": "protocols-mapped-by-receiver",
+      "op": "set_control",
+      "id": "NetworkReceive",
+      "key": "mapped_by",
+      "value": 0
+    },
+    {
+      "name": "protocol-artnet-set",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Send",
+      "key": "protocol",
+      "value": 0
+    },
+    {
+      "name": "64x64-artnet",
+      "description": "4096 lights over artnet, identity layout, mapped by the receiver.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3426,
+            "p95": 3692,
+            "min": 3426,
+            "max": 3692,
+            "n": 2,
+            "samples": [3426, 3692]
+          },
+          "free_heap": {
+            "p50": 8397855,
+            "p95": 8411803,
+            "min": 8397855,
+            "max": 8411803,
+            "n": 2,
+            "samples": [8411803, 8397855]
+          },
+          "max_alloc_block": {
+            "p50": 31744,
+            "p95": 45056,
+            "min": 31744,
+            "max": 45056,
+            "n": 2,
+            "samples": [45056, 31744]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 109,
+            "p95": 116,
+            "min": 109,
+            "max": 116,
+            "n": 2,
+            "samples": [116, 109]
+          },
+          "free_heap": {
+            "p50": 33811879,
+            "p95": 33872987,
+            "min": 33811879,
+            "max": 33872987,
+            "n": 2,
+            "samples": [33872987, 33811879]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 245760,
+            "min": 188416,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3350,
+            "p95": 3472,
+            "min": 3256,
+            "max": 3472,
+            "n": 3,
+            "samples": [3256, 3472, 3350]
+          },
+          "free_heap": {
+            "p50": 8419087,
+            "p95": 8419459,
+            "min": 8412399,
+            "max": 8419459,
+            "n": 3,
+            "samples": [8419087, 8412399, 8419459]
+          },
+          "max_alloc_block": {
+            "p50": 36864,
+            "p95": 45056,
+            "min": 34816,
+            "max": 45056,
+            "n": 3,
+            "samples": [45056, 36864, 34816]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 113,
+            "p95": 831,
+            "min": 104,
+            "max": 831,
+            "n": 6,
+            "samples": [831, 117, 120, 104, 106, 113]
+          },
+          "free_heap": {
+            "p50": 33812175,
+            "p95": 33858791,
+            "min": 33783283,
+            "max": 33858791,
+            "n": 6,
+            "samples": [33858791, 33858359, 33800783, 33783283, 33812507, 33812175]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 253952,
+            "min": 159744,
+            "max": 253952,
+            "n": 6,
+            "samples": [253952, 241664, 180224, 159744, 192512, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2139,
+            "p95": 2139,
+            "min": 2139,
+            "max": 2139,
+            "n": 1,
+            "samples": [2139]
+          },
+          "free_heap": {
+            "p50": 270784,
+            "p95": 270784,
+            "min": 270784,
+            "max": 270784,
+            "n": 1,
+            "samples": [270784]
+          },
+          "max_alloc_block": {
+            "p50": 167488,
+            "p95": 167488,
+            "min": 167488,
+            "max": 167488,
+            "n": 1,
+            "samples": [167488]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2417,
+            "p95": 2440,
+            "min": 2417,
+            "max": 2440,
+            "n": 2,
+            "samples": [2440, 2417]
+          },
+          "free_heap": {
+            "p50": 263680,
+            "p95": 264320,
+            "min": 263680,
+            "max": 264320,
+            "n": 2,
+            "samples": [264320, 263680]
+          },
+          "max_alloc_block": {
+            "p50": 149640,
+            "p95": 210536,
+            "min": 149640,
+            "max": 210536,
+            "n": 2,
+            "samples": [210536, 149640]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "protocol-e131-set",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Send",
+      "key": "protocol",
+      "value": 1
+    },
+    {
+      "name": "64x64-e131",
+      "description": "4096 lights over e131, identity layout, mapped by the receiver.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3357,
+            "p95": 3490,
+            "min": 3357,
+            "max": 3490,
+            "n": 2,
+            "samples": [3357, 3490]
+          },
+          "free_heap": {
+            "p50": 8414015,
+            "p95": 8417851,
+            "min": 8414015,
+            "max": 8417851,
+            "n": 2,
+            "samples": [8414015, 8417851]
+          },
+          "max_alloc_block": {
+            "p50": 38912,
+            "p95": 47104,
+            "min": 38912,
+            "max": 47104,
+            "n": 2,
+            "samples": [47104, 38912]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 109,
+            "p95": 110,
+            "min": 109,
+            "max": 110,
+            "n": 2,
+            "samples": [109, 110]
+          },
+          "free_heap": {
+            "p50": 33812367,
+            "p95": 33872439,
+            "min": 33812367,
+            "max": 33872439,
+            "n": 2,
+            "samples": [33872439, 33812367]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 245760,
+            "min": 188416,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3461,
+            "p95": 3495,
+            "min": 3334,
+            "max": 3495,
+            "n": 3,
+            "samples": [3334, 3495, 3461]
+          },
+          "free_heap": {
+            "p50": 8419667,
+            "p95": 8419679,
+            "min": 8405079,
+            "max": 8419679,
+            "n": 3,
+            "samples": [8405079, 8419679, 8419667]
+          },
+          "max_alloc_block": {
+            "p50": 36864,
+            "p95": 40960,
+            "min": 34816,
+            "max": 40960,
+            "n": 3,
+            "samples": [40960, 36864, 34816]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 116,
+            "p95": 819,
+            "min": 108,
+            "max": 819,
+            "n": 6,
+            "samples": [819, 116, 121, 112, 108, 116]
+          },
+          "free_heap": {
+            "p50": 33812079,
+            "p95": 33860755,
+            "min": 33781963,
+            "max": 33860755,
+            "n": 6,
+            "samples": [33860755, 33857391, 33815699, 33781963, 33812079, 33811995]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 253952,
+            "min": 159744,
+            "max": 253952,
+            "n": 6,
+            "samples": [253952, 241664, 180224, 159744, 192512, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2490,
+            "p95": 2490,
+            "min": 2490,
+            "max": 2490,
+            "n": 1,
+            "samples": [2490]
+          },
+          "free_heap": {
+            "p50": 263976,
+            "p95": 263976,
+            "min": 263976,
+            "max": 263976,
+            "n": 1,
+            "samples": [263976]
+          },
+          "max_alloc_block": {
+            "p50": 167488,
+            "p95": 167488,
+            "min": 167488,
+            "max": 167488,
+            "n": 1,
+            "samples": [167488]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2440,
+            "p95": 2450,
+            "min": 2440,
+            "max": 2450,
+            "n": 2,
+            "samples": [2440, 2450]
+          },
+          "free_heap": {
+            "p50": 253320,
+            "p95": 263552,
+            "min": 253320,
+            "max": 263552,
+            "n": 2,
+            "samples": [263552, 253320]
+          },
+          "max_alloc_block": {
+            "p50": 149640,
+            "p95": 210536,
+            "min": 149640,
+            "max": 210536,
+            "n": 2,
+            "samples": [210536, 149640]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "protocol-ddp-set",
+      "device": "sender",
+      "op": "set_control",
+      "id": "Send",
+      "key": "protocol",
+      "value": 2
+    },
+    {
+      "name": "64x64-ddp",
+      "description": "4096 lights over ddp, identity layout, mapped by the receiver.",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s",
+        "Drivers.tick"
+      ],
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 3261,
+            "p95": 3393,
+            "min": 3261,
+            "max": 3393,
+            "n": 2,
+            "samples": [3261, 3393]
+          },
+          "free_heap": {
+            "p50": 8415903,
+            "p95": 8419455,
+            "min": 8415903,
+            "max": 8419455,
+            "n": 2,
+            "samples": [8419455, 8415903]
+          },
+          "max_alloc_block": {
+            "p50": 38912,
+            "p95": 49152,
+            "min": 38912,
+            "max": 49152,
+            "n": 2,
+            "samples": [49152, 38912]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 106,
+            "p95": 106,
+            "min": 106,
+            "max": 106,
+            "n": 2,
+            "samples": [106, 106]
+          },
+          "free_heap": {
+            "p50": 33812315,
+            "p95": 33873411,
+            "min": 33812315,
+            "max": 33873411,
+            "n": 2,
+            "samples": [33873411, 33812315]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 245760,
+            "min": 188416,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32s3-n16r8 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3174,
+            "p95": 3273,
+            "min": 3137,
+            "max": 3273,
+            "n": 3,
+            "samples": [3174, 3273, 3137]
+          },
+          "free_heap": {
+            "p50": 8419511,
+            "p95": 8419911,
+            "min": 8412755,
+            "max": 8419911,
+            "n": 3,
+            "samples": [8419511, 8419911, 8412755]
+          },
+          "max_alloc_block": {
+            "p50": 36864,
+            "p95": 45056,
+            "min": 34816,
+            "max": 45056,
+            "n": 3,
+            "samples": [45056, 36864, 34816]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=esp32p4rev1-eth sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 112,
+            "p95": 819,
+            "min": 103,
+            "max": 819,
+            "n": 6,
+            "samples": [819, 115, 115, 112, 103, 105]
+          },
+          "free_heap": {
+            "p50": 33812611,
+            "p95": 33870303,
+            "min": 33783927,
+            "max": 33870303,
+            "n": 6,
+            "samples": [33859443, 33870303, 33801111, 33783927, 33812611, 33812975]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 253952,
+            "min": 159744,
+            "max": 253952,
+            "n": 6,
+            "samples": [253952, 249856, 180224, 159744, 192512, 188416]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2394,
+            "p95": 2394,
+            "min": 2394,
+            "max": 2394,
+            "n": 1,
+            "samples": [2394]
+          },
+          "free_heap": {
+            "p50": 264296,
+            "p95": 264296,
+            "min": 264296,
+            "max": 264296,
+            "n": 1,
+            "samples": [264296]
+          },
+          "max_alloc_block": {
+            "p50": 167488,
+            "p95": 167488,
+            "min": 167488,
+            "max": 167488,
+            "n": 1,
+            "samples": [167488]
+          },
+          "last_updated": "2026-10-14"
+        },
+        "host=teensy41 sender=esp32s3-n16r8": {
+          "tick_us": {
+            "p50": 2481,
+            "p95": 2493,
+            "min": 2481,
+            "max": 2493,
+            "n": 2,
+            "samples": [2481, 2493]
+          },
+          "free_heap": {
+            "p50": 259528,
+            "p95": 263312,
+            "min": 259528,
+            "max": 263312,
+            "n": 2,
+            "samples": [263312, 259528]
+          },
+          "max_alloc_block": {
+            "p50": 149640,
+            "p95": 210536,
+            "min": 149640,
+            "max": 210536,
+            "n": 2,
+            "samples": [210536, 149640]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    }
+  ]
+}
diff --git a/test/scenarios/device/scenario_NetworkSend_one_sender_many_receivers.json b/test/scenarios/device/scenario_NetworkSend_one_sender_many_receivers.json
new file mode 100644
index 000000000..db873390f
--- /dev/null
+++ b/test/scenarios/device/scenario_NetworkSend_one_sender_many_receivers.json
@@ -0,0 +1,676 @@
+{
+  "name": "scenario_NetworkSend_one_sender_many_receivers",
+  "module": "NetworkSendDriver",
+  "also": [
+    "NetworkReceiveEffect"
+  ],
+  "mode": "mutate",
+  "live_only": true,
+  "boards": [
+    "sender",
+    "receiver2"
+  ],
+  "description": "One sender, two receivers: Network Send splits a grid over this device and receiver2 by unicast DDP, then sends one stream both take, by Art-Net broadcast and E1.31 multicast. Each receiver reports Network Receive's tick and its packets and frames per second against the sender's frame rate.",
+  "top": [
+    "Layouts",
+    "Effects",
+    "Drivers"
+  ],
+  "steps": [
+    {
+      "name": "sender-clear-layouts",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "$patch": "replace"
+        }
+      },
+      "description": "The sender's canvas: one grid, one layer with a changing effect, and a Network Send aimed at both receivers.",
+      "device": "sender"
+    },
+    {
+      "name": "sender-clear-effects",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "$patch": "replace"
+        }
+      },
+      "device": "sender"
+    },
+    {
+      "name": "sender-grid",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "Grid": {
+            "type": "GridLayout",
+            "width": 64,
+            "height": 64
+          }
+        }
+      },
+      "device": "sender"
+    },
+    {
+      "name": "sender-layer",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer": {
+            "type": "Layer",
+            "Rainbow": {
+              "type": "RainbowEffect"
+            }
+          }
+        }
+      },
+      "device": "sender"
+    },
+    {
+      "name": "sender-send",
+      "op": "apply_state",
+      "document": {
+        "Drivers": {
+          "Send": {
+            "type": "NetworkSendDriver",
+            "hosts": "{host},{receiver2}",
+            "protocol": 2,
+            "fps": 40
+          }
+        }
+      },
+      "device": "sender"
+    },
+    {
+      "name": "host-clear-layouts",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "$patch": "replace"
+        }
+      },
+      "description": "A receiver's canvas: one grid and one layer holding Network Receive."
+    },
+    {
+      "name": "host-clear-effects",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "$patch": "replace"
+        }
+      }
+    },
+    {
+      "name": "host-grid",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "Grid": {
+            "type": "GridLayout",
+            "width": 64,
+            "height": 32
+          }
+        }
+      }
+    },
+    {
+      "name": "host-layer",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer": {
+            "type": "Layer",
+            "NetworkReceive": {
+              "type": "NetworkReceiveEffect"
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "receiver2-clear-layouts",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "$patch": "replace"
+        }
+      },
+      "description": "A receiver's canvas: one grid and one layer holding Network Receive.",
+      "device": "receiver2"
+    },
+    {
+      "name": "receiver2-clear-effects",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "$patch": "replace"
+        }
+      },
+      "device": "receiver2"
+    },
+    {
+      "name": "receiver2-grid",
+      "op": "apply_state",
+      "document": {
+        "Layouts": {
+          "Grid": {
+            "type": "GridLayout",
+            "width": 64,
+            "height": 32
+          }
+        }
+      },
+      "device": "receiver2"
+    },
+    {
+      "name": "receiver2-layer",
+      "op": "apply_state",
+      "document": {
+        "Effects": {
+          "Layer": {
+            "type": "Layer",
+            "NetworkReceive": {
+              "type": "NetworkReceiveEffect"
+            }
+          }
+        }
+      },
+      "device": "receiver2"
+    },
+    {
+      "name": "split-64x64-sender-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64,
+      "device": "sender"
+    },
+    {
+      "name": "split-64x64-sender-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64,
+      "device": "sender"
+    },
+    {
+      "name": "split-64x64-host-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64
+    },
+    {
+      "name": "split-64x64-host-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 32
+    },
+    {
+      "name": "split-64x64-receiver2-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64,
+      "device": "receiver2"
+    },
+    {
+      "name": "split-64x64-receiver2-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 32,
+      "device": "receiver2"
+    },
+    {
+      "name": "split-64x64-host",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "4096 lights split over two receivers by unicast DDP, 2048 each. Read on host.",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 2838,
+            "p95": 2876,
+            "min": 2838,
+            "max": 2876,
+            "n": 2,
+            "samples": [2838, 2876]
+          },
+          "free_heap": {
+            "p50": 8441263,
+            "p95": 8443035,
+            "min": 8441263,
+            "max": 8443035,
+            "n": 2,
+            "samples": [8443035, 8441263]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 47104,
+            "max": 49152,
+            "n": 2,
+            "samples": [49152, 47104]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "split-64x64-receiver2",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "4096 lights split over two receivers by unicast DDP, 2048 each. Read on receiver2.",
+      "device": "receiver2",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 81,
+            "p95": 82,
+            "min": 81,
+            "max": 82,
+            "n": 2,
+            "samples": [81, 82]
+          },
+          "free_heap": {
+            "p50": 33835503,
+            "p95": 33891567,
+            "min": 33835503,
+            "max": 33891567,
+            "n": 2,
+            "samples": [33891567, 33835503]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 245760,
+            "min": 192512,
+            "max": 245760,
+            "n": 2,
+            "samples": [245760, 192512]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "split-128x96-sender-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 128,
+      "device": "sender"
+    },
+    {
+      "name": "split-128x96-sender-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 96,
+      "device": "sender"
+    },
+    {
+      "name": "split-128x96-host-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 128
+    },
+    {
+      "name": "split-128x96-host-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 48
+    },
+    {
+      "name": "split-128x96-receiver2-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 128,
+      "device": "receiver2"
+    },
+    {
+      "name": "split-128x96-receiver2-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 48,
+      "device": "receiver2"
+    },
+    {
+      "name": "split-128x96-host",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "12288 lights split over two receivers by unicast DDP, 6144 each. Read on host.",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3847,
+            "p95": 3980,
+            "min": 3847,
+            "max": 3980,
+            "n": 2,
+            "samples": [3980, 3847]
+          },
+          "free_heap": {
+            "p50": 8384291,
+            "p95": 8394931,
+            "min": 8384291,
+            "max": 8394931,
+            "n": 2,
+            "samples": [8384291, 8394931]
+          },
+          "max_alloc_block": {
+            "p50": 43008,
+            "p95": 47104,
+            "min": 43008,
+            "max": 47104,
+            "n": 2,
+            "samples": [43008, 47104]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "split-128x96-receiver2",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "12288 lights split over two receivers by unicast DDP, 6144 each. Read on receiver2.",
+      "device": "receiver2",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 134,
+            "p95": 135,
+            "min": 134,
+            "max": 135,
+            "n": 2,
+            "samples": [135, 134]
+          },
+          "free_heap": {
+            "p50": 33788263,
+            "p95": 33849055,
+            "min": 33788263,
+            "max": 33849055,
+            "n": 2,
+            "samples": [33849055, 33788263]
+          },
+          "max_alloc_block": {
+            "p50": 188416,
+            "p95": 253952,
+            "min": 188416,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 188416]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "shared-sender-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64,
+      "device": "sender"
+    },
+    {
+      "name": "shared-sender-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64,
+      "device": "sender"
+    },
+    {
+      "name": "shared-host-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64
+    },
+    {
+      "name": "shared-host-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64
+    },
+    {
+      "name": "shared-receiver2-width",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "width",
+      "value": 64,
+      "device": "receiver2"
+    },
+    {
+      "name": "shared-receiver2-height",
+      "op": "set_control",
+      "id": "Grid",
+      "key": "height",
+      "value": 64,
+      "device": "receiver2"
+    },
+    {
+      "name": "artnet-broadcast-protocol",
+      "op": "set_control",
+      "id": "Send",
+      "key": "protocol",
+      "value": 0,
+      "device": "sender"
+    },
+    {
+      "name": "artnet-broadcast-addressing",
+      "op": "set_control",
+      "id": "Send",
+      "key": "addressing",
+      "value": 1,
+      "device": "sender"
+    },
+    {
+      "name": "artnet-broadcast-host",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "4096 lights to both receivers in one stream, Art-Net broadcast. Read on host.",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3555,
+            "p95": 3630,
+            "min": 3555,
+            "max": 3630,
+            "n": 2,
+            "samples": [3630, 3555]
+          },
+          "free_heap": {
+            "p50": 8416775,
+            "p95": 8420143,
+            "min": 8416775,
+            "max": 8420143,
+            "n": 2,
+            "samples": [8420143, 8416775]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 47104,
+            "max": 49152,
+            "n": 2,
+            "samples": [49152, 47104]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "artnet-broadcast-receiver2",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "4096 lights to both receivers in one stream, Art-Net broadcast. Read on receiver2.",
+      "device": "receiver2",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 108,
+            "p95": 108,
+            "min": 108,
+            "max": 108,
+            "n": 2,
+            "samples": [108, 108]
+          },
+          "free_heap": {
+            "p50": 33813155,
+            "p95": 33874251,
+            "min": 33813155,
+            "max": 33874251,
+            "n": 2,
+            "samples": [33874251, 33813155]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "e131-multicast-protocol",
+      "op": "set_control",
+      "id": "Send",
+      "key": "protocol",
+      "value": 1,
+      "device": "sender"
+    },
+    {
+      "name": "e131-multicast-addressing",
+      "op": "set_control",
+      "id": "Send",
+      "key": "addressing",
+      "value": 1,
+      "device": "sender"
+    },
+    {
+      "name": "e131-multicast-host",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "4096 lights to both receivers in one stream, E1.31 multicast. Read on host.",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 3206,
+            "p95": 3249,
+            "min": 3206,
+            "max": 3249,
+            "n": 2,
+            "samples": [3249, 3206]
+          },
+          "free_heap": {
+            "p50": 8419959,
+            "p95": 8420095,
+            "min": 8419959,
+            "max": 8420095,
+            "n": 2,
+            "samples": [8420095, 8419959]
+          },
+          "max_alloc_block": {
+            "p50": 47104,
+            "p95": 49152,
+            "min": 47104,
+            "max": 49152,
+            "n": 2,
+            "samples": [49152, 47104]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    },
+    {
+      "name": "e131-multicast-receiver2",
+      "op": "measure",
+      "read": [
+        "sender:fps",
+        "NetworkReceive.tick",
+        "NetworkReceive.packets_per_s",
+        "NetworkReceive.frames_per_s"
+      ],
+      "description": "4096 lights to both receivers in one stream, E1.31 multicast. Read on receiver2.",
+      "device": "receiver2",
+      "observed": {
+        "host=esp32s3-n16r8 sender=esp32s3-n16r8 receiver2=esp32p4rev1-eth": {
+          "tick_us": {
+            "p50": 100,
+            "p95": 100,
+            "min": 100,
+            "max": 100,
+            "n": 2,
+            "samples": [100, 100]
+          },
+          "free_heap": {
+            "p50": 33813251,
+            "p95": 33874679,
+            "min": 33813251,
+            "max": 33874679,
+            "n": 2,
+            "samples": [33874679, 33813251]
+          },
+          "max_alloc_block": {
+            "p50": 192512,
+            "p95": 253952,
+            "min": 192512,
+            "max": 253952,
+            "n": 2,
+            "samples": [253952, 192512]
+          },
+          "last_updated": "2026-10-14"
+        }
+      }
+    }
+  ]
+}
diff --git a/test/scenarios/light/scenario_Drivers_output_and_brightness.json b/test/scenarios/light/scenario_Drivers_output_and_brightness.json
index 8299f8b56..15340566a 100644
--- a/test/scenarios/light/scenario_Drivers_output_and_brightness.json
+++ b/test/scenarios/light/scenario_Drivers_output_and_brightness.json
@@ -103,13 +103,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 15,
+            "p95": 9,
             "min": 6,
-            "max": 17,
+            "max": 15,
             "n": 32,
-            "samples": [7, 7, 7, 17, 6, 7, 7, 7, 7, 9, 8, 7, 7, 7, 6, 8, 15, 8, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 8, 8, 7, 7]
+            "samples": [7, 7, 7, 7, 9, 8, 7, 7, 7, 6, 8, 15, 8, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 8, 8, 7, 7, 7, 7, 7, 7, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
diff --git a/test/scenarios/light/scenario_Effects_pipeline_builds_and_renders.json b/test/scenarios/light/scenario_Effects_pipeline_builds_and_renders.json
index 80cfde5df..d57bbface 100644
--- a/test/scenarios/light/scenario_Effects_pipeline_builds_and_renders.json
+++ b/test/scenarios/light/scenario_Effects_pipeline_builds_and_renders.json
@@ -51,13 +51,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 6,
-            "p95": 7,
+            "p95": 9,
             "min": 1,
-            "max": 7,
-            "n": 21,
-            "samples": [1, 1, 1, 1, 1, 1, 1, 1, 6, 6, 6, 6, 6, 6, 6, 7, 6, 6, 7, 6, 6]
+            "max": 11,
+            "n": 26,
+            "samples": [1, 1, 1, 1, 1, 1, 1, 1, 6, 6, 6, 6, 6, 6, 6, 7, 6, 6, 7, 6, 6, 7, 6, 9, 6, 11]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -83,14 +83,14 @@
       "observed": {
         "desktop-macos": {
           "tick_us": {
-            "p50": 1,
+            "p50": 6,
             "p95": 8,
             "min": 1,
             "max": 8,
             "n": 32,
-            "samples": [1, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 1, 1, 1, 1, 7, 7, 7, 7, 7, 7, 7, 7, 7, 6, 8, 8, 7]
+            "samples": [1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 1, 1, 1, 1, 7, 7, 7, 7, 7, 7, 7, 7, 7, 6, 8, 8, 7, 7, 7, 7, 8, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
@@ -116,11 +116,11 @@
             "p50": 7,
             "p95": 10,
             "min": 6,
-            "max": 46,
+            "max": 10,
             "n": 32,
-            "samples": [7, 46, 7, 6, 6, 6, 6, 7, 7, 7, 7, 7, 6, 6, 10, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 7, 6, 7, 7]
+            "samples": [6, 6, 7, 7, 7, 7, 7, 6, 6, 10, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 7, 6, 7, 7, 9, 7, 7, 10, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
diff --git a/test/scenarios/light/scenario_Effects_swap_while_running.json b/test/scenarios/light/scenario_Effects_swap_while_running.json
index f1d048a07..6a8d9755f 100644
--- a/test/scenarios/light/scenario_Effects_swap_while_running.json
+++ b/test/scenarios/light/scenario_Effects_swap_while_running.json
@@ -82,13 +82,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 1,
-            "p95": 2,
+            "p95": 1,
             "min": 1,
             "max": 2,
             "n": 32,
-            "samples": [1, 1, 1, 1, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
+            "samples": [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
@@ -191,13 +191,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 1,
-            "p95": 4,
+            "p95": 2,
             "min": 1,
             "max": 4,
             "n": 32,
-            "samples": [1, 1, 1, 1, 4, 1, 1, 1, 4, 1, 1, 1, 1, 1, 2, 1, 1, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
+            "samples": [1, 1, 1, 4, 1, 1, 1, 1, 1, 2, 1, 1, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
diff --git a/test/scenarios/light/scenario_Effects_teardown_under_a_running_pipeline.json b/test/scenarios/light/scenario_Effects_teardown_under_a_running_pipeline.json
index da152b463..e0d13aa48 100644
--- a/test/scenarios/light/scenario_Effects_teardown_under_a_running_pipeline.json
+++ b/test/scenarios/light/scenario_Effects_teardown_under_a_running_pipeline.json
@@ -63,14 +63,14 @@
       "observed": {
         "desktop-macos": {
           "tick_us": {
-            "p50": 7,
-            "p95": 18,
+            "p50": 8,
+            "p95": 15,
             "min": 6,
             "max": 81,
             "n": 32,
-            "samples": [7, 7, 7, 7, 18, 7, 6, 7, 81, 7, 7, 7, 7, 7, 15, 7, 7, 12, 7, 7, 8, 7, 8, 8, 8, 8, 8, 8, 8, 10, 8, 10]
+            "samples": [7, 6, 7, 81, 7, 7, 7, 7, 7, 15, 7, 7, 12, 7, 7, 8, 7, 8, 8, 8, 8, 8, 8, 8, 10, 8, 10, 8, 8, 7, 9, 8]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -172,13 +172,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 5,
-            "p95": 12,
+            "p95": 9,
             "min": 4,
-            "max": 32,
+            "max": 12,
             "n": 32,
-            "samples": [7, 4, 5, 5, 32, 4, 4, 4, 12, 5, 5, 5, 4, 6, 5, 5, 4, 7, 4, 4, 5, 4, 6, 6, 6, 6, 6, 4, 5, 9, 6, 5]
+            "samples": [4, 4, 4, 12, 5, 5, 5, 4, 6, 5, 5, 4, 7, 4, 4, 5, 4, 6, 6, 6, 6, 6, 4, 5, 9, 6, 5, 7, 5, 5, 6, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -276,13 +276,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 15,
-            "min": 6,
-            "max": 19,
+            "p95": 9,
+            "min": 5,
+            "max": 15,
             "n": 32,
-            "samples": [7, 7, 7, 7, 19, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 6, 7, 15, 7, 7, 9, 7, 8, 8, 8, 7, 7, 7, 7, 9, 8, 7]
+            "samples": [7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 6, 7, 15, 7, 7, 9, 7, 8, 8, 8, 7, 7, 7, 7, 9, 8, 7, 7, 8, 7, 7, 5]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -390,13 +390,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 14,
-            "min": 6,
-            "max": 18,
+            "p95": 10,
+            "min": 5,
+            "max": 14,
             "n": 32,
-            "samples": [7, 7, 7, 7, 18, 6, 6, 6, 6, 7, 7, 7, 7, 7, 7, 6, 7, 14, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 7, 10, 8, 7]
+            "samples": [6, 6, 6, 6, 7, 7, 7, 7, 7, 7, 6, 7, 14, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 7, 10, 8, 7, 7, 7, 7, 8, 5]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -510,13 +510,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 13,
-            "min": 6,
-            "max": 31,
+            "p95": 11,
+            "min": 5,
+            "max": 13,
             "n": 32,
-            "samples": [7, 7, 7, 7, 31, 6, 6, 6, 6, 7, 7, 7, 7, 7, 11, 6, 7, 13, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 11, 7, 9]
+            "samples": [6, 6, 6, 6, 7, 7, 7, 7, 7, 11, 6, 7, 13, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 11, 7, 9, 7, 7, 6, 7, 5]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -626,13 +626,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 4,
-            "p95": 9,
+            "p95": 7,
             "min": 3,
-            "max": 25,
+            "max": 9,
             "n": 32,
-            "samples": [4, 4, 4, 4, 25, 4, 3, 3, 5, 4, 4, 4, 4, 4, 5, 4, 4, 9, 4, 4, 4, 4, 4, 4, 4, 4, 4, 5, 5, 5, 5, 7]
+            "samples": [4, 3, 3, 5, 4, 4, 4, 4, 4, 5, 4, 4, 9, 4, 4, 4, 4, 4, 4, 4, 4, 4, 5, 5, 5, 5, 7, 5, 4, 5, 6, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -760,11 +760,11 @@
             "p50": 4,
             "p95": 7,
             "min": 3,
-            "max": 20,
+            "max": 7,
             "n": 32,
-            "samples": [4, 4, 4, 4, 20, 4, 3, 3, 4, 4, 4, 4, 4, 4, 6, 4, 4, 7, 4, 4, 4, 4, 4, 4, 4, 4, 5, 5, 5, 7, 4, 5]
+            "samples": [4, 3, 3, 4, 4, 4, 4, 4, 4, 6, 4, 4, 7, 4, 4, 4, 4, 4, 4, 4, 4, 5, 5, 5, 7, 4, 5, 5, 4, 4, 4, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
diff --git a/test/scenarios/light/scenario_Layers_stack_and_blend_live.json b/test/scenarios/light/scenario_Layers_stack_and_blend_live.json
index b5f6146c3..dcf744c11 100644
--- a/test/scenarios/light/scenario_Layers_stack_and_blend_live.json
+++ b/test/scenarios/light/scenario_Layers_stack_and_blend_live.json
@@ -88,13 +88,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 8,
-            "p95": 12,
+            "p95": 11,
             "min": 8,
-            "max": 24,
+            "max": 12,
             "n": 32,
-            "samples": [8, 8, 8, 8, 24, 8, 8, 8, 9, 8, 8, 8, 8, 9, 11, 8, 8, 12, 9, 9, 8, 8, 8, 8, 9, 9, 10, 11, 9, 10, 8, 9]
+            "samples": [8, 8, 8, 9, 8, 8, 8, 8, 9, 11, 8, 8, 12, 9, 9, 8, 8, 8, 8, 9, 9, 10, 11, 9, 10, 8, 9, 8, 8, 8, 9, 10]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -132,13 +132,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 15,
-            "p95": 35,
+            "p95": 19,
             "min": 13,
             "max": 37,
             "n": 32,
-            "samples": [15, 15, 15, 15, 35, 15, 15, 15, 15, 15, 15, 14, 15, 16, 37, 13, 15, 19, 15, 15, 15, 15, 15, 15, 16, 16, 16, 19, 16, 15, 15, 15]
+            "samples": [15, 15, 15, 15, 15, 15, 14, 15, 16, 37, 13, 15, 19, 15, 15, 15, 15, 15, 15, 16, 16, 16, 19, 16, 15, 15, 15, 15, 15, 13, 15, 13]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -220,13 +220,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 20,
-            "p95": 29,
+            "p95": 24,
             "min": 18,
-            "max": 46,
+            "max": 29,
             "n": 32,
-            "samples": [20, 21, 20, 20, 46, 21, 20, 20, 21, 20, 20, 20, 20, 21, 29, 18, 20, 24, 20, 20, 21, 20, 21, 21, 21, 21, 21, 24, 21, 20, 20, 20]
+            "samples": [21, 20, 20, 21, 20, 20, 20, 20, 21, 29, 18, 20, 24, 20, 20, 21, 20, 21, 21, 21, 21, 21, 24, 21, 20, 20, 20, 20, 22, 20, 22, 18]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -260,13 +260,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 124,
-            "p95": 162,
+            "p95": 141,
             "min": 121,
-            "max": 225,
+            "max": 162,
             "n": 32,
-            "samples": [123, 124, 124, 123, 225, 124, 122, 123, 126, 124, 123, 123, 123, 125, 141, 121, 123, 162, 124, 123, 123, 123, 123, 123, 125, 125, 125, 128, 124, 124, 125, 128]
+            "samples": [124, 122, 123, 126, 124, 123, 123, 123, 125, 141, 121, 123, 162, 124, 123, 123, 123, 123, 123, 125, 125, 125, 128, 124, 124, 125, 128, 122, 124, 123, 125, 125]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -300,13 +300,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 267,
-            "p95": 355,
+            "p95": 309,
             "min": 262,
-            "max": 454,
+            "max": 355,
             "n": 32,
-            "samples": [271, 267, 266, 267, 454, 280, 262, 266, 304, 267, 265, 264, 275, 267, 309, 267, 265, 355, 265, 265, 265, 265, 264, 265, 274, 284, 291, 280, 267, 272, 268, 265]
+            "samples": [280, 262, 266, 304, 267, 265, 264, 275, 267, 309, 267, 265, 355, 265, 265, 265, 265, 264, 265, 274, 284, 291, 280, 267, 272, 268, 265, 264, 267, 271, 270, 287]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -337,13 +337,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 56,
-            "p95": 85,
-            "min": 51,
+            "p95": 69,
+            "min": 49,
             "max": 100,
             "n": 32,
-            "samples": [56, 58, 57, 60, 85, 56, 56, 56, 65, 56, 65, 55, 56, 69, 56, 56, 56, 100, 56, 56, 56, 56, 56, 56, 56, 57, 61, 54, 56, 51, 56, 55]
+            "samples": [56, 56, 56, 65, 56, 65, 55, 56, 69, 56, 56, 56, 100, 56, 56, 56, 56, 56, 56, 56, 57, 61, 54, 56, 51, 56, 55, 55, 56, 49, 56, 62]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -362,14 +362,14 @@
       "observed": {
         "desktop-macos": {
           "tick_us": {
-            "p50": 53,
-            "p95": 97,
-            "min": 51,
+            "p50": 52,
+            "p95": 76,
+            "min": 46,
             "max": 103,
             "n": 32,
-            "samples": [53, 53, 54, 53, 97, 52, 52, 54, 57, 53, 54, 52, 52, 75, 103, 52, 52, 76, 52, 52, 58, 52, 52, 52, 53, 54, 55, 51, 55, 53, 52, 52]
+            "samples": [52, 52, 54, 57, 53, 54, 52, 52, 75, 103, 52, 52, 76, 52, 52, 58, 52, 52, 52, 53, 54, 55, 51, 55, 53, 52, 52, 52, 52, 46, 53, 48]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -398,14 +398,14 @@
       "observed": {
         "desktop-macos": {
           "tick_us": {
-            "p50": 52,
+            "p50": 51,
             "p95": 205,
-            "min": 48,
+            "min": 46,
             "max": 281,
             "n": 32,
-            "samples": [52, 52, 57, 51, 85, 51, 51, 52, 56, 51, 56, 51, 52, 51, 205, 52, 51, 281, 51, 51, 51, 52, 51, 55, 51, 54, 52, 54, 52, 48, 52, 51]
+            "samples": [51, 51, 52, 56, 51, 56, 51, 52, 51, 205, 52, 51, 281, 51, 51, 51, 52, 51, 55, 51, 54, 52, 54, 52, 48, 52, 51, 51, 51, 46, 51, 51]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     }
diff --git a/test/scenarios/light/scenario_Layouts_resize_reallocates_live.json b/test/scenarios/light/scenario_Layouts_resize_reallocates_live.json
index 207595bdc..92d3f1352 100644
--- a/test/scenarios/light/scenario_Layouts_resize_reallocates_live.json
+++ b/test/scenarios/light/scenario_Layouts_resize_reallocates_live.json
@@ -82,9 +82,9 @@
             "min": 6,
             "max": 23,
             "n": 32,
-            "samples": [7, 6, 7, 7, 14, 7, 6, 7, 23, 7, 7, 7, 7, 7, 20, 8, 8, 22, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 7, 7]
+            "samples": [7, 6, 7, 23, 7, 7, 7, 7, 7, 20, 8, 8, 22, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 7, 7, 8, 8, 11, 8, 8]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
@@ -191,9 +191,9 @@
             "min": 9,
             "max": 22,
             "n": 32,
-            "samples": [10, 11, 10, 11, 19, 10, 11, 10, 22, 10, 11, 10, 10, 10, 17, 10, 10, 19, 10, 10, 11, 10, 11, 11, 11, 11, 10, 9, 11, 9, 10, 10]
+            "samples": [10, 11, 10, 22, 10, 11, 10, 10, 10, 17, 10, 10, 19, 10, 10, 11, 10, 11, 11, 11, 11, 10, 9, 11, 9, 10, 10, 11, 11, 10, 10, 10]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
@@ -303,13 +303,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 14,
+            "p95": 10,
             "min": 6,
             "max": 14,
             "n": 32,
-            "samples": [6, 6, 7, 7, 14, 6, 6, 6, 9, 6, 7, 7, 7, 7, 9, 7, 6, 14, 6, 7, 7, 7, 7, 7, 7, 7, 7, 6, 7, 7, 10, 7]
+            "samples": [6, 6, 6, 9, 6, 7, 7, 7, 7, 9, 7, 6, 14, 6, 7, 7, 7, 7, 7, 7, 7, 7, 6, 7, 7, 10, 7, 7, 7, 6, 7, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "desktop-windows": {
           "tick_us": {
diff --git a/test/scenarios/light/scenario_Modifiers_reshape_the_mapping.json b/test/scenarios/light/scenario_Modifiers_reshape_the_mapping.json
index 9ed2b514c..e1d6159e9 100644
--- a/test/scenarios/light/scenario_Modifiers_reshape_the_mapping.json
+++ b/test/scenarios/light/scenario_Modifiers_reshape_the_mapping.json
@@ -63,13 +63,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 11,
+            "p95": 10,
             "min": 6,
-            "max": 19,
+            "max": 11,
             "n": 32,
-            "samples": [7, 7, 7, 7, 19, 7, 6, 6, 8, 6, 7, 8, 11, 7, 8, 8, 6, 10, 7, 7, 8, 7, 7, 7, 7, 7, 8, 7, 7, 7, 9, 7]
+            "samples": [7, 6, 6, 8, 6, 7, 8, 11, 7, 8, 8, 6, 10, 7, 7, 8, 7, 7, 7, 7, 7, 8, 7, 7, 7, 9, 7, 7, 7, 7, 7, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -179,13 +179,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 3,
-            "p95": 9,
+            "p95": 5,
             "min": 3,
-            "max": 11,
+            "max": 9,
             "n": 32,
-            "samples": [3, 3, 3, 3, 11, 3, 3, 3, 4, 4, 4, 3, 3, 3, 5, 4, 3, 9, 3, 3, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 5, 3]
+            "samples": [3, 3, 3, 4, 4, 4, 3, 3, 3, 5, 4, 3, 9, 3, 3, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 5, 3, 3, 3, 4, 3, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -288,13 +288,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 3,
-            "p95": 8,
+            "p95": 5,
             "min": 3,
             "max": 9,
             "n": 32,
-            "samples": [3, 3, 3, 3, 8, 3, 3, 3, 4, 3, 3, 3, 3, 3, 5, 4, 3, 9, 3, 3, 4, 3, 4, 3, 3, 4, 4, 4, 4, 4, 4, 3]
+            "samples": [3, 3, 3, 4, 3, 3, 3, 3, 3, 5, 4, 3, 9, 3, 3, 4, 3, 4, 3, 3, 4, 4, 4, 4, 4, 4, 3, 3, 3, 4, 3, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -396,13 +396,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 3,
-            "p95": 5,
+            "p95": 3,
             "min": 2,
-            "max": 6,
+            "max": 5,
             "n": 32,
-            "samples": [2, 2, 2, 2, 6, 2, 2, 2, 3, 3, 2, 3, 2, 2, 3, 3, 3, 5, 3, 2, 3, 2, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2]
+            "samples": [2, 2, 2, 3, 3, 2, 3, 2, 2, 3, 3, 3, 5, 3, 2, 3, 2, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 3, 3, 3, 2, 3]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -509,14 +509,14 @@
       "observed": {
         "desktop-macos": {
           "tick_us": {
-            "p50": 3,
-            "p95": 7,
+            "p50": 4,
+            "p95": 5,
             "min": 3,
-            "max": 11,
+            "max": 7,
             "n": 32,
-            "samples": [3, 3, 3, 3, 11, 3, 3, 3, 4, 3, 3, 3, 3, 3, 5, 4, 5, 7, 3, 3, 4, 3, 4, 3, 4, 4, 4, 4, 4, 4, 4, 3]
+            "samples": [3, 3, 3, 4, 3, 3, 3, 3, 3, 5, 4, 5, 7, 3, 3, 4, 3, 4, 3, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 4, 4, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -626,13 +626,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 3,
-            "p95": 6,
+            "p95": 4,
             "min": 3,
-            "max": 9,
+            "max": 6,
             "n": 32,
-            "samples": [3, 3, 4, 3, 9, 3, 3, 3, 4, 3, 3, 3, 3, 3, 4, 4, 3, 6, 3, 3, 4, 3, 4, 3, 3, 4, 4, 3, 4, 4, 4, 3]
+            "samples": [3, 3, 3, 4, 3, 3, 3, 3, 3, 4, 4, 3, 6, 3, 3, 4, 3, 4, 3, 3, 4, 4, 3, 4, 4, 4, 3, 3, 3, 4, 3, 4]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
@@ -740,13 +740,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 12,
+            "p95": 11,
             "min": 6,
-            "max": 20,
+            "max": 12,
             "n": 32,
-            "samples": [6, 7, 7, 7, 20, 7, 6, 6, 7, 7, 7, 7, 7, 7, 7, 7, 7, 12, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 8, 8, 7]
+            "samples": [7, 6, 6, 7, 7, 7, 7, 7, 7, 7, 7, 7, 12, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 7, 8, 8, 7, 7, 7, 11, 7, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         },
         "esp32s3-n16r8": {
           "tick_us": {
diff --git a/test/scenarios/light/scenario_Palettes_a_script_drives_the_effects.json b/test/scenarios/light/scenario_Palettes_a_script_drives_the_effects.json
index 1d15f0e06..654ccd5ef 100644
--- a/test/scenarios/light/scenario_Palettes_a_script_drives_the_effects.json
+++ b/test/scenarios/light/scenario_Palettes_a_script_drives_the_effects.json
@@ -103,13 +103,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 74,
+            "p95": 11,
             "min": 6,
-            "max": 74,
+            "max": 12,
             "n": 32,
-            "samples": [11, 6, 74, 74, 7, 6, 6, 7, 6, 6, 6, 7, 8, 11, 7, 7, 9, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 9, 8, 7]
+            "samples": [6, 6, 7, 6, 6, 6, 7, 8, 11, 7, 7, 9, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 8, 7, 9, 8, 7, 7, 7, 12, 7, 7]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     },
@@ -171,13 +171,13 @@
         "desktop-macos": {
           "tick_us": {
             "p50": 7,
-            "p95": 108,
+            "p95": 8,
             "min": 6,
-            "max": 115,
+            "max": 11,
             "n": 32,
-            "samples": [7, 7, 115, 108, 8, 6, 6, 7, 7, 7, 7, 7, 7, 8, 6, 6, 11, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 6, 7, 7]
+            "samples": [6, 6, 7, 7, 7, 7, 7, 7, 8, 6, 6, 11, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 6, 7, 7, 7, 7, 8, 7, 6]
           },
-          "last_updated": "2026-10-13"
+          "last_updated": "2026-10-14"
         }
       }
     }
diff --git a/test/unit/core/http_loopback.h b/test/unit/core/http_loopback.h
new file mode 100644
index 000000000..c02258680
--- /dev/null
+++ b/test/unit/core/http_loopback.h
@@ -0,0 +1,74 @@
+#pragma once
+
+/// Loopback helpers the HTTP server tests share: connect a client and let the server accept it, tick until a reply arrives, read a close, make a payload.
+
+#include "core/system/HttpServerModule.h"
+#include "platform/platform.h"
+
+#include <chrono>
+#include <cstddef>
+#include <cstdint>
+#include <string>
+#include <thread>
+
+namespace http_loopback {
+
+using CR = mm::platform::TcpConnection::ConnectResult;
+
+// Connects `client` to the server on `port`, then ticks once so the server accepts it.
+inline bool connectAndAccept(mm::HttpServerModule& http, mm::platform::TcpConnection& client, uint16_t port) {
+    if (!client.connectStart("127.0.0.1", port)) return false;
+    CR r = CR::Pending;
+    for (int i = 0; i < 500 && r == CR::Pending; i++) {
+        r = client.connectPoll();
+        if (r == CR::Pending) mm::platform::delayMs(1);
+    }
+    if (r != CR::Connected) return false;
+    mm::platform::delayMs(5);
+    http.tick20ms();
+    return true;
+}
+
+// Ticks the server, accumulating what the client reads, until it holds at least `wantAtLeast` bytes or `maxTicks` is spent.
+inline std::string pumpUntil(mm::HttpServerModule& http, mm::platform::TcpConnection& client,
+                             size_t wantAtLeast, int maxTicks = 3000) {
+    std::string out;
+    char buf[4096];
+    for (int i = 0; i < maxTicks && out.size() < wantAtLeast; i++) {
+        http.tick20ms();
+        const int n = client.read(reinterpret_cast<uint8_t*>(buf), sizeof(buf));
+        if (n > 0) out.append(buf, static_cast<size_t>(n));
+        else mm::platform::delayMs(1);
+    }
+    return out;
+}
+
+// What a read answers after the server closes the socket: -1 while the close is in flight, then 0.
+inline int readAfterClose(mm::platform::TcpConnection& client) {
+    char buf[32];
+    int got = -1;
+    for (int ms = 0; ms < 200 && got == -1; ms++) {
+        got = client.read(reinterpret_cast<uint8_t*>(buf), sizeof(buf));
+        if (got == -1) std::this_thread::sleep_for(std::chrono::milliseconds(1));
+    }
+    return got;
+}
+
+// Connects `client`, posts `body` to `path` and returns the reply once its status line has arrived.
+inline std::string postSmall(mm::HttpServerModule& http, mm::platform::TcpConnection& client, uint16_t port,
+                             const char* path, const std::string& body) {
+    if (!connectAndAccept(http, client, port)) return {};
+    const std::string req = std::string("POST /api/file?path=") + path + " HTTP/1.1\r\nContent-Length: " +
+                            std::to_string(body.size()) + "\r\n\r\n" + body;
+    if (!client.write(reinterpret_cast<const uint8_t*>(req.data()), req.size())) return {};
+    return pumpUntil(http, client, 12);
+}
+
+// A deterministic byte pattern, longer than one 4 KB transfer chunk when `n` is, so an upload spans several ticks.
+inline std::string pattern(size_t n) {
+    std::string s(n, '\0');
+    for (size_t i = 0; i < n; i++) s[i] = static_cast<char>('A' + (i % 26));
+    return s;
+}
+
+}  // namespace http_loopback
diff --git a/test/unit/core/unit_AudioService_codec.cpp b/test/unit/core/unit_AudioService_codec.cpp
index 32997d782..272ea5a32 100644
--- a/test/unit/core/unit_AudioService_codec.cpp
+++ b/test/unit/core/unit_AudioService_codec.cpp
@@ -14,6 +14,8 @@ TEST_CASE("a microphone asks for no codec until one is named") {
     CHECK(audio.codecType() == mm::platform::CodecType::None);
     audio.codec = mm::AudioService::kCodecEs8311;
     CHECK(audio.codecType() == mm::platform::CodecType::Es8311);
+    audio.codec = mm::AudioService::kCodecEs7210;
+    CHECK(audio.codecType() == mm::platform::CodecType::Es7210);
 }
 
 // Every codec setting re-initializes the microphone, as a pin change does, so an edit applies live.
@@ -22,7 +24,7 @@ TEST_CASE("changing the codec or its address re-initializes the microphone") {
     for (const char* name : {"codec", "codecAddr"}) CHECK(audio.affectsPrepare(name));
 }
 
-// The bus scan reads 0x18 as this codec only while the wired microphone actually uses one.
+// The bus scan names the codec at its address only while the wired microphone uses one.
 TEST_CASE("the codec is reported on the bus only while the local microphone uses one") {
     mm::AudioService audio;
     mm::MoonModule::I2cDevice dev[2];
@@ -32,6 +34,11 @@ TEST_CASE("the codec is reported on the bus only while the local microphone uses
     REQUIRE(audio.i2cDevices(dev, 2) == 1);
     CHECK(dev[0].addr == 0x18);
     CHECK(std::string(dev[0].role) == "ES8311");
+    audio.codec = mm::AudioService::kCodecEs7210;   // a microphone ADC, at the address its strapping gives
+    audio.codecAddr = 0x40;
+    REQUIRE(audio.i2cDevices(dev, 2) == 1);
+    CHECK(dev[0].addr == 0x40);
+    CHECK(std::string(dev[0].role) == "ES7210");
     audio.mode = mm::AudioService::kSimMode;
     CHECK(audio.i2cDevices(dev, 2) == 0);   // a synthesized signal drives no chip
 }
diff --git a/test/unit/core/unit_HostResolver.cpp b/test/unit/core/unit_HostResolver.cpp
index 31d8ef183..57553cb50 100644
--- a/test/unit/core/unit_HostResolver.cpp
+++ b/test/unit/core/unit_HostResolver.cpp
@@ -58,3 +58,45 @@ TEST_CASE("a host name that never resolves stays waiting, and costs no lookup un
     CHECK(mm::HostResolver::lookup("nowhere.lan", ip) == mm::HostResolver::State::Waiting);
     mm::platform::setTestNowMs(0);
 }
+
+namespace {
+/// A non-blocking lookup that answers after `gStepsToAnswer` steps, as a DNS reply arrives some loops later.
+int gSteps = 0;
+int gStepsToAnswer = 3;
+mm::platform::LookupStep fakeStep(const char* name, uint8_t* ip) {
+    if (++gSteps < gStepsToAnswer) return mm::platform::LookupStep::Pending;
+    gSteps = 0;
+    if (std::strcmp(name, "panel.lan") != 0) return mm::platform::LookupStep::Failed;
+    ip[0] = 10; ip[1] = 0; ip[2] = 0; ip[3] = 7;
+    return mm::platform::LookupStep::Resolved;
+}
+}  // namespace
+
+TEST_CASE("on a board with no worker task, the asking side looks a name up one non-blocking step per ask") {
+    const mm::HostResolver::LookupForTest resolver(&fakeStep);
+    gSteps = 0; gStepsToAnswer = 3;
+    mm::platform::setTestNowMs(1000);
+    uint8_t ip[4] = {};
+    CHECK(mm::HostResolver::lookup("panel.lan", ip) == mm::HostResolver::State::Waiting);   // queued
+    CHECK(mm::HostResolver::lookup("panel.lan", ip) == mm::HostResolver::State::Waiting);   // step 1: sent
+    CHECK(mm::HostResolver::lookup("panel.lan", ip) == mm::HostResolver::State::Waiting);   // step 2: no reply yet
+    CHECK(mm::HostResolver::lookup("panel.lan", ip) == mm::HostResolver::State::Resolved);  // step 3: the reply
+    CHECK(ip[3] == 7);
+    mm::platform::setTestNowMs(0);
+}
+
+TEST_CASE("on a board with no worker task, a name that fails is retried only once it is due") {
+    const mm::HostResolver::LookupForTest resolver(&fakeStep);
+    gSteps = 0; gStepsToAnswer = 1;
+    mm::platform::setTestNowMs(1000);
+    uint8_t ip[4] = {};
+    mm::HostResolver::lookup("nowhere.lan", ip);
+    mm::HostResolver::lookup("nowhere.lan", ip);   // looked up, failed
+    gSteps = 0; gStepsToAnswer = 100;              // a step now would count
+    mm::HostResolver::lookup("nowhere.lan", ip);
+    CHECK(gSteps == 0);                            // too soon to retry
+    mm::platform::setTestNowMs(7000);              // past the retry interval
+    mm::HostResolver::lookup("nowhere.lan", ip);
+    CHECK(gSteps == 1);
+    mm::platform::setTestNowMs(0);
+}
diff --git a/test/unit/core/unit_HttpServerModule_sdcard.cpp b/test/unit/core/unit_HttpServerModule_sdcard.cpp
index 3459a5e53..79e87b8f9 100644
--- a/test/unit/core/unit_HttpServerModule_sdcard.cpp
+++ b/test/unit/core/unit_HttpServerModule_sdcard.cpp
@@ -6,6 +6,7 @@
 #include "doctest.h"
 #include "core/system/HttpServerModule.h"
 #include "platform/platform.h"
+#include "http_loopback.h"
 
 #include <algorithm>
 #include <chrono>
@@ -19,20 +20,8 @@
 namespace {
 
 constexpr uint16_t kTestPort = 18091;
-using CR = mm::platform::TcpConnection::ConnectResult;
-
-bool connectAndAccept(mm::HttpServerModule& http, mm::platform::TcpConnection& client) {
-    if (!client.connectStart("127.0.0.1", kTestPort)) return false;
-    CR r = CR::Pending;
-    for (int i = 0; i < 500 && r == CR::Pending; i++) {
-        r = client.connectPoll();
-        if (r == CR::Pending) mm::platform::delayMs(1);
-    }
-    if (r != CR::Connected) return false;
-    mm::platform::delayMs(5);
-    http.tick20ms();
-    return true;
-}
+using namespace http_loopback;
+
 
 // Sends a POST of `payload` to `path`: the header, then the whole body.
 void postFile(mm::platform::TcpConnection& client, const char* path, const std::string& payload) {
@@ -43,19 +32,6 @@ void postFile(mm::platform::TcpConnection& client, const char* path, const std::
     REQUIRE(client.write(reinterpret_cast<const uint8_t*>(payload.data()), payload.size()));
 }
 
-// Ticks the server, accumulating whatever the client reads, until `out` holds at least `wantAtLeast` bytes or `maxTicks` is spent; returns what was accumulated.
-std::string pumpUntil(mm::HttpServerModule& http, mm::platform::TcpConnection& client,
-                      size_t wantAtLeast, int maxTicks = 3000) {
-    std::string out;
-    char buf[4096];
-    for (int i = 0; i < maxTicks && out.size() < wantAtLeast; i++) {
-        http.tick20ms();
-        const int n = client.read(reinterpret_cast<uint8_t*>(buf), sizeof(buf));
-        if (n > 0) out.append(buf, static_cast<size_t>(n));
-        else mm::platform::delayMs(1);
-    }
-    return out;
-}
 
 // Whether a reply holds a whole response: its headers and the Content-Length bytes of body after them.
 bool wholeResponse(const std::string& reply) {
@@ -74,12 +50,6 @@ std::string request(mm::HttpServerModule& http, mm::platform::TcpConnection& cli
     return reply;
 }
 
-// A deterministic byte pattern, long enough (> the 4096-byte per-tick chunk) to force several ticks of driveSdTransfers regardless of how fast loopback delivers the bytes.
-std::string pattern(size_t n) {
-    std::string s(n, '\0');
-    for (size_t i = 0; i < n; i++) s[i] = static_cast<char>('A' + (i % 26));
-    return s;
-}
 
 // Ticks with a millisecond between them, since Linux loopback delivers a write at once and macOS a moment later; a tick with nothing new is harmless.
 void tickWhileDelivering(mm::HttpServerModule& http, int ticks = 5) {
@@ -89,20 +59,10 @@ void tickWhileDelivering(mm::HttpServerModule& http, int ticks = 5) {
     }
 }
 
-// What a read answers after the server closes the socket: -1 while the close is in flight, then 0.
-int readAfterClose(mm::platform::TcpConnection& client) {
-    char buf[32];
-    int got = -1;
-    for (int ms = 0; ms < 200 && got == -1; ms++) {
-        got = client.read(reinterpret_cast<uint8_t*>(buf), sizeof(buf));
-        if (got == -1) std::this_thread::sleep_for(std::chrono::milliseconds(1));
-    }
-    return got;
-}
 
 // Connects, declares a 10000-byte upload to `path` but sends only 100, then ticks so the slot claims it: in flight, never finished.
 void claimStuckUpload(mm::HttpServerModule& http, mm::platform::TcpConnection& client, const char* path) {
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
     char req[256];
     const int reqLen = std::snprintf(req, sizeof(req),
         "POST /api/file?path=%s HTTP/1.1\r\nContent-Length: 10000\r\n\r\n", path);
@@ -115,7 +75,7 @@ void claimStuckUpload(mm::HttpServerModule& http, mm::platform::TcpConnection& c
 // Connects and GETs `path`, returning the response once at least `wantAtLeast` bytes have arrived.
 std::string getAndWait(mm::HttpServerModule& http, mm::platform::TcpConnection& client, const char* path,
                        size_t wantAtLeast = 12) {
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
     char req[160];
     const int n = std::snprintf(req, sizeof(req), "GET /api/file?path=%s HTTP/1.1\r\n\r\n", path);
     REQUIRE(client.write(reinterpret_cast<const uint8_t*>(req), static_cast<size_t>(n)));
@@ -190,7 +150,7 @@ TEST_CASE("an upload to /sd without a mounted card answers \"no card mounted\",
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
 
     const char* req = "POST /api/file?path=/sd/x.bin HTTP/1.1\r\nContent-Length: 2\r\n\r\nhi";
     const std::string reply = request(http, client, req);
@@ -207,7 +167,7 @@ TEST_CASE("an SD upload larger than one tick's chunk streams across several tick
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
 
     const std::string payload = pattern(10000);
     postFile(client, "/sd/big.bin", payload);
@@ -243,7 +203,7 @@ TEST_CASE("an SD upload spanning several chunks drains in far fewer ticks than c
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
 
     const std::string payload = pattern(20000);   // 5 chunks' worth, at the old one-chunk-per-tick rate
     postFile(client, "/sd/multi.bin", payload);
@@ -268,7 +228,7 @@ TEST_CASE("an SD download larger than one tick's chunk streams across several ti
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
 
     const char* req = "GET /api/file?path=/sd/dl.bin HTTP/1.1\r\n\r\n";
     REQUIRE(client.write(reinterpret_cast<const uint8_t*>(req), std::strlen(req)));
@@ -326,13 +286,8 @@ TEST_CASE("an SD upload that stalls mid-transfer is closed and its slot frees fo
     for (int i = 0; i < 10; i++) http.tick20ms();
     CHECK(readAfterClose(client) == 0);   // closed, no response
 
-    // The slot is free again: a fresh, small upload still completes normally.
     mm::platform::TcpConnection client2;
-    REQUIRE(connectAndAccept(http, client2));
-    const char* req2 = "POST /api/file?path=/sd/ok2.bin HTTP/1.1\r\nContent-Length: 2\r\n\r\nhi";
-    REQUIRE(client2.write(reinterpret_cast<const uint8_t*>(req2), std::strlen(req2)));
-    const std::string reply = pumpUntil(http, client2, 12);
-    CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 200", 12) == 0);
+    CHECK(postSmall(http, client2, kTestPort, "/sd/ok2.bin", "hi").rfind("HTTP/1.1 200", 0) == 0);   // the slot is free again
 
     client2.close();
     http.release();
@@ -363,7 +318,7 @@ TEST_CASE("an SD upload past the card's free space is refused with 507, immediat
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
 
     const std::string payload = pattern(2000);   // bigger than the fictional card
     postFile(client, "/sd/toobig.bin", payload);
@@ -383,7 +338,7 @@ TEST_CASE("an SD upload declaring more than FAT32's 4 GiB-1 ceiling is refused w
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
 
     const char* req = "POST /api/file?path=/sd/huge.bin HTTP/1.1\r\nContent-Length: 5000000000\r\n\r\n";
     const std::string reply = request(http, client, req);
@@ -407,7 +362,7 @@ TEST_CASE("DELETE /api/dir removes a file and a non-empty folder on the card, vi
 
     {
         mm::platform::TcpConnection client;
-        REQUIRE(connectAndAccept(http, client));
+        REQUIRE(connectAndAccept(http, client, kTestPort));
         const char* req = "DELETE /api/dir?path=/sd/lone.bin HTTP/1.1\r\n\r\n";
         const std::string reply = request(http, client, req);
         CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 200", 12) == 0);
@@ -417,7 +372,7 @@ TEST_CASE("DELETE /api/dir removes a file and a non-empty folder on the card, vi
 
     {
         mm::platform::TcpConnection client;
-        REQUIRE(connectAndAccept(http, client));
+        REQUIRE(connectAndAccept(http, client, kTestPort));
         const char* req = "DELETE /api/dir?path=/sd/tree HTTP/1.1\r\n\r\n";
         const std::string reply = request(http, client, req);
         CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 200", 12) == 0);
@@ -439,7 +394,7 @@ TEST_CASE("DELETE /api/dir on /sd itself is refused, leaving the card untouched"
     http.setup();
 
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
     const char* req = "DELETE /api/dir?path=/sd HTTP/1.1\r\n\r\n";
     const std::string reply = request(http, client, req);
     CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 500", 12) == 0);
@@ -458,7 +413,7 @@ TEST_CASE("DELETE /api/dir on the card root spelled with extra slashes is refuse
     http.setup();
     for (const char* req : {"DELETE /api/dir?path=/sd// HTTP/1.1\r\n\r\n", "DELETE /api/dir?path=//sd HTTP/1.1\r\n\r\n"}) {
         mm::platform::TcpConnection client;
-        REQUIRE(connectAndAccept(http, client));
+        REQUIRE(connectAndAccept(http, client, kTestPort));
         const std::string reply = request(http, client, req);
         CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 200", 12) != 0);
         client.close();
@@ -475,7 +430,7 @@ TEST_CASE("an upload to a relative sd/ path gets the card's size limit") {
     http.port = kTestPort;
     http.setup();
     mm::platform::TcpConnection client;
-    REQUIRE(connectAndAccept(http, client));
+    REQUIRE(connectAndAccept(http, client, kTestPort));
     const char* req = "POST /api/file?path=sd/rel.bin HTTP/1.1\r\nContent-Length: 9000000\r\n\r\n";
     const std::string reply = request(http, client, req);
     CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 507", 12) == 0);
diff --git a/test/unit/core/unit_HttpServerModule_upload.cpp b/test/unit/core/unit_HttpServerModule_upload.cpp
new file mode 100644
index 000000000..c6ccfc59d
--- /dev/null
+++ b/test/unit/core/unit_HttpServerModule_upload.cpp
@@ -0,0 +1,124 @@
+/// @module HttpServerModule
+/// @also FileManagerModule
+///
+/// An upload to flash moves through the card's transfer slots, a bounded slice per tick, so a slow client never holds the render loop; driven over loopback.
+
+#include "doctest.h"
+#include "core/system/HttpServerModule.h"
+#include "platform/platform.h"
+#include "http_loopback.h"
+
+#include <chrono>
+#include <cstdio>
+#include <cstring>
+#include <filesystem>
+#include <string>
+#include <thread>
+
+namespace {
+
+constexpr uint16_t kTestPort = 18093;   // 18090 to 18092 belong to the connections, SD card and subscription tests
+using namespace http_loopback;
+
+
+// Sends a POST header declaring `declared` body bytes to `path`, then the first `body` bytes.
+void postStart(mm::platform::TcpConnection& client, const char* path, size_t declared, const std::string& body) {
+    char req[256];
+    const int reqLen = std::snprintf(req, sizeof(req),
+        "POST /api/file?path=%s HTTP/1.1\r\nContent-Length: %zu\r\n\r\n", path, declared);
+    REQUIRE(client.write(reinterpret_cast<const uint8_t*>(req), static_cast<size_t>(reqLen)));
+    if (!body.empty()) REQUIRE(client.write(reinterpret_cast<const uint8_t*>(body.data()), body.size()));
+}
+
+
+
+
+// A fresh flash root under a temp dir for one test.
+struct FlashFixture {
+    char root[256];
+    FlashFixture() {
+        static unsigned counter = 0;
+        std::snprintf(root, sizeof(root), "%s/mm_upload_test_%u",
+                      std::filesystem::temp_directory_path().string().c_str(), counter++);
+        std::filesystem::remove_all(root);
+        std::filesystem::create_directories(root);
+        mm::platform::fsSetRoot(root);
+    }
+    // NOLINTNEXTLINE(bugprone-exception-escape)
+    ~FlashFixture() noexcept {
+        mm::platform::fsSetRoot("");
+        std::error_code ec;
+        std::filesystem::remove_all(root, ec);
+    }
+};
+
+}  // namespace
+
+TEST_CASE("a flash upload larger than one chunk streams across ticks and lands whole, answered once it commits") {
+    FlashFixture fix;
+    mm::HttpServerModule http;
+    http.port = kTestPort;
+    http.setup();
+    mm::platform::TcpConnection client;
+    REQUIRE(connectAndAccept(http, client, kTestPort));
+
+    const std::string payload = pattern(20000);
+    postStart(client, "/big.bin", payload.size(), payload);
+    const std::string reply = pumpUntil(http, client, 12);
+    CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 200", 12) == 0);
+
+    char back[20001];   // fsRead null-terminates
+    CHECK(mm::platform::fsRead("/big.bin", back, sizeof(back)) == static_cast<int>(payload.size()));
+    CHECK(std::memcmp(back, payload.data(), payload.size()) == 0);
+
+    client.close();
+    http.release();
+}
+
+// The bug this pins: a flash upload drained its whole body in one tick, so a slow client held the render loop past the 12 s watchdog and rebooted the board.
+TEST_CASE("a flash upload whose client stalls never holds a tick, and once the stall guard trips leaves no file and frees its slot") {
+    FlashFixture fix;
+    mm::HttpServerModule http;
+    http.port = kTestPort;
+    http.setup();
+    mm::platform::TcpConnection client;
+    REQUIRE(connectAndAccept(http, client, kTestPort));
+    postStart(client, "/stuck.bin", 10000, pattern(100));   // declares 10000 bytes, sends 100, then goes silent
+
+    const auto start = std::chrono::steady_clock::now();
+    for (int i = 0; i < 20; i++) {
+        http.tick20ms();
+        std::this_thread::sleep_for(std::chrono::milliseconds(1));
+    }
+    const auto elapsed = std::chrono::duration_cast<std::chrono::milliseconds>(std::chrono::steady_clock::now() - start);
+    CHECK(elapsed.count() < 1000);   // twenty ticks with a silent client: nothing waits on it
+
+    struct Clock { ~Clock() { mm::platform::setTestNowMs(0); } } clock;
+    mm::platform::setTestNowMs(mm::platform::millis() + 60000);   // well past the stall guard
+    for (int i = 0; i < 10; i++) http.tick20ms();
+    CHECK(readAfterClose(client) == 0);                    // closed, no response
+    CHECK(mm::platform::fsSize("/stuck.bin") < 0);         // the partial file never committed
+
+    mm::platform::TcpConnection client2;
+    CHECK(postSmall(http, client2, kTestPort, "/ok.bin", "hi").rfind("HTTP/1.1 200", 0) == 0);   // the slot is free again
+
+    client2.close();
+    http.release();
+}
+
+TEST_CASE("a flash upload over the flash size bound is refused with 413 before any byte lands") {
+    FlashFixture fix;
+    mm::HttpServerModule http;
+    http.port = kTestPort;
+    http.setup();
+    mm::platform::TcpConnection client;
+    REQUIRE(connectAndAccept(http, client, kTestPort));
+
+    postStart(client, "/huge.bin", 300 * 1024, "");
+    const std::string reply = pumpUntil(http, client, 12);
+    CHECK(std::strncmp(reply.c_str(), "HTTP/1.1 413", 12) == 0);
+    CHECK(mm::platform::fsSize("/huge.bin") < 0);
+
+    client.close();
+    http.release();
+}
diff --git a/test/unit/core/unit_NetworkModule.cpp b/test/unit/core/unit_NetworkModule.cpp
index d791c85fd..72d03d65a 100644
--- a/test/unit/core/unit_NetworkModule.cpp
+++ b/test/unit/core/unit_NetworkModule.cpp
@@ -155,6 +155,27 @@ TEST_CASE("the station tries each known network in priority order before the acc
     mm::platform::setTestWifiStaAvailable(false);   // reset, so cases stay independent
 }
 
+// A router can take seconds to lease an address, so a joined station waits for the lease on top of the join's grace before the next network.
+TEST_CASE("a station that joined waits for its lease before the next network is tried") {
+    FrozenClock clock;
+    mm::platform::setTestWifiStaAvailable(true);
+    {
+        WiFiNetwork w;
+        w.wifi.remember("second", "pw2");
+        w.wifi.remember("first", "pw1");
+        w.net.setup();
+        mm::platform::setTestWifiStaAssociated(true);   // joined, no address yet
+        mm::platform::setTestNowMs(1000 + 11000);   // past the join's grace
+        w.net.tick1s();
+        CHECK(std::strcmp(mm::platform::testLastStaSsid(), "first") == 0);
+        mm::platform::setTestNowMs(1000 + 26000);   // past the lease's wait as well
+        w.net.tick1s();
+        CHECK(std::strcmp(mm::platform::testLastStaSsid(), "second") == 0);
+    }
+    mm::platform::setTestWifiStaAssociated(false);
+    mm::platform::setTestWifiStaAvailable(false);
+}
+
 namespace {
 mm::ListSource* availableOf(mm::WiFiModule& w) {
     for (uint8_t i = 0; i < w.controls().count(); i++)
@@ -414,14 +435,9 @@ TEST_CASE("editing the joined network's IP settings applies them live") {
 TEST_CASE("a switch back to DHCP waits for the lease rather than falling back to the access point") {
     FrozenClock clock;
     mm::platform::setTestWifiStaAvailable(true);
-    const uint8_t staIp[4] = {192, 168, 1, 30};
     const auto run = [&](uint32_t gapMs, bool stillOnStation) {
         WiFiNetwork w;
-        w.wifi.remember("home", "pw");
-        w.net.setup();
-        mm::platform::setTestWifiStaIPv4(staIp);
-        w.net.tick1s();
-        REQUIRE(std::string(modeOf(w.net)) == "WiFi STA");
+        joinHomeOverWifi(w);
         constexpr uint32_t kFirstRowId = 1;
         REQUIRE(w.wifi.setListRowField(kFirstRowId, "ipSettings", "{\"value\":1}"));
         REQUIRE(w.wifi.setListRowField(kFirstRowId, "ip", "{\"value\":\"192.168.1.240\"}"));
@@ -444,6 +460,29 @@ TEST_CASE("a switch back to DHCP waits for the lease rather than falling back to
     mm::platform::setTestWifiStaAvailable(false);
 }
 
+// A dropout the radio rejoins from still needs a lease, which gets the same wait rather than the access point opening on a station that is back.
+TEST_CASE("a station that rejoins after a dropout waits for its lease") {
+    FrozenClock clock;
+    mm::platform::setTestWifiStaAvailable(true);
+    const uint8_t staIp[4] = {192, 168, 1, 30};
+    {
+        WiFiNetwork w;
+        joinHomeOverWifi(w);
+        mm::platform::setTestWifiStaIPv4(nullptr);   // dropped
+        w.net.tick1s();
+        mm::platform::setTestWifiStaAssociated(true);   // rejoined, the lease pending
+        mm::platform::setTestNowMs(1000 + 12000);   // past the join's grace
+        w.net.tick1s();
+        CHECK(std::string(modeOf(w.net)) == "WiFi STA");
+        mm::platform::setTestWifiStaIPv4(staIp);
+        w.net.tick1s();
+        CHECK(std::string(modeOf(w.net)) == "WiFi STA");
+    }
+    mm::platform::setTestWifiStaIPv4(nullptr);
+    mm::platform::setTestWifiStaAssociated(false);
+    mm::platform::setTestWifiStaAvailable(false);
+}
+
 // A known network the scan saw is tried before one higher in the list that it did not, and the unseen one still gets its turn.
 TEST_CASE("the cascade tries the networks in range first, then the rest") {
     FrozenClock clock;
diff --git a/test/unit/core/unit_PictureService.cpp b/test/unit/core/unit_PictureService.cpp
new file mode 100644
index 000000000..dbfefe96e
--- /dev/null
+++ b/test/unit/core/unit_PictureService.cpp
@@ -0,0 +1,126 @@
+/// @module PictureService
+
+/// The picture source: the test pattern it publishes, the generation that tells a consumer it changed, and the empty frame when nothing publishes.
+
+#include "doctest.h"
+#include "core/services/PictureService.h"
+
+#include <atomic>
+#include <cstring>
+#include <string>
+#include <thread>
+
+namespace {
+// A service drawing a `w` x `h` test pattern, as the UI's prepare does.
+struct Picture {
+    mm::PictureService svc;
+    Picture(uint16_t w, uint16_t h) {
+        svc.defineControls();
+        svc.width = w;
+        svc.height = h;
+        svc.prepare();
+    }
+};
+const uint8_t* pixel(const mm::PictureFrame& f, uint32_t x, uint32_t y) { return f.rgb + (y * f.width + x) * 3; }
+// The active service's frame, read through a Reader as an effect does.
+mm::PictureFrame current() {
+    const mm::PictureService::Reader r;
+    REQUIRE(bool(r));
+    return r.frame();
+}
+}  // namespace
+
+// The test card at 160 x 120: the color bars and the gray steps inside the round circle, a colored block and the gray grid outside it.
+TEST_CASE("the test pattern publishes the test card") {
+    Picture p(160, 120);
+    const mm::PictureFrame f = current();
+    REQUIRE(f.rgb != nullptr);
+    CHECK(f.width == 160);
+    CHECK(f.height == 120);
+    const auto is = [&](uint32_t x, uint32_t y, uint8_t r, uint8_t g, uint8_t b) {
+        const uint8_t* px = pixel(f, x, y);
+        return px[0] == r && px[1] == g && px[2] == b;
+    };
+    CHECK(is(37, 51, 190, 190, 50));     // the yellow bar at the circle's left
+    CHECK(is(124, 51, 0, 30, 190));      // the blue bar at its right
+    CHECK(is(48, 89, 50, 50, 50));       // the gray steps start dark
+    CHECK(is(117, 89, 255, 255, 255));   // and end white
+    CHECK(is(22, 38, 80, 160, 140));     // the left side's tall block, upper half
+    CHECK(is(5, 2, 128, 128, 128));      // a grid square's gray
+}
+
+// A consumer compares generations to skip a picture it already sampled, so a new size is a new generation.
+TEST_CASE("a new picture size publishes a new generation") {
+    Picture p(16, 9);
+    const uint32_t first = current().generation;
+    p.svc.width = 32;
+    p.svc.prepare();
+    CHECK(current().generation != first);
+    CHECK(current().width == 32);
+}
+
+// An effect with no source reads an empty frame rather than a dangling pointer, before a service exists and after it leaves.
+TEST_CASE("with no Picture service the frame is empty") {
+    CHECK(current().rgb == nullptr);
+    {
+        Picture p(8, 8);
+        CHECK(current().rgb != nullptr);
+        p.svc.release();
+        CHECK(current().rgb == nullptr);
+    }
+    CHECK(current().rgb == nullptr);
+}
+
+namespace {
+// A writer task publishing `pictures` whole pictures, each one value throughout, while this thread reads: every picture read must be whole.
+void writeWhileReading(Picture& p, int pictures) {
+    // A uniform first picture, since the test pattern the service starts with is not one value throughout.
+    const size_t seed = static_cast<size_t>(p.svc.width) * p.svc.height * 3;
+    std::memset(p.svc.beginWrite(), 0, seed);
+    p.svc.endWrite();
+    std::atomic<bool> done{false};
+    std::thread writer([&] {
+        const size_t bytes = static_cast<size_t>(p.svc.width) * p.svc.height * 3;
+        for (int k = 1; k <= pictures; k++) {
+            uint8_t* px = p.svc.beginWrite();
+            for (size_t i = 0; i < bytes; i++) px[i] = static_cast<uint8_t>(k);
+            p.svc.endWrite();
+        }
+        done = true;
+    });
+    int torn = 0, reads = 0;
+    while (!done) {
+        const mm::PictureService::Reader r;
+        if (!r) continue;   // the writer holds it: an effect samples on the next tick
+        const mm::PictureFrame& f = r.frame();
+        const size_t bytes = static_cast<size_t>(f.width) * f.height * 3;
+        for (size_t i = 1; i < bytes; i++) if (f.rgb[i] != f.rgb[0]) { torn++; break; }
+        reads++;
+    }
+    writer.join();
+    CHECK(torn == 0);
+    CHECK(reads > 0);
+    CHECK(current().rgb[0] == static_cast<uint8_t>(pictures));   // the last picture is the one shown
+}
+}  // namespace
+
+// A source writing from its own task fills the back picture and swaps, so a reader never sees half a picture.
+TEST_CASE("a picture written from another task is always read whole, with two pictures") {
+    Picture p(64, 36);
+    REQUIRE(p.svc.prepareBuffers(/*writerTask=*/true));
+    REQUIRE(p.svc.twoBuffers());
+    writeWhileReading(p, 300);
+}
+
+// Short of memory for the second picture, the one picture is locked while written: frames may be skipped, never torn, and the status says why.
+TEST_CASE("without room for a second picture the service degrades to one, locked while written") {
+    Picture p(64, 36);
+    const size_t bytes = 64u * 36u * 3u;
+    mm::platform::setTestMaxAllocBlock(bytes - 1);   // the optional picture finds no block
+    REQUIRE(p.svc.prepareBuffers(/*writerTask=*/true));
+    mm::platform::setTestMaxAllocBlock(0);
+    CHECK_FALSE(p.svc.twoBuffers());
+    REQUIRE(p.svc.status() != nullptr);
+    CHECK(std::string(p.svc.status()) == "one picture buffer: not enough memory, a capture may skip frames");
+    writeWhileReading(p, 300);
+}
diff --git a/test/unit/core/unit_platform_worker.cpp b/test/unit/core/unit_platform_worker.cpp
index f256d3443..0e0a02bde 100644
--- a/test/unit/core/unit_platform_worker.cpp
+++ b/test/unit/core/unit_platform_worker.cpp
@@ -1,6 +1,6 @@
 /// @module platform
 
-/// Pins the platform worker-task seam (spawnPinnedTask / notifyTask / waitNotify / stopPinnedTask) that the multicore render↔encode split is built on. On the host the seam is a std::thread + condition_variable, so these tests run the REAL producer/consumer handoff on a second thread, the same invariants the ESP32 core-1 encode task relies on, exercised where CI can catch a race (run the suite under TSan/ASan). No RTOS on the host, so the `core` pin is a no-op; the wake, the single-slot latch, the timeout, and the clean stop-drain are what's under test.
+/// Pins the worker-task seam the multicore render/encode split is built on. On the host the seam is a std::thread and a condition variable, so these tests run the real handoff where CI can catch a race. The host leaves the core to the operating system.
 
 #include "doctest.h"
 #include "platform/platform.h"
@@ -13,7 +13,7 @@
 using namespace std::chrono_literals;
 
 namespace {
-// A worker body that counts wakes until stopped. `wakes` is the consumer-visible proof each notify was delivered exactly once; `running` proves the fn actually started; the loop exits when a woken waitNotify returns while `stop` is set (the production shape: wake, re-check stop, drain, return).
+// A worker body counting wakes until stopped: `wakes` proves each notify landed once, `running` that the fn started; it exits when a wake finds `stop` set, the production shape.
 struct Counter {
     mm::platform::WorkerTask task;
     std::atomic<int> wakes{0};
@@ -73,7 +73,7 @@ TEST_CASE("worker seam: waitNotify times out and returns false when not notified
     mm::platform::stopPinnedTask(p.task);
 }
 
-TEST_CASE("worker seam: stopPinnedTask joins — the fn has returned before it returns") {
+TEST_CASE("worker seam: stopPinnedTask joins: the fn has returned before it returns") {
     // The stop must be a real join: after stopPinnedTask returns, the worker body is guaranteed done (so its buffers are safe to free, the render-split drain contract). A flag the body sets last proves it ran to completion before stop returned.
     struct Joiner {
         mm::platform::WorkerTask task;
@@ -92,8 +92,8 @@ TEST_CASE("worker seam: stopPinnedTask joins — the fn has returned before it r
 }
 
 // --- TryLock: the cross-core sender latch ---------------------------------------------------------
-// The WS sender has two producers on two cores once the split engages (core 0's drain + state push, core 1's offloaded PreviewDriver). TryLock is what excludes them. Try-only BY DESIGN: a caller on the render/encode thread must never block on a peer (hot-path rule), so the loser SKIPS its slot.
-// That constraint is what lets it be a plain atomic_flag test-and-set rather than an OS mutex.
+// The WS sender has two producers on two cores under the split, core 0's drain and core 1's PreviewDriver, and TryLock excludes them; try-only by design, so the loser skips its slot.
+// That constraint is what lets it be an atomic exchange on a flag rather than an OS mutex.
 
 TEST_CASE("TryLock: acquiring excludes a second acquirer, release re-opens it") {
     mm::TryLock lk;
diff --git a/test/unit/light/unit_BeatRipples.cpp b/test/unit/light/unit_BeatRipples.cpp
index cc9bfd063..514fff6fe 100644
--- a/test/unit/light/unit_BeatRipples.cpp
+++ b/test/unit/light/unit_BeatRipples.cpp
@@ -1,7 +1,7 @@
 /// @module BeatRipplesEffect
 /// @also golden_frame
 
-/// The wave surface. A golden hash pins which pixels light, but it passes just as happily on a frame that is entirely black, which is how this effect once shipped rendering nothing at all: the stone pressed into the surface was scaled in units of tens while the render reads a slope in units of thousands, so every ripple fell below the threshold that lights a pixel. What is pinned here is that water is VISIBLE and that it MOVES.
+/// The wave surface is pinned as visible and moving. A golden hash passes on an all-black frame too, which is how this effect once shipped: its stone was scaled far below the slope that lights a pixel.
 
 #include "doctest.h"
 #include "golden_frame.h"
@@ -38,3 +38,15 @@ TEST_CASE("still water shows its ripples, and they spread") {
     for (int f = 40; f < 200; f++) { platform::setTestNowMs(1000 + f * 20u); layer.tick(); }
     CHECK_MESSAGE(brightestLight(layer) > 16, "the water keeps moving while the rain falls");
 }
+
+// Ripples a few hundred high cover most of the palette rather than its middle, and each stone moves where the colors start.
+TEST_CASE("ripples walk the whole palette, and each stone shifts it") {
+    bool seen[256] = {};
+    int distinct = 0;
+    for (int h = -500; h <= 500; h++) {
+        const uint8_t i = mm::BeatRipplesEffect::paletteIndex(static_cast<int16_t>(h), 0);
+        if (!seen[i]) { seen[i] = true; distinct++; }
+    }
+    CHECK(distinct > 100);
+    CHECK(mm::BeatRipplesEffect::paletteIndex(0, 1) != mm::BeatRipplesEffect::paletteIndex(0, 0));
+}
diff --git a/test/unit/light/unit_FseqPlayerEffect.cpp b/test/unit/light/unit_FseqPlayerEffect.cpp
new file mode 100644
index 000000000..3f82ed683
--- /dev/null
+++ b/test/unit/light/unit_FseqPlayerEffect.cpp
@@ -0,0 +1,46 @@
+/// @module FseqPlayerEffect
+/// @also ChannelDataSink
+
+/// The FSEQ player as it stands: its settings, its frames landing where a sender-mapped stream's do, and a status saying it reads no file yet.
+
+#include "doctest.h"
+#include "light/effects/FseqPlayerEffect.h"
+#include "light/layouts/GridLayout.h"
+#include "light/layouts/Layouts.h"
+
+#include <string>
+
+namespace {
+struct FseqRig {
+    mm::Layouts layouts;
+    mm::GridLayout grid;
+    mm::Layer layer;
+    mm::FseqPlayerEffect fx;
+    FseqRig() {
+        grid.width = 4;
+        grid.height = 4;
+        grid.depth = 1;
+        grid.serpentine = true;
+        layouts.addChild(&grid);
+        layer.setLayouts(&layouts);
+        layer.setChannelsPerLight(3);
+        layer.addChild(&fx);
+        fx.defineControls();
+        layer.applyState();
+    }
+};
+}  // namespace
+
+// An FSEQ frame is in wiring order, so alone on its layer it goes to the output as it is, on a serpentine grid too.
+TEST_CASE("an FSEQ player alone on its layer hands its frame to the output") {
+    FseqRig r;
+    CHECK(r.fx.deliversWiringOrder());
+    CHECK(r.layer.wiringSource() == &r.fx);
+}
+
+// Until playback lands the player says so, rather than showing black with no reason.
+TEST_CASE("an FSEQ player says it reads no file yet") {
+    FseqRig r;
+    REQUIRE(r.fx.status() != nullptr);
+    CHECK(std::string(r.fx.status()) == "reads no FSEQ file yet: playback is the next step");
+}
diff --git a/test/unit/light/unit_NetworkReceiveEffect.cpp b/test/unit/light/unit_NetworkReceiveEffect.cpp
index b7c3a12c7..a3f499f83 100644
--- a/test/unit/light/unit_NetworkReceiveEffect.cpp
+++ b/test/unit/light/unit_NetworkReceiveEffect.cpp
@@ -6,9 +6,14 @@
 #include "light/util/ArtNetPacket.h"
 #include "light/effects/NetworkReceiveEffect.h"
 #include "light/layouts/GridLayout.h"
+#include "light/modifiers/MirrorModifier.h"
+#include "light/modifiers/TransposeModifier.h"
+#include "light/effects/SolidEffect.h"
 #include "platform/platform.h"
 
 #include <cstring>
+#include <string>
+#include <vector>
 
 // The Art-Net receive side: parsing, universe placement and clamping, the staging buffer's lifecycle, and one real loopback round trip.
 
@@ -237,3 +242,267 @@ TEST_CASE("NetworkReceiveEffect receives over localhost UDP") {
     tx.close();
     r.fx.release();
 }
+
+// A scenario compares these counts with what the sender sent: one DDP frame of two packets reads as two packets and one frame, and the next second starts at zero.
+TEST_CASE("NetworkReceiveEffect counts the packets and frames of the last second") {
+    mm::platform::setTestNowMs(1000);   // the rate window starts when the stream does, on the test clock
+    Rig r;
+    r.fx.setup();
+    REQUIRE(r.fx.status() == nullptr);   // binds succeeded
+    mm::platform::UdpSocket tx;
+    REQUIRE(tx.open());
+    const uint8_t loopback[4] = {127, 0, 0, 1};
+    uint8_t payload[3] = {1, 2, 3};
+    uint8_t pkt[mm::DDP_HEADER_SIZE + 3];
+    REQUIRE(tx.sendToAddr(loopback, mm::DDP_PORT, pkt, mm::buildDdpPacket(pkt, 0, false, payload, 3)));
+    REQUIRE(tx.sendToAddr(loopback, mm::DDP_PORT, pkt, mm::buildDdpPacket(pkt, 3, true, payload, 3)));
+    // UDP on loopback is asynchronous: poll the frame loop until the pushed packet has landed, bounded at about 100 ms.
+    for (int i = 0; i < 100 && r.layer.buffer().data()[3] != 1; i++) {
+        r.layer.tick();
+        mm::platform::delayMs(1);
+    }
+    mm::platform::setTestNowMs(2000);   // one second into the stream: the rate is the count
+    r.fx.tick1s();
+    CHECK(r.fx.packetsPerS == 2);
+    CHECK(r.fx.framesPerS == 1);
+    mm::platform::setTestNowMs(3000);
+    r.fx.tick1s();
+    CHECK(r.fx.packetsPerS == 0);
+    CHECK(r.fx.framesPerS == 0);
+    mm::platform::setTestNowMs(0);
+    tx.close();
+    r.fx.release();
+}
+
+// --- mapped by: the receiver against the sender ------------------------------
+
+namespace {
+
+// Which value each physical light shows, by Drivers' rule: a wiring-order source copied as it is, else the layer's buffer mapped out. Index = driver index, value = the red byte that reached it, 0 for none.
+std::vector<uint8_t> redPerDriverLight(const mm::Layer& layer) {
+    const mm::nrOfLightsType n = layer.physicalLightCount();
+    std::vector<uint8_t> out(n, 0);
+    if (mm::EffectBase* wired = layer.wiringSource()) {
+        std::vector<uint8_t> frame(static_cast<size_t>(n) * 3, 0);
+        wired->copyWiringFrame(frame.data(), frame.size(), /*force=*/true);
+        for (mm::nrOfLightsType k = 0; k < n; k++) out[k] = frame[static_cast<size_t>(k) * 3];
+        return out;
+    }
+    const uint8_t* buf = layer.buffer().data();
+    const mm::MappingLUT& lut = layer.lut();
+    for (mm::nrOfLightsType cell = 0; cell < layer.buffer().count(); cell++) {
+        const uint8_t red = buf[static_cast<size_t>(cell) * 3];
+        if (!lut.hasLUT()) { if (cell < n) out[cell] = red; continue; }
+        lut.forEachDestination(cell, [&](mm::nrOfLightsType dst) { if (dst < n) out[dst] = red; });
+    }
+    return out;
+}
+
+// A frame whose light k carries red = k + 1, so every value names the wiring position it was sent for.
+std::vector<uint8_t> numberedFrame(size_t lights) {
+    std::vector<uint8_t> f(lights * 3, 0);
+    for (size_t k = 0; k < lights; k++) f[k * 3] = static_cast<uint8_t>(k + 1);
+    return f;
+}
+
+struct OrderRig {
+    mm::Layouts layouts;
+    mm::GridLayout grid;
+    mm::Layer layer;
+    mm::NetworkReceiveEffect fx;
+
+    OrderRig(mm::lengthType w, mm::lengthType h, mm::lengthType d, uint8_t mappedBy, bool serpentine = true,
+             mm::ModifierBase* modifier = nullptr) {
+        grid.width = w;
+        grid.height = h;
+        grid.depth = d;
+        grid.serpentine = serpentine;
+        fx.mappedBy = mappedBy;
+        layouts.addChild(&grid);
+        layer.setLayouts(&layouts);
+        layer.setChannelsPerLight(3);
+        layer.addChild(&fx);
+        if (modifier) layer.addChild(modifier);
+        fx.defineControls();
+        layer.applyState();
+    }
+    ~OrderRig() {
+        // The modifier is the test's, not the tree's to free.
+        for (uint8_t i = layer.childCount(); i-- > 0;) if (layer.child(i) != &fx) layer.removeChild(layer.child(i));
+    }
+    // A numbered frame of `lights` lights into staging, then one frame of the layer.
+    void sendNumbered(size_t lights) {
+        const std::vector<uint8_t> frame = numberedFrame(lights);
+        fx.applyBytes(0, frame.data(), static_cast<uint16_t>(frame.size()));
+        layer.tick();
+    }
+    // Each of the first `cells` logical cells shows what was sent for it.
+    void checkCellsAsSent(size_t cells) {
+        const uint8_t* buf = layer.buffer().data();
+        for (size_t cell = 0; cell < cells; cell++) CHECK(buf[cell * 3] == cell + 1);
+    }
+    // Each of the first `lights` physical lights shows what was sent for it.
+    void checkLightsAsSent(size_t lights) {
+        const std::vector<uint8_t> seen = redPerDriverLight(layer);
+        for (size_t k = 0; k < lights; k++) CHECK(seen[k] == k + 1);
+    }
+};
+
+}  // namespace
+
+// A sender sending row by row leaves the wiring to this board, so the layer applies the serpentine once and cell (x, y) shows what was sent for it.
+TEST_CASE("NetworkReceiveEffect mapped by the receiver lets the layer apply this board's wiring") {
+    OrderRig r(4, 4, 1, mm::NetworkReceiveEffect::kMappedByReceiver);
+    REQUIRE(r.layer.lut().hasLUT());   // serpentine: the mapping is not the identity
+    r.sendNumbered(16);
+    r.checkCellsAsSent(16);
+}
+
+// A mapping sender (xLights, FSEQ, Network Send) sends in wiring order, so light k shows what was sent for k; alone on its layer that is one copy.
+TEST_CASE("NetworkReceiveEffect mapped by the sender reaches each light as sent, on a serpentine grid") {
+    OrderRig r(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender);
+    CHECK(r.layer.wiringSource() == &r.fx);
+    r.sendNumbered(16);
+    r.checkLightsAsSent(16);
+}
+
+// The same on a 3D layout, two slices of a serpentine grid, the shape of TouchMyLight's cube in small.
+TEST_CASE("NetworkReceiveEffect mapped by the sender reaches each light as sent, on a 3D layout") {
+    OrderRig r(4, 4, 2, mm::NetworkReceiveEffect::kMappedBySender);
+    CHECK(r.layer.wiringSource() == &r.fx);
+    r.sendNumbered(32);
+    r.checkLightsAsSent(32);
+}
+
+// A layer with a modifier transforms its logical frame, so a sender-mapped stream there is placed in the grid first; a receiver-mapped one never passes through.
+TEST_CASE("a frame goes to the output as it is only when nothing on its layer transforms it") {
+    mm::MirrorModifier mirror;
+    OrderRig mirrored(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender, true, &mirror);
+    CHECK(mirrored.layer.wiringSource() == nullptr);
+    OrderRig receiver(4, 4, 1, mm::NetworkReceiveEffect::kMappedByReceiver);
+    CHECK(receiver.layer.wiringSource() == nullptr);
+    OrderRig plain(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender, /*serpentine=*/false);
+    CHECK(plain.layer.wiringSource() == nullptr);   // an identity layout is already one copy through the layer
+}
+
+namespace {
+// The driver index of the light at (x, y, z) on a serpentine w x h grid, each slice wired row by row.
+size_t serpentineIndex(size_t x, size_t y, size_t z, size_t w, size_t h) {
+    return z * w * h + y * w + (y % 2 ? w - 1 - x : x);
+}
+}  // namespace
+
+// Beside another effect a sender-mapped frame shares the layer's buffer, so it is placed on the grid by the layout's positions and mapped forward like any effect.
+TEST_CASE("a sender-mapped frame beside another effect still reaches each light as sent") {
+    mm::SolidEffect under;   // ticks first, so the received frame is the last word on every cell
+    OrderRig r(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender);
+    r.layer.removeChild(&r.fx);
+    r.layer.addChild(&under);
+    r.layer.addChild(&r.fx);
+    under.defineControls();
+    r.layer.applyState();
+    CHECK(r.layer.wiringSource() == nullptr);
+    r.sendNumbered(16);
+    r.checkLightsAsSent(16);
+}
+
+// A mirror on a sender-mapped stream mirrors the frame: each light shows what was sent for the light its position folds onto, rather than the mirror undoing itself.
+TEST_CASE("a mirror on a sender-mapped serpentine grid mirrors the frame") {
+    mm::MirrorModifier mirror;
+    mirror.mirrorY = false;
+    mirror.mirrorZ = false;
+    OrderRig r(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender, true, &mirror);
+    r.sendNumbered(16);
+    const std::vector<uint8_t> seen = redPerDriverLight(r.layer);
+    for (size_t y = 0; y < 4; y++)
+        for (size_t x = 0; x < 4; x++) {
+            const size_t folded = x < 2 ? x : 3 - x;
+            CHECK(seen[serpentineIndex(x, y, 0, 4, 4)] == serpentineIndex(folded, y, 0, 4, 4) + 1);
+        }
+}
+
+// A transpose on a sender-mapped 3D layout swaps the frame's axes in every slice.
+TEST_CASE("a transpose on a sender-mapped 3D layout transposes the frame") {
+    mm::TransposeModifier transpose;   // x and y swap by default
+    OrderRig r(4, 4, 2, mm::NetworkReceiveEffect::kMappedBySender, true, &transpose);
+    r.sendNumbered(32);
+    const std::vector<uint8_t> seen = redPerDriverLight(r.layer);
+    for (size_t z = 0; z < 2; z++)
+        for (size_t y = 0; y < 4; y++)
+            for (size_t x = 0; x < 4; x++)
+                CHECK(seen[serpentineIndex(x, y, z, 4, 4)] == serpentineIndex(y, x, z, 4, 4) + 1);
+}
+
+// On a layout already in wiring order, a plain grid with no modifiers, the two coincide and sender mapping is the same single copy.
+TEST_CASE("NetworkReceiveEffect mapped by the sender on an identity layout is the same copy as mapped by the receiver") {
+    OrderRig r(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender, /*serpentine=*/false);
+    REQUIRE_FALSE(r.layer.lut().hasLUT());   // the identity fast path
+    r.sendNumbered(16);
+    r.checkCellsAsSent(16);
+}
+
+// The status tells the user what sender mapping costs: one copy on an identity mapping or alone on its layer, mapped back and forward again under a modifier.
+TEST_CASE("NetworkReceiveEffect mapped by the sender says in its status whether a frame is one copy or mapped twice") {
+    const uint8_t ip[4] = {10, 0, 0, 7};
+    OrderRig plain(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender, /*serpentine=*/false);
+    plain.fx.recordSender("DDP", ip);
+    plain.layer.tick();
+    REQUIRE(plain.fx.status() != nullptr);
+    CHECK(std::string(plain.fx.status()) == "receiving DDP from 10.0.0.7, one copy");
+    plain.fx.release();
+
+    OrderRig serpentine(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender);
+    serpentine.fx.recordSender("DDP", ip);
+    serpentine.layer.tick();
+    REQUIRE(serpentine.fx.status() != nullptr);
+    CHECK(std::string(serpentine.fx.status()) == "receiving DDP from 10.0.0.7, one copy");   // straight to the output
+    serpentine.fx.release();
+
+    mm::MirrorModifier mirror;
+    OrderRig mirrored(4, 4, 1, mm::NetworkReceiveEffect::kMappedBySender, true, &mirror);
+    mirrored.fx.recordSender("DDP", ip);
+    mirrored.layer.tick();
+    REQUIRE(mirrored.fx.status() != nullptr);
+    CHECK(std::string(mirrored.fx.status()) == "receiving DDP from 10.0.0.7, mapped twice");
+    mirrored.fx.release();
+}
+
+// Receiver mapping maps once, as every layer does, so the status names only the sender.
+TEST_CASE("NetworkReceiveEffect mapped by the receiver names only the sender in its status") {
+    const uint8_t ip[4] = {10, 0, 0, 7};
+    OrderRig r(4, 4, 1, mm::NetworkReceiveEffect::kMappedByReceiver);
+    r.fx.recordSender("Art-Net", ip);
+    r.layer.tick();
+    REQUIRE(r.fx.status() != nullptr);
+    CHECK(std::string(r.fx.status()) == "receiving Art-Net from 10.0.0.7");
+    r.fx.release();
+}
+
+// A rate divides by the time that actually passed, so a late housekeeping tick reports a rate rather than the sum of several seconds.
+TEST_CASE("NetworkReceiveEffect reports its counts per second of elapsed time") {
+    mm::platform::setTestNowMs(1000);   // the rate window starts when the stream does, on the test clock
+    Rig r;
+    r.fx.setup();
+    REQUIRE(r.fx.status() == nullptr);
+    mm::platform::UdpSocket tx;
+    REQUIRE(tx.open());
+    const uint8_t loopback[4] = {127, 0, 0, 1};
+    uint8_t pkt[mm::DDP_HEADER_SIZE + 3];
+    for (uint8_t k = 0; k < 4; k++) {   // four lights, each its own packet, the last marking the frame
+        uint8_t payload[3] = {static_cast<uint8_t>(10 + k), 0, 0};
+        REQUIRE(tx.sendToAddr(loopback, mm::DDP_PORT, pkt, mm::buildDdpPacket(pkt, k * 3u, true, payload, 3)));
+    }
+    // Counted before written, so the last light landing in the layer means all four were counted; bounded at about 100 ms.
+    for (int i = 0; i < 100 && r.layer.buffer().data()[9] != 13; i++) {
+        r.layer.tick();
+        mm::platform::delayMs(1);
+    }
+    REQUIRE(r.layer.buffer().data()[9] == 13);
+    mm::platform::setTestNowMs(3000);   // two seconds into the stream
+    r.fx.tick1s();
+    CHECK(r.fx.packetsPerS == 2);       // four packets over two seconds
+    CHECK(r.fx.framesPerS == 2);
+    mm::platform::setTestNowMs(0);
+    tx.close();
+    r.fx.release();
+}
diff --git a/test/unit/light/unit_NetworkSendDriver_no_alloc_in_loop.cpp b/test/unit/light/unit_NetworkSendDriver_no_alloc_in_loop.cpp
index f60e50394..63bc7b60d 100644
--- a/test/unit/light/unit_NetworkSendDriver_no_alloc_in_loop.cpp
+++ b/test/unit/light/unit_NetworkSendDriver_no_alloc_in_loop.cpp
@@ -3,7 +3,7 @@
 
 /// Pins the no-allocation-in-loop contract for NetworkSendDriver. The framework fires prepare (topology) and onCorrectionChanged (preset toggle) off the hot path; tick() must read the pre-sized buffer and never allocate.
 ///
-/// We can't observe a malloc from inside the test without an interceptor, so the contract is pinned indirectly: capture the corrected_ buffer's data pointer and size after a build-state, then assert they're already correct (the resize fired before any tick()) and that the buffer matches the source.
+/// A malloc cannot be seen without an interceptor, so the contract is pinned indirectly: after a build-state the corrected_ buffer's pointer and shape are already right, before any tick(), and stay so.
 
 #include "doctest.h"
 #include "light/drivers/NetworkSendDriver.h"
@@ -30,7 +30,7 @@ TEST_CASE("NetworkSendDriver sizes corrected_ in prepare, not in tick") {
     CHECK(driver.correctedBuffer().count() == 64);
     CHECK(driver.correctedBuffer().channelsPerLight() == 3);
 
-    // tick() must not reallocate, same backing pointer, same shape, on every protocol path (ArtNet, E1.31, DDP all share the pre-sized buffer and a stack packet). Virtual time advances past the fps limiter between protocols so each send path actually executes.
+    // tick() keeps the backing pointer and shape on every protocol path, all sharing the pre-sized buffer and the member packet; virtual time passes the fps limiter between protocols so each path sends.
     const uint8_t* dataBefore = driver.correctedBuffer().data();
     for (uint8_t p = 0; p < mm::NetworkSendDriver::kProtocolCount; p++) {
         mm::platform::setTestNowMs(1000u + 100u * p);
diff --git a/test/unit/light/unit_NetworkSendDriver_packet.cpp b/test/unit/light/unit_NetworkSendDriver_packet.cpp
index 63052edf2..e9286219b 100644
--- a/test/unit/light/unit_NetworkSendDriver_packet.cpp
+++ b/test/unit/light/unit_NetworkSendDriver_packet.cpp
@@ -2,10 +2,12 @@
 
 #include "doctest.h"
 #include "light/drivers/NetworkSendDriver.h"
+#include "correction_presets.h"
 
 #include <cstring>
 #include <cstdio>
 #include <string>
+#include <vector>
 
 // The built packet contains the exact header layout the Art-Net spec mandates: ID, OpCode, version, sequence, physical, universe, length, data.
 TEST_CASE("ArtNet packet header format") {
@@ -355,3 +357,88 @@ TEST_CASE("NetworkSendDriver: E1.31 multicast on a network that drops it says to
     mm::NetworkPath::multicastDropped = false;
     CHECK(status.find("use unicast") != std::string::npos);
 }
+
+namespace {
+// A sender of `lights` RGB lights aimed at this host over DDP, corrected so the frame is the task's to send.
+struct PaceRig {
+    mm::Buffer source;
+    mm::NetworkSendDriver driver;
+    mm::platform::UdpSocket rx;
+    PaceRig(mm::nrOfLightsType lights, uint16_t gapUs, uint8_t fps) {
+        REQUIRE(source.allocate(lights, 3));
+        REQUIRE(rx.open());
+        REQUIRE(rx.bind(mm::DDP_PORT));   // a running desktop app holds this port: don't run it and the tests at once
+        mm::Correction correction;
+        mm::test::rebuildFromPreset(correction, 255, mm::test::PresetOrder::RGB);
+        driver.correctionForTest() = correction;
+        driver.protocol = mm::NetworkSendDriver::kProtoDdp;
+        std::snprintf(driver.hosts, sizeof(driver.hosts), "%s", "127.0.0.1");
+        driver.packetGap = gapUs;
+        driver.fps = fps;
+        driver.setSourceBuffer(&source);
+        driver.applyState();
+        mm::platform::setTestNowMs(1000);   // past the fps limiter, which a test starting at process launch is not
+    }
+    ~PaceRig() { driver.release(); rx.close(); mm::platform::setTestNowMs(0); }
+    // The arrival time of each of `count` packets, polling up to about half a second.
+    std::vector<uint32_t> arrivals(size_t count) {
+        std::vector<uint32_t> at;
+        uint8_t buf[1500];
+        uint8_t ip[4];
+        for (int i = 0; i < 5000 && at.size() < count; i++) {
+            if (rx.recvFrom(buf, sizeof(buf), ip) > 0) at.push_back(mm::platform::micros());
+            else mm::platform::delayUs(100);
+        }
+        return at;
+    }
+};
+}  // namespace
+
+// A burst is what a receiver loses, so a packet gap spaces a frame's packets, and a task sends them so the render loop never waits.
+TEST_CASE("NetworkSendDriver: a packet gap spaces a frame's packets, sent from a task") {
+    PaceRig r(1000, 3000, 20);   // 3000 bytes: three DDP packets, 3 ms apart
+    REQUIRE(r.driver.sendsInTask());
+    r.driver.tick();
+    const std::vector<uint32_t> at = r.arrivals(3);
+    REQUIRE(at.size() == 3);
+    for (size_t i = 1; i < at.size(); i++) CHECK(at[i] - at[i - 1] >= 2000);   // the gap, less scheduling slack
+}
+
+// A gap of 0 keeps the burst from the tick, with no task: the choice for a board that cannot spare one.
+TEST_CASE("NetworkSendDriver: a packet gap of 0 sends the frame as one burst from the tick") {
+    PaceRig r(1000, 0, 20);
+    CHECK_FALSE(r.driver.sendsInTask());
+    r.driver.tick();
+    CHECK(r.arrivals(3).size() == 3);
+}
+
+// A gap too long for the frame rate is shortened so a frame's packets fit in 80% of its period, leaving the rest for the next.
+TEST_CASE("NetworkSendDriver: a long packet gap is shortened so the frame fits its fps period") {
+    PaceRig r(1000, 5000, 100);   // 10 ms per frame at 100 fps; three packets plus one destination
+    CHECK(r.driver.effectiveGap(3000, 3) == 8000 / 3);
+    r.driver.fps = 10;            // 100 ms per frame: the configured gap fits as it is
+    CHECK(r.driver.effectiveGap(3000, 3) == 5000);
+}
+
+// The send task reads the corrected buffer while it paces a frame, so a correction that grows the buffer waits the task out and restarts it; the next frame goes out whole, four channels a light.
+TEST_CASE("NetworkSendDriver: a correction that grows the buffer under a paced send restarts the task safely") {
+    PaceRig r(400, 1000, 20);   // 1200 bytes of RGB: one DDP packet
+    REQUIRE(r.driver.sendsInTask());
+    r.driver.tick();
+    REQUIRE(r.arrivals(1).size() == 1);
+    mm::test::rebuildFromPreset(r.driver.correctionForTest(), 255, mm::test::PresetOrder::RGBW);
+    r.driver.onCorrectionChanged();   // 400 lights at four channels: the buffer reallocates
+    CHECK(r.driver.sendsInTask());
+    CHECK(r.driver.correctedBuffer().channelsPerLight() == 4);
+    mm::platform::setTestNowMs(2000);  // past the fps limiter again
+    r.driver.tick();
+    uint8_t buf[1500];
+    uint8_t ip[4];
+    size_t bytes = 0;
+    for (int i = 0; i < 5000 && bytes < 1600; i++) {
+        const int n = r.rx.recvFrom(buf, sizeof(buf), ip);
+        if (n > 0) bytes += static_cast<size_t>(n) - mm::DDP_HEADER_SIZE;
+        else mm::platform::delayUs(100);
+    }
+    CHECK(bytes == 1600);   // 400 lights x 4 channels, all of it
+}
diff --git a/test/unit/light/unit_PictureEffect.cpp b/test/unit/light/unit_PictureEffect.cpp
new file mode 100644
index 000000000..890788295
--- /dev/null
+++ b/test/unit/light/unit_PictureEffect.cpp
@@ -0,0 +1,137 @@
+/// @module PictureEffect
+/// @also PictureService
+
+/// The picture effect: each cell reads its part of the active picture, point or area, fitted or stretched, on a plane or a cube.
+
+#include "doctest.h"
+#include "core/services/PictureService.h"
+#include "light/effects/PictureEffect.h"
+#include "light/layouts/GridLayout.h"
+#include "light/layouts/Layouts.h"
+
+#include <cstring>
+#include <string>
+
+namespace {
+// Eight bars across the top two thirds (white, yellow, cyan, green, magenta, red, blue, black) over a black-to-white ramp, written as a source writes.
+void writeBars(mm::PictureService& pic) {
+    static constexpr uint8_t kBars[8][3] = {{255, 255, 255}, {255, 255, 0}, {0, 255, 255}, {0, 255, 0},
+                                             {255, 0, 255}, {255, 0, 0}, {0, 0, 255}, {0, 0, 0}};
+    const uint32_t w = pic.width, h = pic.height, barsBottom = (h * 2 + 2) / 3;
+    uint8_t* rgb = pic.beginWrite();
+    for (uint32_t y = 0; y < h; y++)
+        for (uint32_t x = 0; x < w; x++) {
+            uint8_t* p = rgb + (y * w + x) * 3;
+            if (y < barsBottom) std::memcpy(p, kBars[x * 8 / w], 3);
+            else p[0] = p[1] = p[2] = static_cast<uint8_t>(w > 1 ? x * 255 / (w - 1) : 255);
+        }
+    pic.endWrite();
+}
+
+// A plain grid with the effect alone on its layer, and `pw` x `ph` bars as the active picture.
+struct PictureRig {
+    mm::PictureService pic;
+    mm::Layouts layouts;
+    mm::GridLayout grid;
+    mm::Layer layer;
+    mm::PictureEffect fx;
+
+    PictureRig(uint16_t pw, uint16_t ph, mm::lengthType w, mm::lengthType h, mm::lengthType d = 1,
+               uint8_t fit = mm::PictureEffect::kStretch, uint8_t sampling = mm::PictureEffect::kPoint) {
+        pic.defineControls();
+        pic.width = pw;
+        pic.height = ph;
+        pic.prepare();
+        writeBars(pic);
+        grid.width = w;
+        grid.height = h;
+        grid.depth = d;
+        grid.serpentine = false;
+        layouts.addChild(&grid);
+        layer.setLayouts(&layouts);
+        layer.setChannelsPerLight(3);
+        fx.fit = fit;
+        fx.sampling = sampling;
+        layer.addChild(&fx);
+        fx.defineControls();
+        layer.applyState();
+    }
+    // The cell at (x, y, z) as red, green, blue.
+    const uint8_t* cell(size_t x, size_t y, size_t z = 0) const {
+        const size_t w = layer.width(), h = layer.height();
+        return layer.buffer().data() + ((z * h + y) * w + x) * 3;
+    }
+};
+}  // namespace
+
+// On a grid the picture's size, each cell is its own pixel: the bars on top, the ramp at the bottom.
+TEST_CASE("PictureEffect shows a picture the grid's size pixel for pixel") {
+    PictureRig r(8, 3, 8, 3);
+    r.layer.tick();
+    CHECK(r.cell(0, 0)[2] == 255);   // white bar
+    CHECK(r.cell(1, 0)[2] == 0);     // yellow bar: no blue
+    CHECK(r.cell(7, 0)[0] == 0);     // black bar
+    CHECK(r.cell(0, 2)[0] == 0);     // the ramp starts black
+    CHECK(r.cell(7, 2)[0] == 255);   // and ends white
+}
+
+// Two picture columns per cell: point takes one, area averages both in linear light, so white and yellow give a blue of 180, not the 127 a plain mean would.
+TEST_CASE("PictureEffect area sampling averages in linear light where point sampling picks one pixel") {
+    PictureRig point(8, 3, 4, 3, 1, mm::PictureEffect::kStretch, mm::PictureEffect::kPoint);
+    point.layer.tick();
+    CHECK(point.cell(0, 0)[2] == 255);   // the white pixel alone
+    PictureRig area(8, 3, 4, 3, 1, mm::PictureEffect::kStretch, mm::PictureEffect::kArea);
+    area.layer.tick();
+    CHECK(area.cell(0, 0)[0] == 255);
+    CHECK(area.cell(0, 0)[2] == 180);    // sqrt((255² + 0²) / 2)
+}
+
+// A wide picture on a square grid: fit keeps its aspect with black rows above and below, fill keeps it by cropping the sides, stretch fills every row.
+TEST_CASE("PictureEffect fits a wide picture with black bands, fills it cropped, and stretches it") {
+    PictureRig fit(8, 3, 4, 4, 1, mm::PictureEffect::kFit);
+    fit.layer.tick();
+    CHECK(fit.cell(0, 0)[0] == 0);       // above the picture
+    CHECK(fit.cell(0, 3)[0] == 0);       // below it
+    CHECK(fit.cell(0, 1)[0] == 255);     // the white bar, inside
+    PictureRig stretch(8, 3, 4, 4, 1, mm::PictureEffect::kStretch);
+    stretch.layer.tick();
+    CHECK(stretch.cell(0, 0)[0] == 255); // the top row is the picture's
+    CHECK(stretch.cell(0, 0)[2] == 255); // the white bar at the left edge
+    PictureRig fill(8, 3, 4, 4, 1, mm::PictureEffect::kFill);
+    fill.layer.tick();
+    // 8 x 3 at the grid's height spans 11 columns, 3 cropped each side: the top-left cell is the cyan bar, picture column 2.
+    CHECK(fill.cell(0, 0)[1] == 255);    // no band: the top row shows the picture
+    CHECK(fill.cell(0, 0)[0] == 0);      // cropped past the white and yellow bars
+}
+
+// A cube shows the picture on every slice, the layer extruding the plane through the depth.
+TEST_CASE("PictureEffect on a 3D layout shows the picture on every slice") {
+    PictureRig r(8, 3, 8, 3, 2);
+    r.layer.tick();
+    for (size_t x = 0; x < 8; x++) CHECK(r.cell(x, 0, 1)[0] == r.cell(x, 0, 0)[0]);
+}
+
+// A picture already on the layer costs nothing again: a later writer's bytes survive until the picture changes.
+TEST_CASE("PictureEffect does not sample again without a new picture") {
+    PictureRig r(8, 3, 8, 3);
+    r.layer.tick();
+    uint8_t* buf = r.layer.buffer().data();
+    buf[0] = 7;                          // stand in for a later writer
+    r.layer.tick();
+    CHECK(buf[0] == 7);
+    writeBars(r.pic);                    // the same picture written again: a new generation
+    r.layer.tick();
+    CHECK(buf[0] == 255);
+}
+
+// Without a Picture service the effect says what to add and shows black rather than its last picture.
+TEST_CASE("PictureEffect without a Picture service says so and shows black") {
+    PictureRig r(8, 3, 8, 3);
+    r.layer.tick();
+    REQUIRE(r.cell(0, 0)[0] == 255);   // the white bar, while the service publishes
+    r.pic.release();
+    r.layer.tick();
+    REQUIRE(r.fx.status() != nullptr);
+    CHECK(std::string(r.fx.status()) == "no picture: add a Picture service under Services");
+    CHECK(r.cell(0, 0)[0] == 0);
+}