FirmReverse
Reverse engineering hardware usually takes about $10k of lab gear.
Core trick
Argon makes device claims cited to photo shots, revises them when new shots contradict, and has a datasheet agent cross-check each chip reading.
Description
Reverse engineering hardware usually takes about $10k of lab gear. We think a phone, a logic analyzer and a model that checks its own work get you most of the way. Firm
Reverse runs in three stages on Gemini 4 Argon. Each stage is hypothesize, verify, revise.
First, a camera guide. Argon makes claims about the device and cites the shot numbers behind each one. When a new shot contradicts a claim, it revises it and records why. Then it asks for the shot that settles the weakest claim. A datasheet agent cross checks every chip reading. Second, a required probe step. The guide tells you which Saleae channel goes on which pin. You upload the capture and we decode it. That becomes the strongest evidence. Third, a verified 3D reconstruction. Argon builds the device in Three.js, renders it, compares it to the photos and patches it until it matches. It ends with a clean room functional spec. It never copies firmware.
README excerpt
# Firm Reverse Hypothesize, verify, revise. A phone and a logic analyzer turn any device into a spec you could rebuild it from. Reverse engineering hardware usually takes about $10k of lab gear. We think a phone, one logic analyzer and a model that checks its own work get you most of the way. Firm Reverse runs in three stages on Gemini 4 Argon. Each stage is the same loop. Make a claim, try to prove it wrong, write down what changed and why. It ends with a clean room functional spec. It never copies firmware. Built for the Gemini 4 Argon SF hackathon (More Dimensions track) by Iana Lin and Sissi Wang. Repo: https://github.com/ianalin123/firm-reverse ## The three stages 1. Camera guide. You take the shot it asks for. Argon looks at every photo and video so far, makes claims about the device, and cites the shot numbers behind each one. A claim is confirmed only when a shot shows it sharply. When a new shot contradicts a claim, it revises it and records the reason in `revisions`. Then it asks for exactly one next shot, the one that settles the weakest claim (flip the board, tilt to kill glare, film the LEDs while it boots). It warns before anything dangerous and lists the cheap kit you need with buy links. Once a chip is identified, a datasheet Managed Agent runs in the background, finds the manufacturer datasheet, cross checks the photo reading and lists the pins to probe by datasheet pin number. 2. Required Saleae probe step. Some things a camera cannot settle, like what