{ "schema_version": "1.0", "experiment_id": "AIEL-2026-0003", "title": { "en": "NORITZ RC-G057MPW-2 hybrid water heater: investigating network access to heat-pump power and energy", "ja": "ノーリツ RC-G057MPW-2 ハイブリッド給湯器：ヒートポンプ電力・電力量のネットワーク取得経路を調査" }, "status": "COMPLETED", "timestamps": { "created_at": "2026-08-22T22:44:22+09:00", "started_at": null, "observed_at": null, "completed_at": null, "published_at": "2026-08-22T13:59:13+00:00", "last_verified": "2026-08-13", "updated_at": "2026-08-22T13:59:13+00:00" }, "objective": { "summary_en": "Determine whether the instantaneous heat-pump electrical power and accumulated heat-pump electrical energy shown on the NORITZ hybrid water-heater remote controller can be collected through existing network-accessible interfaces without adding dedicated electrical measurement hardware.", "summary_ja": "ノーリツのハイブリッド給湯器でリモコンに表示されるヒートポンプ瞬時電力と積算電力量を、専用の電力計測ハードウェアを追加せず、既存のネットワーク経由インターフェースから取得できるか確認する。", "success_criteria": [ "Identify a reproducible network-accessible field or service that tracks the remote-controller heat-pump power or accumulated energy.", "If no such field is found, document the network surfaces tested and the evidence that ruled out leading candidates." ], "partial_success_criteria": [ "Narrow the remaining investigation to a specific non-network interface without claiming that untested interfaces do not exist." ], "failure_criteria": [] }, "scope": { "included": [ "Existing read-only ECHONET Lite collection over UDP/3610 using Get (0x62)", "Get Property Maps and INF property maps for exposed ECHONET Lite objects", "Node-profile instance enumeration", "Manufacturer-specific F1/F3/F4 properties exposed through ECHONET Lite", "NORITZ Wakasu app HTTPS APIs previously identified through mitmproxy", "LAN-side TCP listening services on the remote controller", "Comparison against the heat-pump values shown on the remote-controller display", "Visual observation of the remote-controller two-wire connection" ], "excluded": [ "Electrical probing or decoding of the internal two-wire bus", "Claiming that all NORITZ models, firmware versions, or system combinations expose the same interfaces", "Publication excludes authentication or authorization secrets, identifying information, private raw observation data, and sensitive internal system or network details that are not needed to understand or reproduce the experiment." ], "limitations": [ "Exact run timestamps and the complete original time-series logger files were not retained in the legacy record.", "The exact collector source code used for this experiment is not retained as a public reproducible artifact.", "The physical two-wire interface was not electrically measured or decoded in this experiment.", "The result is limited to the interfaces and system configuration actually examined." ] }, "environment": { "hardware": [ "NORITZ hybrid water-heater remote controller RC-G057MPW-2 — experiment target and display reference", "Raspberry Pi 4 Model B / 2 GB — read-only ECHONET Lite collector and diagnostic host", "KIOXIA EXCERIA KLMEA032G 32 GB microSD — Raspberry Pi storage", "GeeekPi passive aluminium case for Raspberry Pi 4 — enclosure/cooling", "Miuzei USB-C power supply 5.1 V / 3 A — Raspberry Pi power" ], "software": [ "Raspberry Pi OS — exact version not retained for this experiment", "ECHONET Lite collector — exact source/version not retained; one-minute read-only collection", "mitmproxy — version not retained", "NORITZ Wakasu app — version not retained" ], "firmware": [ "NORITZ controller / connected equipment firmware version not retained" ], "network": { "transport": "ECHONET Lite UDP/3610", "service": "Get (0x62) only", "sampling_interval": "1 minute for the existing collector and B2/F3 monitoring", "connectivity": "wired Ethernet; private addresses withheld" }, "environmental_conditions": [] }, "hypotheses": [ { "id": "H-001", "statement_en": "The vendor-specific 0x027201:F3 composite block contains a heat-pump electrical-energy value that can be tracked over time.", "statement_ja": "メーカー独自の0x027201:F3複合ブロックに、経時追跡できるヒートポンプ電力量が含まれている。", "status": "NOT_SUPPORTED", "evidence_refs": [ "O-007", "O-008" ] }, { "id": "H-002", "statement_en": "The Wakasu API field pulse2 represents the heat-pump electrical-energy value for this system.", "statement_ja": "わかすアプリAPIのpulse2が、このシステムのヒートポンプ電力量を表している。", "status": "NOT_SUPPORTED", "evidence_refs": [ "O-011", "O-012" ] }, { "id": "H-003", "statement_en": "The heat-pump power/energy used by the remote-controller display is conveyed through the internal two-wire connection rather than the network interfaces examined here.", "statement_ja": "リモコン表示に使われるヒートポンプ電力・電力量は、今回調べたネットワーク公開層ではなく内部2線接続を通ってリモコンへ伝達されている。", "status": "UNTESTED", "evidence_refs": [ "O-015", "O-016" ] } ], "procedures": [ { "id": "P-001", "description_en": "Enumerate ECHONET Lite Get and INF property maps and all node instances, then inspect each exposed object for standard or vendor-specific electrical-energy candidates.", "description_ja": "ECHONET LiteのGet/INFプロパティマップと全ノードインスタンスを列挙し、標準およびメーカー独自の電力・電力量候補を各公開オブジェクトで確認する。" }, { "id": "P-002", "description_en": "Monitor promising vendor-specific properties while the heat pump is operating and compare their changes with the remote-controller display.", "description_ja": "ヒートポンプ運転中に有望なメーカー独自プロパティを監視し、リモコン表示の変化と照合する。" }, { "id": "P-003", "description_en": "Inspect previously identified Wakasu cloud API responses for matching heat-pump power/energy fields.", "description_ja": "mitmproxyで既に確認したわかすアプリのクラウドAPI応答から、ヒートポンプ電力・電力量に対応するfieldを調べる。" }, { "id": "P-004", "description_en": "Check LAN-side TCP services and visually inspect the remaining physical connection to the remote controller.", "description_ja": "LAN側TCPサービスを確認し、残る物理経路としてリモコンへの接続を外観確認する。" } ], "actions": [ { "id": "A-001", "type": "SOFTWARE_EXECUTION", "state": "EXECUTED", "timestamp": null, "description_en": "Read Get Property Maps for the known ECHONET Lite objects.", "description_ja": "既知のECHONET LiteオブジェクトについてGet Property Mapを取得した。" }, { "id": "A-002", "type": "SOFTWARE_EXECUTION", "state": "EXECUTED", "timestamp": null, "description_en": "Read the node-profile instance list and inspected all seven exposed objects.", "description_ja": "ノードプロファイルのインスタンスリストを取得し、公開された7オブジェクトすべてを確認した。" }, { "id": "A-003", "type": "SOFTWARE_EXECUTION", "state": "EXECUTED", "timestamp": null, "description_en": "Read INF property maps for the relevant water-heater objects.", "description_ja": "関連する給湯器オブジェクトのINFプロパティマップを取得した。" }, { "id": "A-004", "type": "SOFTWARE_EXECUTION", "state": "EXECUTED", "timestamp": null, "description_en": "Read and monitored vendor-specific F1/F3/F4 properties, including one-minute monitoring of 0x02A601:B2 and 0x027201:F3.", "description_ja": "メーカー独自のF1/F3/F4を取得・監視し、0x02A601:B2と0x027201:F3を1分周期で同時監視した。" }, { "id": "A-005", "type": "SOFTWARE_OBSERVATION", "state": "EXECUTED", "timestamp": null, "description_en": "Inspected Wakasu app API responses previously captured through mitmproxy.", "description_ja": "mitmproxyで既に取得していたわかすアプリAPI応答を確認した。" }, { "id": "A-006", "type": "NETWORK_DIAGNOSTIC", "state": "EXECUTED", "timestamp": null, "description_en": "Checked common HTTP/HTTPS ports and then all 65,535 TCP ports on the remote controller within the owned private LAN.", "description_ja": "所有する宅内LAN内でリモコンの一般的なHTTP/HTTPSポートを確認し、その後65,535個のTCPポートを確認した。" }, { "id": "A-007", "type": "PHYSICAL_OBSERVATION", "state": "EXECUTED", "timestamp": null, "description_en": "Visually inspected the remote-controller connection and observed a two-wire connection to the water-heater system.", "description_ja": "リモコン接続を外観確認し、給湯器システムとの接続が2線式に見えることを確認した。" } ], "observations": [ { "id": "O-001", "timestamp": null, "description_en": "The existing Raspberry Pi collector obtained read-only ECHONET Lite data over UDP/3610 at one-minute intervals using Get (0x62) only.", "description_ja": "既存のRaspberry Pi収集器はECHONET Lite UDP/3610を使い、1分間隔でGet (0x62)のみの読み取りを行っていた。" }, { "id": "O-002", "timestamp": null, "description_en": "The 0x02A601 Get Property Map was 80 81 82 83 86 88 89 8A 8C 8D 93 9D 9E 9F B0 B2 B8 B9 C3 E1 E2 F1; 0x84 and 0x85 were absent.", "description_ja": "0x02A601のGet Property Mapは80 81 82 83 86 88 89 8A 8C 8D 93 9D 9E 9F B0 B2 B8 B9 C3 E1 E2 F1で、0x84と0x85は含まれていなかった。" }, { "id": "O-003", "timestamp": null, "description_en": "The node-profile instance list exposed seven objects: 02A601, 027201, 028101, 028201, 001601, 000701, and 001101.", "description_ja": "ノードプロファイルのインスタンスリストでは02A601、027201、028101、028201、001601、000701、001101の7オブジェクトが公開されていた。" }, { "id": "O-004", "timestamp": null, "description_en": "No separate electrical-energy measurement object was identified among the seven exposed objects.", "description_ja": "公開された7オブジェクトの中に、独立した電力量計測オブジェクトは確認できなかった。" }, { "id": "O-005", "timestamp": null, "description_en": "0x001101:E0 returned 0x00F0, interpreted in the retained record as 24.0 °C.", "description_ja": "0x001101:E0は0x00F0を返し、保存記録では24.0 ℃相当と解釈された。" }, { "id": "O-006", "timestamp": null, "description_en": "The relevant INF maps did not reveal a power or electrical-energy candidate that was hidden from the Get maps.", "description_ja": "関連するINFマップにも、Getマップにはない電力・電力量候補は確認できなかった。" }, { "id": "O-007", "timestamp": null, "description_en": "0x027201:F3 returned a 100-byte composite block containing byte sequences identical to separately exposed cumulative gas and water counters.", "description_ja": "0x027201:F3は100バイトの複合ブロックを返し、別オブジェクトのガス積算値・水積算値と一致するバイト列を含んでいた。" }, { "id": "O-008", "timestamp": null, "description_en": "During a period when B2 changed from not_heating to heating and the remote-controller heat-pump energy display increased, the full 100-byte F3 block remained unchanged for many consecutive samples.", "description_ja": "B2がnot_heatingからheatingへ変化し、リモコンのヒートポンプ電力量表示が増加した期間でも、100バイトのF3全体は多数の連続サンプルで変化しなかった。" }, { "id": "O-009", "timestamp": null, "description_en": "0x027201:F4 showed a one-byte change in earlier samples but did not continue to track heat-pump operation or accumulated energy.", "description_ja": "0x027201:F4では以前のサンプル間に1バイトの変化があったが、ヒートポンプ運転や積算電力量を継続的には追従しなかった。" }, { "id": "O-010", "timestamp": null, "description_en": "Wakasu getStructure returned values including rcType=5, eUnitFlag=0, and gthFlag=0, with no identified heat-pump electrical-energy field.", "description_ja": "わかすアプリのgetStructureではrcType=5、eUnitFlag=0、gthFlag=0などが返ったが、ヒートポンプ電力量fieldは確認できなかった。" }, { "id": "O-011", "timestamp": null, "description_en": "Wakasu getLifeLogEnergy family responses included fields such as hotWaterUsage, hotWaterTotalUsage, bathTemprature, bathFlag, and pulse2.", "description_ja": "わかすアプリのgetLifeLogEnergy系応答にはhotWaterUsage、hotWaterTotalUsage、bathTemprature、bathFlag、pulse2などが含まれていた。" }, { "id": "O-012", "timestamp": null, "description_en": "pulse2 remained \"00\" in captured daily/hourly records while the heat pump operated and the remote-controller heat-pump energy display increased.", "description_ja": "取得した日別・時間別記録では、ヒートポンプが運転しリモコンのヒートポンプ電力量表示が増えている間もpulse2は\"00\"のままだった。" }, { "id": "O-013", "timestamp": null, "description_en": "The setAppLoggingData endpoint carried application/client telemetry rather than water-heater heat-pump energy telemetry.", "description_ja": "setAppLoggingDataは給湯器のヒートポンプ電力量ではなく、アプリ・クライアント側のログ情報を送っていた。" }, { "id": "O-014", "timestamp": null, "description_en": "A full TCP scan of the remote controller found all 65,535 TCP ports closed; ECHONET Lite UDP/3610 remained the known LAN interface.", "description_ja": "リモコンの全TCPポート確認では65,535ポートすべてclosedで、既知のLANインターフェースはECHONET Lite UDP/3610だった。" }, { "id": "O-015", "timestamp": null, "description_en": "The remote-controller display showed changing instantaneous heat-pump power and increasing accumulated heat-pump electrical energy during operation.", "description_ja": "運転中のリモコン画面ではヒートポンプ瞬時電力が変化し、積算ヒートポンプ電力量が増加していた。" }, { "id": "O-016", "timestamp": null, "description_en": "The remote controller appeared to use a two-wire connection to the water-heater system.", "description_ja": "リモコンは給湯器システムとの間で2線式の接続を使っているように見えた。" } ], "claims": [ { "id": "C-001", "statement_en": "No heat-pump power or accumulated electrical-energy value was identified in the ECHONET Lite Get/INF surfaces and all seven exposed objects examined in this experiment.", "statement_ja": "本実験で確認したECHONET LiteのGet/INF公開面と7個の公開オブジェクトから、ヒートポンプ瞬時電力または積算電力量に対応する値は確認できなかった。", "evidence_state": "OBSERVED", "confidence": "HIGH", "evidence_refs": [ "O-002", "O-003", "O-004", "O-006" ], "source_refs": [ "S-001" ] }, { "id": "C-002", "statement_en": "0x027201:F3 was not a usable heat-pump electrical-energy value under the observed operating period because the remote display increased while the 100-byte F3 block remained unchanged.", "statement_ja": "観測期間ではリモコン表示が増加している間も100バイトのF3が変化しなかったため、0x027201:F3は利用可能なヒートポンプ電力量値ではなかった。", "evidence_state": "DISPROVEN", "confidence": "HIGH", "evidence_refs": [ "O-007", "O-008" ], "source_refs": [ "S-001" ] }, { "id": "C-003", "statement_en": "0x027201:F4 did not provide a usable ongoing correlation with heat-pump operation or accumulated energy in the observed samples.", "statement_ja": "観測サンプルでは0x027201:F4とヒートポンプ運転・積算電力量の継続的な相関を確認できず、取得元として利用できなかった。", "evidence_state": "OBSERVED", "confidence": "MEDIUM", "evidence_refs": [ "O-009" ], "source_refs": [ "S-001" ] }, { "id": "C-004", "statement_en": "The Wakasu pulse2 field was not the heat-pump electrical-energy value for the observed system configuration.", "statement_ja": "観測したシステム構成では、わかすアプリAPIのpulse2はヒートポンプ電力量ではなかった。", "evidence_state": "DISPROVEN", "confidence": "HIGH", "evidence_refs": [ "O-011", "O-012" ], "source_refs": [ "S-001" ] }, { "id": "C-005", "statement_en": "No TCP listening service was exposed by the remote controller during the full-port scan performed in this experiment.", "statement_ja": "本実験で行った全TCPポート確認では、リモコンにTCP待受サービスは公開されていなかった。", "evidence_state": "OBSERVED", "confidence": "HIGH", "evidence_refs": [ "O-014" ], "source_refs": [ "S-001" ] }, { "id": "C-006", "statement_en": "No network-accessible source for the target heat-pump power or accumulated energy was identified among the ECHONET Lite, Wakasu cloud API, and LAN TCP interfaces tested in this experiment.", "statement_ja": "本実験で確認したECHONET Lite、わかすアプリのクラウドAPI、LAN TCPインターフェースの範囲では、目的のヒートポンプ瞬時電力・積算電力量を取得できるネットワーク経路は確認できなかった。", "evidence_state": "OBSERVED", "confidence": "HIGH", "evidence_refs": [ "O-002", "O-004", "O-006", "O-008", "O-009", "O-010", "O-012", "O-013", "O-014", "O-015" ], "source_refs": [ "S-001" ] }, { "id": "C-007", "statement_en": "The internal two-wire connection is the leading remaining path for the heat-pump power/energy data used by the remote-controller display, but its electrical signaling and protocol were not tested.", "statement_ja": "リモコン表示に使われるヒートポンプ電力・電力量の残る有力経路は内部2線接続だと考えられるが、その電気信号やプロトコルは未調査である。", "evidence_state": "HYPOTHESIS", "confidence": "MEDIUM", "evidence_refs": [ "O-015", "O-016" ], "source_refs": [ "S-001" ] } ], "analysis": [ { "id": "AN-001", "method": "progressive interface elimination with display comparison", "summary_en": "The investigation enumerated network-visible ECHONET Lite surfaces, tested vendor-specific candidates while the heat pump was operating, inspected Wakasu API responses, and checked LAN TCP services. The remote display changed while leading network candidates did not, so the experiment established a negative result for the interfaces tested without claiming that no other internal source exists.", "summary_ja": "ネットワークから見えるECHONET Lite公開面を列挙し、ヒートポンプ運転中にメーカー独自候補を追跡し、わかすアプリAPIとLAN TCPサービスも確認した。リモコン表示が変化する一方で主要なネットワーク候補が追従しなかったため、調べたインターフェースについては否定結果を得たが、機器内部に別の取得元が存在しないとは断定していない。", "evidence_refs": [ "O-002", "O-004", "O-006", "O-008", "O-009", "O-012", "O-014", "O-015" ] } ], "results": { "summary_en": "No network-accessible source for the heat-pump instantaneous power or accumulated electrical energy shown on the remote controller was identified in the interfaces tested. The investigation stopped at the hardware boundary because the remaining high-value path was the internal two-wire connection, which was not electrically measured or decoded.", "summary_ja": "今回確認したインターフェースでは、リモコンに表示されるヒートポンプ瞬時電力・積算電力量を取得できるネットワーク経路は確認できなかった。残る有力経路が内部2線接続となり、電気的な計測・解析には追加ハードウェアが必要なため、本実験はハードウェア境界で終了した。", "success_level": "COMPLETED_NEGATIVE_RESULT", "established_claim_refs": [ "C-001", "C-002", "C-003", "C-004", "C-005", "C-006" ], "unresolved_claim_refs": [ "C-007" ], "disproven_claim_refs": [ "C-002", "C-004" ] }, "conclusion": { "en": "Within the ECHONET Lite, Wakasu cloud API, and LAN TCP interfaces examined, the experiment did not find a retrievable heat-pump power or accumulated electrical-energy value matching the remote-controller display. The internal two-wire connection remains a hypothesis for future physical-layer investigation, not a verified data source.", "ja": "ECHONET Lite、わかすアプリのクラウドAPI、LAN TCPの確認範囲では、リモコン表示に対応するヒートポンプ瞬時電力・積算電力量を取得できる値は見つからなかった。内部2線接続は今後の物理層調査候補であり、確認済みのデータ取得元ではない。", "evidence_basis_refs": [ "C-001", "C-002", "C-004", "C-005", "C-006", "C-007" ], "remaining_uncertainties": [ "Electrical levels, signaling, frame format, and data mapping on the internal two-wire connection.", "Whether a different NORITZ model, firmware, system combination, or undocumented interface exposes the target value.", "Exact original timestamps and complete time-series raw data." ], "recommended_next_actions": [ "If a separate follow-up Experiment is undertaken, begin with non-invasive voltage and waveform observation of the two-wire interface using appropriately rated high-impedance measurement equipment.", "Keep any future physical-bus experiment separate from this completed network-interface investigation." ] }, "data_artifacts": [ { "id": "D-001", "type": "source_record", "path": "experiments/2026-08-13-noritz-hybrid-heat-pump-power.md", "description_en": "Retained detailed legacy experiment note used for formal retrospective record.", "description_ja": "正式化の根拠とした詳細な旧実験記録。" } ], "sources": [ { "id": "S-001", "title": "2026-08-13 NORITZ hybrid heat-pump power investigation legacy record", "publisher": "AI Experiment Log repository", "type": "retained experiment record", "path": "experiments/2026-08-13-noritz-hybrid-heat-pump-power.md" }, { "id": "S-002", "title": "Publication-preparation equipment confirmation", "publisher": "User-provided purchase-history screenshots and product links", "type": "user-provided equipment evidence", "date": "2026-08-22", "note": "Only public-safe product identities are retained; private order/account details are excluded." } ], "provenance": { "generated_by": "AI-assisted experiment retrospective record, evidence classification, semantic review, and documentation", "ai_systems": [ "ChatGPT GPT-5.6 Sol" ], "human_roles": [ "Experiment operator", "Owner of the investigated equipment", "Publication authorizer", "Provider of publication-preparation equipment identification and affiliate links" ], "automation_systems": [ "GitHub Actions", "Cloudflare Pages" ], "human_editing": "Human-governed; formal record reconstructed from retained experiment evidence and current publication-preparation confirmations." }, "publication": { "public": true, "languages": { "en": { "published": true, "url": "https://ai-experiment-log.pages.dev/en/experiments/noritz-hybrid-heat-pump-power/", "canonical": true }, "ja": { "published": true, "url": "https://ai-experiment-log.pages.dev/ja/experiments/noritz-hybrid-heat-pump-power/", "canonical": false } }, "machine_readable_url": "https://ai-experiment-log.pages.dev/data/experiments/AIEL-2026-0003/experiment.json" }, "relationships": [ { "type": "supersedes_publication_identity", "target": "NORITZ-HYBRID-HP-POWER-001", "note": "The existing public article is formalized under AIEL-2026-0003 while the legacy source record is retained for provenance." }, { "type": "RELATED_TO", "target": "AIEL-2026-0009", "note": "AIEL-2026-0009 extends the retained one-minute Raspberry Pi collector into a raw-to-daily data-integrity reconstruction experiment. It does not reopen or revise AIEL-2026-0003's completed negative result about network-accessible heat-pump power/energy fields." } ], "revisions": [ { "revision": 1, "timestamp": "2026-08-22T22:44:22+09:00", "type": "FORMAL_BACKFILL", "summary": "Created canonical AIEL-2026-0003 from the retained 2026-08-13 NORITZ hybrid heat-pump power investigation; no new experiment execution is implied." }, { "revision": 2, "timestamp": "2026-08-22T13:59:13+00:00", "type": "METADATA_UPDATE", "summary": "Gitleaks 8.24.3 full-history scan completed without detected leaks in GitHub Actions workflow run 32577339030 immediately before publication finalization; secret_scan_performed set to true." }, { "revision": 3, "timestamp": "2026-08-22T13:59:13+00:00", "type": "PUBLICATION_UPDATE", "summary": "After human-approved merge to main, GitHub Actions workflow run 32577339030 directly observed the English page, Japanese page, and machine-readable JSON on Cloudflare Pages production. The JSON returned HTTP 200, matched experiment_id=AIEL-2026-0003, and matched the repository public copy byte-for-byte. Publication metadata was finalized from that observed state." }, { "revision": 4, "timestamp": "2026-09-06", "type": "METADATA_UPDATE", "summary": "Added a reciprocal RELATED_TO relationship to AIEL-2026-0009. The follow-up reuses the retained collector architecture for raw-to-daily reconstruction and does not alter this experiment's network-interface conclusion." } ], "security": { "contains_sensitive_data": false, "redactions_applied": true, "secret_scan_performed": true, "publication_reviewed": true } }