Follow-up to report r-vajqk6hn (filed as lexman-ipc176kf1-main-v1-1a): the same physical unit, Lexman LEXCAM-FE01, read again on the vendor's latest firmware 1.0.54.659. Earlier report was 1.0.36.659. The Enki app shows 1.0.54 as the latest version.

Backup: full 8 MiB chip read via CH341A (flashrom, XMC XM25QH64C). Read 27 Dec 2025. The unchanged partitions match the ipctool SHA-1s of the first report, and APP unpacks cleanly with unsquashfs. CONFIG (0x2C0000-0x2FFFFF) is blanked to 0xFF, as in the first report: it holds the device cloud identity, session token, Wi-Fi MAC and factory AP credentials. All other bytes are as read.

Partitions compared with the 1.0.36 image already sent:
- UBOOT dabee759, ENV/ENVBK 09f91dfe, DTB ebb0815b, KERNEL 11e21ff0, ROOTFS d1b388b8: identical. The OTA updates only APP.
- APP (squashfs, /usr) f36d1c61 -> 9d40fe16.

Changed files in APP:
- bin/anyka_ipc, bin/fwinstall: rebuilt.
- modules/rtl8188ftv.ko: Realtek driver v5.7.4_33085 (2019-04-19) -> v5.11.5.4-0-g65b8f0aad (2022-04-13).
- local/isp_f37p_mipi_1lane_h3b.conf: new ISP tuning. On an OTA-upgraded unit it is never copied over the old one in /etc/config; sensor_driver.sh copies it only when missing.
- local/_ht_hw_settings.ini changed, and local/_ht_hw_settings_v2.ini is new. sbin/service.sh selects v2 when no isp_f37_mipi config is present. sbin/anyka_ipc.sh no longer overwrites /etc/config/_ht_hw_settings.ini.
- share/shadow is new. service.sh copies it to /etc/config/shadow at every boot, so the root hash is now fixed by APP (the vendor default, the same on every unit).
- local/LexCamBridge.ini: cloud environment list changed (dev,preprod,prod -> dev,stag,qual,prod on *.lexman-cam.cloud).
- share/VERSION: 1.0.36.659 -> 1.0.54.659.

Not included: a new boot log, U-Boot env and photos, because they are unchanged from the first report (same U-Boot, kernel and DTB).