USB flash drive
Enable an AI agent to recognise a USB flash drive, assess its storage and connection state, and decide whether and how it may safely be connected, read, written, removed or retired.
Research draft, second pass
A second pass drafted this model: the structure a model of this thing needs, and what is known about it in the world. The line under this one says how the second half was obtained - researched against sources, or recalled without web access, in which case nothing here was read anywhere and every claim is a lead to verify. Unreviewed either way.
recalled by Codex without web access - no source was read
Researched by: Codex
Purpose and description
Enable an AI agent to recognise a USB flash drive, assess its storage and connection state, and decide whether and how it may safely be connected, read, written, removed or retired.
A USB flash drive is a portable solid-state data-storage device that combines non-volatile flash memory and a controller with a USB interface and normally draws operating power from the connected host.
It can be Inspect the connector and establish whether a proposed host connection is compatible and permitted.; Enumerate storage and other exposed USB functions in an appropriate inspection environment.; Read, copy and verify files within the agent's access authority.; Write, delete, format or test capacity when authorised and after accounting for existing data.; Flush pending writes and request safe removal before disconnection.; Quarantine a suspect unit or select an evidenced sanitisation and retirement procedure..
Distinguishing features
Combines flash storage and a USB interface in one portable device; a card reader depends on a separately removable memory card.
Provides persistent, writable file storage as its primary intended function; a USB security token primarily performs authentication or cryptographic operations.
Retains stored data without continuous host power; it is not merely a volatile memory expansion device.
Conventionally connects through a connector integrated into its body; devices marketed as portable SSDs can overlap technically, so ambiguous cases require an explicit classification basis.
Scope
+ Integrated USB connector, enclosure, controller and nonvolatile flash storage
+ Host compatibility, USB enumeration and exposed device functions
+ Advertised, reported and verified usable storage capacity
+ Read/write behaviour, data persistence and observable failure symptoms
+ Access protection, connection trust, safe removal and retirement
- Stored documents, software and other content as independently modelled information objects
- Host computers, operating systems and their general USB subsystems
- Removable memory cards and separate card readers
- Portable external SSDs and hard drives as neighbouring storage-device kinds
- USB authentication tokens, wireless adapters and other primarily non-storage peripherals
- Product lines, sales listings and individual asset records as separate catalogue entities
Characteristics
- Connector arrangement
- USB Type-A; USB Type-C; multiple connectors; other; unknown Determines physical host compatibility and whether an adapter is needed.
- USB capability and negotiated connection
- Documented supported USB revision and signalling capability; observed negotiated mode; unknown Separates device capability from the connection actually established and avoids inferring speed from connector shape.
- Storage capacity
- Bytes, distinguishing advertised capacity, controller-reported capacity and capacity verified by write/read testing Supports space planning and detection of falsely reported or unusable capacity.
- Volume organisation
- Observed partition layout, file systems, free bytes and mount status; unformatted; unreadable; unknown Determines whether a host can access the drive and whether an intended transfer will fit.
- Measured transfer performance
- Read and write bytes/s with workload, duration, host, connection mode and test conditions Distinguishes suitable transfer performance from an interface's theoretical capability.
- Host-visible USB functions
- Storage only; storage plus additional interfaces; non-storage only; not enumerating; unknown Helps detect unexpected device behaviour before permitting use.
- Access and write state
- Readable; writable; read-only; locked; inaccessible; unknown, with observed cause where available Determines which operations are possible and distinguishes intended protection from faults.
- Physical connection condition
- Intact; loose connector; bent contacts; cracked enclosure; contamination; intermittent connection; unassessed Supports a decision to connect, inspect or stop using the device.
- Data integrity evidence
- Verified for a stated test; mismatch observed; read/write errors observed; untested Prevents successful mounting from being mistaken for reliable storage.
- Provenance and permitted host relationship
- Known supplier or custodian, evidence of acquisition, and hosts or environments authorised for use Supports connection decisions without treating USB identifiers as proof of trust.
Also called
Where this came from
wikidata · CC0 1.0
Drafted structure
Bundle to layer to finding to question, as the second pass will find it: 6 bundles · 11 layers · 18 findings · 35 questions.
Identity and USB connection Establishes whether the object is a USB flash drive and how it physically and electrically connects.
A compatible-looking USB plug neither establishes storage function nor guarantees an appropriate connection.
Storage kind boundary
Separates this kind from card readers, security tokens and overlapping portable storage products.
Integrated flash storage
Record evidence that flash storage and the USB interface form one device whose primary intended function is portable data storage.
- Does the device contain its own flash storage, or does storage depend on an inserted card or another device? definition
- If it overlaps with a portable SSD or security token, what documented function and construction justify classifying it as a USB flash drive? boundary
Connector and host link
Records connector fit, host support and the connection actually established.
Usable USB link
Distinguish connector geometry, documented USB capability and observed connection mode, including adapters in the path.
- Which integrated connectors are present, and does the proposed host require an adapter? measurement
- What USB mode is negotiated through this host, port and adapter combination? measurement
- Do connector damage, unstable power or repeated disconnections require stopping the connection attempt? action
Capacity and volume access Describes how much storage exists and whether its volumes can support an intended transfer.
Reported capacity, usable capacity and available file space are distinct constraints on USB flash-drive use.
Capacity evidence
Separates label claims and controller reports from tested storage.
Verified addressable storage
Record capacity values with their evidence and the extent of any write/read verification.
- How many bytes are advertised, reported by the controller and verified by a stated test? measurement
- Can the required capacity test proceed without overwriting data that must be preserved? action
Partitions and file systems
Captures the logical storage configuration that a host must interpret.
Transfer fit
Assess volume readability, writability, free space and file-size constraints against the intended transfer.
- Which partitions and file systems are present, and which can the intended host mount for the required access? measurement
- Will the intended files fit within both available space and the destination file system's limits? action
- If reformatting is necessary, which existing data and compatibility requirements must be preserved first? action
Transfer and removal Models active storage operations, performance and completion before unplugging.
USB flash drives are routinely moved between hosts, making transfer verification and pending writes central operational concerns.
Read/write behaviour
Assesses actual transfer behaviour under a recorded workload.
Workload performance
Record measured read/write rates and interruptions without treating advertised USB speed as storage throughput.
- What sustained read and write rates occur for the intended file sizes and transfer duration? measurement
- What host, port, negotiated mode, free space and workload conditions accompanied the measurement? provenance
Write completion and disconnection
Distinguishes application progress from completed storage operations and host release.
Safe removal state
Record verification results, outstanding activity and the host's response to a flush or eject request.
- Has the intended copy been verified to the level required for this use? measurement
- Have pending writes completed and has the host released the drive, or is a process still holding it open? action
- After an unexpected removal, what integrity checks are needed before further writes? action
Connection trust and access Records provenance, exposed USB functions and protection mechanisms relevant to permitted use.
A storage-shaped USB device can expose additional functions, while data protection depends on mechanisms that must be identified separately.
Provenance and enumeration
Connects acquisition evidence with observed USB behaviour.
Expected device functions
Record expected and observed interfaces without treating a familiar label or USB identifier as authentication.
- What acquisition or custody evidence supports connecting this drive to the proposed host? provenance
- Does enumeration expose only expected storage functions, or also keyboard, network or other interfaces? measurement
- Do unknown provenance or unexpected interfaces require quarantine or a designated inspection environment? action
Protection and unlocking
Separates encryption, authentication, hardware write protection and host access restrictions.
Effective access protection
Record the actual protection mechanism, current lock state and authorised means of access.
- Is protection implemented by the drive, encrypted volume software, a physical switch or host policy? definition
- What documented unlocking, recovery and failed-attempt behaviour applies to this device? provenance
- Is the requested read, write or unlock operation authorised in its current state? action
Reliability and retirement Tracks evidence of storage failure and the conditions for recovery, reuse or disposal.
A drive may still enumerate while losing data, and flash-management behaviour affects what sanitisation methods can establish.
Failure and preservation
Records symptoms and prioritises preservation when data or device condition is deteriorating.
Integrity and failure signals
Capture mismatches, read/write errors, unexpected read-only operation and intermittent detection without assigning an unsupported cause.
- Which failures are reproducible, and under what host, connector and workload conditions? measurement
- What diagnostics does this drive actually expose, and what aspects of flash condition remain unknown? boundary
- Should further writes stop while readable data is copied or specialist recovery is considered? action
Sanitisation and disposition
Determines an evidenced route to reuse, return, recycling or destruction.
Residual data decision
Distinguish ordinary deletion and formatting from a sanitisation outcome supported for the particular device and data requirement.
- What manufacturer documentation or applicable sanitisation guidance supports the proposed method for this drive? provenance
- What can the method establish about inaccessible or remapped flash areas, and what remains unverified? boundary
- Given data sensitivity, drive condition and verification limits, is reuse acceptable or is physical destruction required? action
Evidence and external alignment What the world already says about this thing, gathered so the model can be checked against it.
A model that cannot be lined up against existing standards, identifiers and practice cannot be adopted by anyone who already uses them.
Reported evidence
Findings from the breadth pass, kept separate from the structural claims.
Check these first
Recalled without web access and unsourced; every item is a lead to verify.
- This describes the device kind, not a particular product model or physical unit; all information is recalled rather than source-verified.
- Capacity, dimensions and throughput ranges are illustrative and should be checked against representative products; USB interface speed is not actual storage throughput.
- Connector shape does not establish USB transfer speed, encryption capability or certification; host support, filesystem compatibility and bootability require separate checks.
- Which of these check these first hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Kinds and varieties
Recalled without web access and unsourced; every item is a lead to verify.
- USB Type-A drives
- USB Type-C drives
- Dual-connector drives
- Hardware-encrypted drives
- Ruggedized drives
- Write-protected drives
- Which of these kinds and varieties hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Identifiers and schemes
Recalled without web access and unsourced; every item is a lead to verify.
- USB Vendor ID and Product ID - VID:PID, each a 16-bit value commonly written as four hexadecimal digits - The USB Implementers Forum assigns vendor IDs; vendors assign product IDs. These identify a vendor and product designation, not an individual unit.
- USB serial-number string descriptor - Manufacturer-defined string - May identify an individual device, but can be absent or duplicated and is not proof of authenticity.
- Which of these identifiers and schemes hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Standards and regulation
Recalled without web access and unsourced; every item is a lead to verify.
- USB 2.0 Specification - USB Implementers Forum; relevant to drives implementing USB 2.0.
- USB 3.2 Specification - USB Implementers Forum; relevant to drives implementing its SuperSpeed transfer modes.
- USB Type-C Cable and Connector Specification - USB Implementers Forum; relevant to Type-C drives.
- USB Mass Storage Class, Bulk-Only Transport specification - USB Implementers Forum; widely used for host access to flash-drive storage.
- Which of these standards and regulation hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Real-world use
Recalled without web access and unsourced; every item is a lead to verify.
- Transferring files between compatible computers and other host devices.
- Distributing documents, media, software and firmware updates.
- Providing bootable operating-system installation or recovery media.
- Keeping offline copies of files.
- Storing recordings or playback media for compatible appliances.
- Which of these real-world use hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Typical measurements
Recalled without web access and unsourced; every item is a lead to verify.
- Advertised storage capacity - Common examples span 8-512; larger and smaller drives exist - GB (decimal)
- Sequential read throughput - Approximately 10-400 across ordinary USB 2.0 and USB 3.x products; strongly device-dependent - MB/s
- Sequential write throughput - Approximately 3-200 across ordinary products; sustained speed can fall after a write cache fills - MB/s
- Physical length - Approximately 15-80, including compact and conventional designs - mm
- Which of these typical measurements hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Failure modes and hazards
Recalled without web access and unsourced; every item is a lead to verify.
- Flash-memory wear and retention loss can cause unreadable or corrupted data; endurance depends on memory technology and controller behavior.
- Disconnection or power loss during writes can corrupt files or filesystem metadata.
- Connector damage, electrostatic discharge, moisture or controller failure can make the device inaccessible.
- Counterfeit capacity reporting can cause silent data loss when writes exceed the actual installed memory.
- Loss or theft can expose unencrypted information; malicious devices can carry malware or impersonate other USB device classes.
- Which of these failure modes and hazards hold for the sense of USB flash drive this model covers, and on what evidence? provenance
Neighbouring kinds and how to tell them apart
Recalled without web access and unsourced; every item is a lead to verify.
- External solid-state drive - Usually a distinct drive assembly connected by cable and designed for higher sustained workloads; compact integrated products blur the commercial boundary.
- Memory card - Uses a card interface and form factor, such as SD, rather than integrating a USB host connector; a USB card reader is a separate interface device.
- USB security key - Primarily performs authentication or cryptographic operations rather than providing general-purpose file storage.
- USB adapter or dongle - Provides another function, such as networking or interface conversion; USB attachment alone does not make a device a flash drive.
- Which of these neighbouring kinds and how to tell them apart hold for the sense of USB flash drive this model covers, and on what evidence? provenance
What the second pass must settle
- Does an existing Vercy world model already own USB flash drives or the relevant portable flash-storage concept, requiring a link instead of a new publication?
- What registry boundary should distinguish compact USB flash drives from portable SSDs when construction, connector arrangement and marketing categories overlap?
- Which USB-IF specifications and compliance evidence apply to the connector, protocol and power behaviour of each supported subtype, and which marks can be verified?
- What sourced capacity, dimension, performance, endurance and retention ranges are representative enough to use without turning product-specific claims into kind-wide expectations?
- Which diagnostics and sanitisation procedures are demonstrably supported across relevant drive controllers, and where must health or residual-data status remain unknown?