I'm hoping someone here has seen this issue or that HiWorld engineers can help — I've done extensive isolation testing and I believe I've narrowed the problem down precisely. Full details below.

MY VEHICLE

Toyota RAV4 Hybrid 2022, XA50 (5th generation)
European specification (originally sold in France)
Smart key / push-button start

MY HARDWARE (exact identifiers from device menus and physical labels)

CAN box: Hiworld TYF2.20 (GB)
Box label: HR TYF2.20 (GB), code H1H2TYF23A, date 250825, serial 3446168041_50926 28733 (25.09.26)
Label states: "Fit for: Prado/RAV4/Highlander/18Camry(JBL)/Land Cruise/etc"
Wiring harness label: HR-031 FT-18Camry
Head unit: Ainavi X6 13.1", device name GT6-CAR
Model number: GT6-EAU-QCOM 6125(665)
MCU version: RLC0_GT6E_GB_S149 7808
CAN firmware version shown in head unit: H1H2TYF23A-250825 (matches the box label — so both box and head unit already run the latest 2025-08-25 firmware)
Android 13, framework GT6-EAU-QCOM 6125(665)-T16.00.050-userdebug-20250804

THE PROBLEM
With the TYF2.20 CAN box connected, the car intermittently refuses to enter READY mode and shows:

"Not Ready to Drive" message
Check Engine light (orange)
Battery/charging system warning (red)
Steering system warning (red)
"Press Brake Pedal and Push POWER Switch to Start" — but pressing the POWER button does nothing, the hybrid system stays completely blocked

The fault is TIME-DELAYED, not immediate:

When I first connect everything, the Ainavi screen powers up and works normally, and the car CAN start and enter READY.
After some time of normal operation and turning on and off the engine, the "Not Ready to Drive" fault and all warning lights appear again and the hybrid system becomes blocked.
As soon as I disconnect the CAN box (or reinstall the factory radio), ALL errors disappear immediately and the car starts and drives perfectly.

This is fully repeatable. It is not a static wiring or short-circuit problem — it looks like the box periodically transmits frames that the Hybrid Control ECU / gateway rejects, after which the ECU blocks the READY handshake for safety.

WHAT I HAVE ALREADY TESTED

CAN box fully disconnected → car enters READY every time, drives normally, Ainavi screen still works (without CAN functions). 100% reliable.
Tried several that should worl available vehicle profile in Factory Settings:
Verified firmware: box and head unit both already run H1H2TYF23A-250825, so this is not an outdated-firmware situation.
Factory radio reinstalled → zero errors, confirming the vehicle itself is healthy.

MY HYPOTHESIS — EU-market CAN security
My car is a 2022 European-market RAV4 Hybrid. Toyota introduced CAN bus security hardening on European RAV4s around 2022 in response to the wave of CAN-injection thefts (RAV4 was a primary target in Europe). I suspect the EU gateway/Hybrid ECU is stricter about unexpected frames than the NA/TW/CN variants that the current TYF2.20 RAV4 profiles were developed against. That would explain why ALL existing profiles fail on my car while the same box works on other markets' RAV4s.

WHAT I AM ASKING

Has TYF2.20 (GB) firmware H1H2TYF23A-250825 been validated on European-spec RAV4 Hybrid XA50 (2021–2022, smart key, push start) — or only on NA/TW/CN and non-hybrid variants?
Is there a newer or separate .iap firmware with a proper EU RAV4 Hybrid profile? (My mainboard is GT6/QCOM 6125, MCU RLC0_GT6E_GB_S149.)
If no such profile exists, which HiWorld CAN box model + firmware IS correct for EU RAV4 Hybrid XA50?
I can capture and provide a CAN bus log during a fault event, plus photos of the box/harness/labels and videos of all three scenarios (factory radio OK / Ainavi without box OK / Ainavi with box → fault). Just tell me what format you need.

Has anyone else on this forum installed a HiWorld box in a European RAV4 Hybrid 2021+? Did yours work, and with which profile/firmware? Any datapoint helps.

Thank you in advance — I currently cannot use the CAN integration at all and am driving with the box disconnected.