Decrypting the Vado Identity wired shower controller

There was some unexpected behaviour from the mixer while all that testing was going on.
At some point I noticed that the last bit from the mixer started to rise.
I assume that this indicates the temperature that the water flowing through the mixer has reached but even after I turned the mixer off it continued to rise for a bit, possibly down to heat soak.

Mixer behaviour

...
00 00 00 00 00 00 23

00 00 00 00 00 00 24
x 5

00 00 00 00 00 00 25
x 7

00 00 00 00 00 00 26
x 17

00 00 00 00 00 00 27
x 11

00 00 00 00 00 00 28
x 18

00 00 00 00 00 00 29
x 6

00 00 00 00 00 00 2A
x 5

00 00 00 00 00 00 2B
x 6

00 00 00 00 00 00 2C
x 24

00 00 00 00 00 00 2D
x 11

00 00 00 00 00 00 2E
x 6

//turn off

00 00 00 00 00 00 B3
00 00 00 00 00 00 2E
x 3
00 00 00 00 00 00 B3
00 00 00 00 00 00 2F
x 4
00 00 00 00 00 00 B3
00 00 00 00 00 00 30

I'm going to test a bit further to see if the mixer's temp matches up to the temp from the controller...

Then, bizarrely, the controller's first bit changed as well. I'm yet to work out what the controller's first bit is for...

Controller strangeness

35 F2 02 36 09 02 00