AXP Magisk resurrection track: Speckit 009 port AXP/LOS22 to LOS23.

Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.

docs/003-flash-lab.md

@@ -0,0 +1,90 @@
+# 003 — Flash LAB (vanilla LOS only)
+
+**LAB serial:** `11231JEC207477`  
+**Never flash:** GOLDEN `11071JEC203839`
+
+## Artifacts (this build)
+
+Host: `/srv/rom/artifacts/003-vanilla/20260914-lineage-23.2-sunfish/`  
+Laptop: `.local-artifacts/003-vanilla/20260914-lineage-23.2-sunfish/` (rsynced)
+
+| File | Role | SHA-256 (prefix) |
+|------|------|------------------|
+| `lineage-23.2-20260914-UNOFFICIAL-sunfish.zip` | sideload ROM | `f89edfe1…5852` |
+| `boot.img` | Lineage recovery (flash to `boot`) | `aaf52d20…aad1` |
+| `dtbo.img` | required before recovery | `a400e6ae…6327` |
+| `vbmeta.img` | copied for reference (wiki path uses dtbo+boot) | `b3223b5d…0735` |
+
+Full digests: `SHA256SUMS` in the same directory. Metadata: `build-metadata.txt`.
+
+## Owner decisions (2026-09-13)
+
+- **Unlock / wipe LAB:** allowed when needed for first custom flash.
+- **Stock factory on LAB:** not desired as a planned OS (rescue zip stays on
+  disk for emergencies only).
+- **Banking hard-gate focus:** **Yuh** (+ Swissquote); Revolut is **not** a
+  hard-gate.
+- Vanilla `003` only — no microG / KSU / GApps add-ons on first flash.
+
+## Wiki note (firmware)
+
+Upstream LOS install wiki asks for **stock Android 13** firmware before first
+install. LAB currently runs custom A16 (iodé). For this project we flash
+vanilla LOS over LAB as approved; if radio/modem misbehaves after smoke, use
+`docs/002-lab-stock-rescue.md` then re-flash — **never GOLDEN**.
+
+## Before every fastboot/adb command
+
+```bash
+adb devices -l
+fastboot devices
+# serial must be 11231JEC207477 only
+```
+
+```bash
+ART="$HOME/Workspaces/sunfish-a16-rom/.local-artifacts/003-vanilla/20260914-lineage-23.2-sunfish"
+cd "$ART"
+sha256sum -c SHA256SUMS
+```
+
+## Unlock (first custom flash)
+
+Unlocking **wipes** LAB — owner-approved.
+
+```bash
+adb -s 11231JEC207477 reboot bootloader
+fastboot -s 11231JEC207477 devices
+fastboot -s 11231JEC207477 flashing unlock   # confirm on device
+```
+
+## Flash (LOS wiki sunfish path)
+
+```bash
+cd "$ART"
+fastboot -s 11231JEC207477 flash dtbo dtbo.img
+fastboot -s 11231JEC207477 reboot bootloader
+fastboot -s 11231JEC207477 flash boot boot.img
+# device menu → Recovery
+# Recovery → Factory reset → Format data
+# Apply update → Apply from ADB
+adb -s 11231JEC207477 sideload lineage-23.2-20260914-UNOFFICIAL-sunfish.zip
+# Reboot system now (no GApps / no add-ons for vanilla 003)
+```
+
+Unofficial zip: recovery may warn about signature — expected; proceed only if
+hashes match `SHA256SUMS`.
+
+## After first boot
+
+```bash
+adb -s 11231JEC207477 shell getprop ro.lineage.version
+adb -s 11231JEC207477 shell getprop ro.build.display.id
+# expect lineage 23.2 / sunfish UNOFFICIAL — not AXP, not iodé
+```
+
+Then complete `docs/003-smoke-lab.md`.
+
+## Failure
+
+Use [`002-lab-stock-rescue.md`](002-lab-stock-rescue.md) only as **emergency**
+brick recovery. Do not touch GOLDEN.