AXP Magisk resurrection track: Speckit 009 port AXP/LOS22 to LOS23.

Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.

docs/device-roles.md

@@ -0,0 +1,35 @@
+# Device roles — two Pixel 4a (sunfish)
+
+Project assumption: **two physical sunfish devices**.
+
+| Role | Use | Flash / experiment? |
+|------|-----|---------------------|
+| **GOLDEN** | Daily-driver **AXP.OS Pro 22.2 / Android 15** (main phone) | **NO** — never flash/wipe/modify; **`adb` sample only** |
+| **LAB** | Experiments / our ROM (as found: **iodé** / Lineage 7.8 A16) | **YES** — flash freely; factory rescue ready |
+
+## Measured GOLDEN (2026-09-13)
+
+| Field | Value |
+|-------|--------|
+| Serial | `11071JEC203839` |
+| Build | `22.2-2026.003-sunfish-pro` (`ro.lineage.releasetype=PRO`), Android **15**, patch `2026-03-03` |
+| Bootloader | **unlocked** (`flash.locked=0`, `verifiedbootstate=orange`) |
+| Magisk | **29.0** (`/system_ext/bin/magisk`) |
+| Work profile | Island user 10; Yuh + Swissquote in Island only |
+| Inventory | [`002-golden-inventory.md`](002-golden-inventory.md) |
+
+## Measured LAB (2026-09-13)
+
+| Field | Value |
+|-------|--------|
+| Serial | `11231JEC207477` |
+| As found | iodé / `7.8-20260902-sunfish`, Android **16**, patch `2026-08-01` |
+| Bootloader | **locked** |
+| Baseline note | [`002-lab-iodes-baseline.md`](002-lab-iodes-baseline.md) |
+| Factory rescue | [`002-lab-stock-rescue.md`](002-lab-stock-rescue.md) — SHA-256 **VERIFY_OK** |
+
+## Implications
+
+- NeoBackup / wipe of GOLDEN is **not** a project requirement.
+- `003+` flashing **only on LAB**.
+- **Do not flash GOLDEN** under any circumstance.