AXP Magisk resurrection track: Speckit 009 port AXP/LOS22 to LOS23.

Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.
2026-09-16 21:56:22 +00:00
commit 12d2179c20
@@ -0,0 +1,59 @@
+# Tasks: AXP.OS GOLDEN reference capture
+
+**Input**: Design docs from `/specs/002-axp-reference-capture/`
+
+**Prerequisites**: `001` complete on `rom-dev01`
+
+## Phase 1: Setup (no phone)
+
+- [x] T001 Confirm active feature `specs/002-axp-reference-capture` in `.specify/feature.json`
+- [x] T002 [P] Create `docs/002-lab-stock-rescue.md` stub (LAB only; Google factory source)
+- [x] T003 [P] Create `docs/002-golden-inventory.md` stub (essential checklist + banking flow placeholders)
+- [x] T004 [P] Create host dirs `/srv/rom/references/axp/{archive,golden,lab,logs}` as `android-build`
+
+## Phase 2: Offline AXP archive seed (no phone)
+
+- [~] T005 Rsync `~/Archives/AXP.OS/` → host archive *(~18G/38G in progress; not a `003` flash gate)*
+- [x] T006 Record archive size + SNAPSHOT_DATE in `/srv/rom/references/axp/logs/archive-rsync.txt` *(partial; refresh when rsync ends)*
+
+## Phase 3: LAB stock rescue (P1 — may download without phone)
+
+- [x] T007 Resolve current official sunfish factory image URL + SHA-256 from Google primary page (or document pruning if only one remains) *(Google CDN 404; hash + IA fallback documented)*
+- [x] T008 Download factory zip to `/srv/rom/references/axp/lab/`; verify SHA-256 *(VERIFY_OK 2026-09-13)*
+- [x] T009 Complete `docs/002-lab-stock-rescue.md` with flash-all steps, wipe warning, LAB-only scope
+- [x] T010 Cross-check FR-002/SC-002 in a short verification note in that doc
+
+## Phase 4: Device roles measured (P1 — phones required)
+
+- [x] T011 Connect GOLDEN (AXP A15 main); record serial + `getprop` into golden inventory (raw log on host) — **adb sample only, no modifications** *(serial `11071JEC203839`)*
+- [x] T012 Connect LAB; record serial/label + build identity *(serial `11231JEC207477`, iodé/LOS 7.8 A16 — see `docs/002-lab-iodes-baseline.md`)*
+- [x] T013 Measure bootloader/fastboot unlock state on **both**; update `docs/device-roles.md` + inventory (SC-006) *(GOLDEN unlocked/orange; LAB locked/green — via getprop)*
+- [x] T014 Explicit “do not flash GOLDEN” callout in `docs/device-roles.md` and inventory (SC-001)
+
+## Phase 5: Essential GOLDEN inventory (P1 — GOLDEN adb)
+
+- [x] T015 Capture microG essential fields (version, cert, Self-Check notes) *(version + sig short; Self-Check UI = re-query)*
+- [x] T016 Capture Phonesky / `com.android.vending` essentials *(Phonesky_AXP-OS 50.2.12)*
+- [x] T017 Capture Insular / work profile essentials (`dumpsys device_policy` excerpt redacted) *(Island 6.4.2, user 10)*
+- [x] T018 Capture Magisk version, modules, DenyList **including processes** *(Magia UI DenyList packages from screenshots; Magisk 29.0; process expand partial; modules dir not readable without root)*
+- [x] T019 Capture GSF Proxy / related packages versions/paths/signatures
+- [x] T020 Record observational Play Integrity + Yuh/Swissquote pass/fail on GOLDEN (SC-004) *(Swissquote PASS; Yuh FAIL HA / certificate invalid; Finsky PI token path still completes; keystore2 TEE errors in log)*
+- [x] T021 Document call-recording + FLAG_SECURE bypass source on GOLDEN *(deferred — re-query; not blocking `003`)*
+- [x] T022 Mark any missing rows `re-query GOLDEN` — do not invent
+
+## Phase 6: Banking flow (P1)
+
+- [x] T023 Write redacted GOLDEN banking install order / observed layout in `docs/002-golden-inventory.md`
+- [x] T024 Confirm no passwords/OTPs/PII in Git docs (SC-005)
+
+## Phase 7: Polish / gate
+
+- [x] T025 Cross-link known facts into `docs/axp-pro-parity.md` without inventing features (FR-007)
+- [x] T026 FR/SC checklist pass for gate: LAB rescue ready; GOLDEN do-not-flash; inventory+flow sufficient for `006` *(see `docs/002-gate-handoff.md`)*
+- [x] T027 Handoff note: **`002` complete → `003` on LAB only**
+- [x] T028 Verify Git trees contain no proprietary APK dumps or credential files
+
+## Parallel opportunities
+
+- T002–T004 parallel; T005 archive rsync while drafting T007–T009
+- T011–T014 require physical devices; block inventory until done