AXP Magisk resurrection track: Speckit 009 port AXP/LOS22 to LOS23.

Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.

specs/004-microg-phonesky-integration/data-model.md

@@ -0,0 +1,56 @@
+# Data model: 004 packages
+
+## Entities
+
+### MicroGGmsCore
+
+| Field | Description |
+|-------|-------------|
+| package | `com.google.android.gms` |
+| role | microG Services Core |
+| install | privileged / system (product or system_ext per chosen mk) |
+| source | Official microG release APK on host prebuilts |
+| golden_ref | `0.3.15.250932` (AXP inventory) |
+
+### GsfProxy
+
+| Field | Description |
+|-------|-------------|
+| package | `com.google.android.gsf` |
+| role | Legacy GSF / C2DM proxy |
+| install | system app or priv-app |
+| source | microG GsfProxy release (or rebuilt for targetSdk if needed) |
+| golden_ref | `GsfProxy_GH` v0.1.0 on GOLDEN |
+
+### PhoneskyPatched
+
+| Field | Description |
+|-------|-------------|
+| package | `com.android.vending` |
+| role | Patched Play Store |
+| install | **priv-app** + privapp-permissions + default-permissions XML |
+| source | AXP archive APK (not Git) |
+| golden_ref | Phonesky_AXP-OS **50.2.12-24** |
+| first_candidate | archive **50.3.27-24** or **51.4.19-24** |
+
+### PermissionConfig
+
+| Artifact | Purpose |
+|----------|---------|
+| `privapp-permissions-com.android.vending.xml` | Privileged permissions allowlist |
+| `com.android.vending.xml` | Feature/permission declarations as needed |
+| `phonesky-permissions.xml` (default-permissions) | Default grants |
+
+### ForbiddenCompanion
+
+| package | rule |
+|---------|------|
+| FakeStore / conflicting Companion | MUST NOT ship alongside Phonesky |
+
+## Relationships
+
+- Phonesky **replaces** FakeStore in the compatibility stack.
+- microG Self-Check may require spoofing of GmsCore (and later Phonesky) —
+  spoofing policy owned by `005`.
+- All binaries → host prebuilts → product makefile → image; evidence →
+  `/srv/rom/artifacts/004-…`.