009: publish AXPR23 final source and public documentation

tests/test_009_next_bacon_guards.py

@@ -78,6 +78,17 @@ class NextBaconGuardsTest(unittest.TestCase):
         self.assertIn("SUNFISH_A16_008_CALL_REC_FLAG_SECURE", ship)
         self.assertIn("extendrom_call_recording", ship)
 
+    def test_defconfig_enables_android_cgroup_controllers_and_hides_dirty_suffix(self) -> None:
+        apply = (
+            ROOT
+            / "vendor/sunfish-a16/patches/009-kernel-hardening/apply_uss5_1_defconfig.sh"
+        ).read_text()
+        self.assertIn("CONFIG_MEMCG=y", apply)
+        self.assertIn("CONFIG_CGROUP_PIDS=y", apply)
+        self.assertIn("# CONFIG_LOCALVERSION_AUTO is not set", apply)
+        self.assertIn("CONFIG_SECURITY_YAMA", apply)
+        self.assertIn("CONFIG_USERFAULTFD", apply)
+
     def test_artifact_metadata_names_49980_and_vendor_spl(self) -> None:
         ship = SHIP.read_text()
         self.assertIn(