009: Polish bacon fixes, OTA host scripts, and migration docs.

Restore disable_configstore, EuiccDisabler and thermal CDEV guards, branding and rebuild/sync helpers; document device roles, laptop migration, and Gitea. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-16 21:06:45 +02:00
1 parent 3f941e8451
commit 2d145c2878
@@ -0,0 +1,53 @@
+# Yuh: GOLDEN PASS vs LAB FAIL (same modules)
+
+**Status:** open — Swissquote PASS on LAB does not imply Yuh parity.  
+**Updated:** 2026-10-10 (live LAB/GOLDEN adb).  
+**Oracle:** GOLDEN `11071JEC203839` — read-only. **LAB:** `11231JEC207477`.
+
+## Measured 2026-10-09/10 (supersedes several older guesses)
+
+| Fact | Note |
+|------|------|
+| APK identical on both (1.47.0 / vc 541) when compared | Not a version mismatch |
+| DenyList / Island 6.4.2 / Bootloader Spoofer UI match | Not the differentiator |
+| Bootloader Spoofer **not loaded** into Yuh on either phone while DenyList is on | GOLDEN still opens Yuh → spoofer not required every cold open |
+| LAB error UI: **“installed from an untrusted source”** | `initiatingPackageName=com.android.shell` (or Aurora) vs GOLDEN `com.android.vending` |
+| Play on LAB Island: Yuh “not compatible” while GOLDEN got Play updates | Features required by APK are present; LAB is Pixel 4a + **SDK 36**; GOLDEN is sunfish + **SDK 35** |
+| TEESimulator removed; GOLDEN still works | TEE targets are not the Yuh differentiator |
+| `keystore2` `HARDWARE_TYPE_UNAVAILABLE` | Seen on **both** phones; not the differentiator |
+
+## Older checklist (still useful, partly disproved)
+
+| Fact | Source |
+|------|--------|
+| On GOLDEN, Yuh was **FAIL** for weeks until Vector bootloader spoofer (2026-10-02). | `docs/002-golden-inventory.md` |
+| Swissquote on GOLDEN did **not** need Vector; Yuh did (historically). | handoff |
+| TEESimulator default targets omit banks | still true; not sufficient for Yuh |
+| LAB A16 / Magisk 30.7 vs GOLDEN A15 / Magisk 29.0 | still true |
+
+## Practical next paths (LAB only)
+
+1. Get Play to perform a real update of Yuh (`initiatingPackageName=com.android.vending`) — see PlayIntegrityFork `spoofVendingSdk` experiments; inject-s only forces SDK 32.
+2. Do **not** expect Island clone alone to rewrite install source.
+3. Keep Magisk DenyList on for banking; Vector scope is separate.
+
+## Capture (owner)
+
+```bash
+chmod +x scripts/009-diff-yuh-golden-lab.sh
+./scripts/009-diff-yuh-golden-lab.sh | tee /tmp/yuh-golden-lab-diff.txt
+```
+
+Then one LAB fail log (Island only):
+
+```bash
+adb -s 11231JEC207477 logcat -c
+# open Yuh in Island until it fails
+adb -s 11231JEC207477 logcat -d > /tmp/yuh-lab-fail.log
+```
+
+Do not commit keybox material or Crashlytics payloads.
+
+## Agent note
+
+No live GOLDEN/LAB session from the agent environment in Oct 2026; conclusions above are from frozen docs + owner reports until `009-diff-yuh-golden-lab.sh` output exists.