sunfish-admin/AXP-Resurection
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

009: Polish bacon fixes, OTA host scripts, and migration docs.

Browse Source 
Restore disable_configstore, EuiccDisabler and thermal CDEV guards, branding
and rebuild/sync helpers; document device roles, laptop migration, and Gitea.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
sunfish-adminandCursor committed 2026-10-16 21:06:45 +02:00
1 parent 3f941e8451
commit 2d145c2878
3193 files changed
+21264 -371
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

specs/README.md
+37 -33
View File
@@ -1,6 +1,9 @@
# Feature Specifications
Numbered feature specs for `sunfish-a16-rom`.
Numbered feature specs for **AXP_Resurection** (Magisk AXP → LOS 23.2 track).
Sibling workspace `sunfish-a16-rom` keeps the KernelSU / split-roadmap track.
Do not merge those ship intents here unless the owner asks.
## Structure
@@ -13,12 +16,6 @@ specs/
└── …
```
## Numbering
- Three-digit, sequential: `001-…`, `002-…`
- Short name: lowercase, hyphen-separated
- Create a feature directory only when ready to specify/implement it
## Spec-as-source
1. Edit requirements only in `spec.md`.
@@ -26,37 +23,44 @@ specs/
3. Implementation follows the active feature; do not invent decisions missing
from the constitution or the active `spec.md`.
## Active / next features
## Active ship
| Dir | Intent |
|-----|--------|
| `001-development-environment` | ROM build host env on existing `rom-dev01` (not VM creation) |
| `002-axp-reference-capture` | Document GOLDEN AXP oracle + LAB stock rescue; no NeoBackup/wipe of GOLDEN |
| `003-lineage-23-vanilla-build` | First vanilla LOS 23.2 on **LAB only** → flash → boot → P1 (**done** 2026-09-14) |
| `004-microg-phonesky-integration` | microG + GSF Proxy + patched Phonesky on LAB (packaging done; Self-Check/auth → `005`) |
| `005-restricted-signature-spoofing` | Restricted spoofing + bacon zip — **done enough for LAB**; Location UI follow-up open |
| `007-kernelsu-sunfish` | ReSukiSU + SusFS bring-up — **incomplete** (banks FAIL; see `docs/007-lab-results-20260916.md`) |
| `008-call-rec-flag-secure` | Native DO toggles: call-rec region unlock + global FLAG_SECURE override — **next** |
| Dir | Intent | Status |
|-----|--------|--------|
| **`009-axp-los23-port`** | Magisk like GOLDEN on LOS 23.2 / A16 sunfish; AXP-class userspace | **Active ship** — LAB closure 2026-10-09; see `docs/009-handoff-20261008.md` |
Handoff snapshot: `docs/session-20260916-handoff.md`.
Design: `docs/008-009-design.md`.
Resume: [`docs/009-handoff-20261008.md`](../docs/009-handoff-20261008.md)
Closure: [`docs/009-closure-parity-20261009.md`](../docs/009-closure-parity-20261009.md)
## Completed / absorbed foundation
| Dir | Intent | Status |
|-----|--------|--------|
| `001-development-environment` | Host env on existing `rom-dev01` | done |
| `002-axp-reference-capture` | GOLDEN oracle + LAB rescue notes | done (living inventory) |
| `003-lineage-23-vanilla-build` | First vanilla LOS 23.2 on LAB | done 2026-09-14 |
| `004-microg-phonesky-integration` | microG + Phonesky packaging | done enough; updates via `009` |
| `005-restricted-signature-spoofing` | Restricted spoofing + bacon | done enough for LAB |
| `008-call-rec-flag-secure` | Call-rec unlock + FLAG_SECURE DO toggles | landed via `009` pack |
## Parallel track (not Magisk ship bacon)
| Dir | Intent | Status |
|-----|--------|--------|
| `007-kernelsu-sunfish` | ReSukiSU + SusFS | **Parallel** — boot PASS Sept 2026; banks FAIL then; **keep** for retry on current `009` ROM (FR-016). Bridge: `docs/007-parallel-on-009.md` |
Do not delete `007`. Do not enable KSU inside the Magisk ship bacon. Experiment
via separate boot (+ matched vendor) on LAB, then restore Magisk zip/slot.
## Roadmap (non-binding)
Later features are created only when prior work supplies enough information.
Numbers may shift; this list is guidance, not stubs:
| # | Theme |
|---|--------|
| 004 | microG + GSF Proxy + patched Phonesky |
| 005 | Restricted native signature spoofing (bacon shipped; **Location UI gap** follow-up) |
| 006 | **Rootless** banking baseline — **deferred** (absorbed into `007` gate) |
| 007 | ReSukiSU + SusFS — **incomplete** (banking hard-gate FAIL) |
| 008+009 | Delivered together as `008-call-rec-flag-secure` (global DO toggles only) |
| 010 | Remaining AXP Pro usability/privacy features (matrix spans 004–013; NeoBackup is external) |
| 011 | Signing / AVB / OTA + banking regression on signed/relocked ROM |
| 012 | Userspace hardening (promote from `docs/hardening-backlog.md`) |
| 013 | Kernel hardening + EOL firmware limits documentation |
| Theme | Where |
|-------|--------|
| Magisk ship + hardening + deblob | `009` (active) |
| Upstream LOS 23.2 rebase + project OTA zip | `docs/009-upstream-rebase-ota.md` |
| APK sideload refresh (FR-019) | `docs/009-sideload-system-updates.md` |
| KernelSU recycle | optional later; never mix into Magisk ship boots |
| Signing/AVB custody polish | Gate G userspace / secrets on host |
## New feature