009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

docs/009-lab-acceptance-20261002-uss5.md

@@ -0,0 +1,27 @@
+# LAB acceptance — 20261002T162840Z (US-S5-1 Yama + SLAB_FREELIST_RANDOM)
+
+Device: `11231JEC207477`  
+Artifact: `20261002T162840Z-axp-stage1-combo4-cve-hi-releasekeys`  
+Ship: `AXP-Resurection-Pro-23.2-20261002-sunfish.zip`
+
+Sideload Pro zip + reinforce Magisk `boot`/`dtbo`/`vbmeta`/`vbmeta_system` on
+active slot `_b` (2026-10-02 evening).
+
+| Gate | Status | Notes |
+|------|--------|-------|
+| A Boot/HW | pass | `sys.boot_completed=1`, slot `_b` |
+| B Google stack | pass (prior) | microG/Phonesky unchanged this bacon |
+| C Toggles | pass (prior) | Not regressed |
+| D Magisk | pass | `magiskd` present; TF Magisk boot reinforced |
+| E Banking | deferred | PIF/Vector BL spoof — owner config, not this pack |
+| F Usability | pass (prior) | |
+| G Hardening | pass (this pack) | US-S5-1: `CONFIG_SECURITY_YAMA=y`, `CONFIG_SLAB_FREELIST_RANDOM=y`, LSM lists `yama`; US-S4-1 OpenSSH still absent; `init.openssh.rc` present |
+
+Props:
+- `ro.lineage.version=23.2-20261002-UNOFFICIAL-AXP-Resurection-Pro-sunfish`
+- `ro.axp.resurection.track=pro`
+- `ro.boot.flash.locked=0`, `verifiedbootstate=orange`
+- `/proc/config.gz`: YAMA + SLAB_FREELIST_RANDOM + `LSM=…,yama,…`
+
+Recover baseline: `20261002T085915Z-axp-stage1-combo4-cve-hi-releasekeys` (README).  
+Prior US-S4 LAB: `docs/009-lab-acceptance-20261002-uss4.md` (`151944Z`).