# 009 AXP capability matrix (resurrection track)

Maps GOLDEN/`002` + `docs/axp-pro-parity.md` → ship status for **Magisk AXP
clone on LOS23**. Authoritative requirements remain `specs/009-axp-los23-port/spec.md`.

Status: `required` | `partial` | `exception` | `deferred` | `impossible`

| category | golden_ref | status | notes |
|----------|------------|--------|-------|
| Base LOS 23.2 sunfish | `003` | required | Vanilla baseline before AXP integrate |
| microG + GSF | `002` / `004` | required | Newest stable |
| Phonesky (project patched) | `002` / `004` | required | Host artifact; FakeStore forbidden |
| Selectable signature spoofing | `005` / GOLDEN `allow_signature_fake` | required | Restricted; DO toggle |
| Selectable call-recording unlock | `008` / GOLDEN `extendrom_call_recording` | required | EXTENDROM key |
| Magisk preroot + DenyList-class | GOLDEN Magisk 29.0 / Magia | required | Newest Magisk; EXTENDROM-class boot patch |
| Bundled usability apps (Aurora, Droidify, gallery, …) | `002` / parity | required | All on `system_ext`; Fossify gallery; **no NeoLauncher** |
| Private DNS presets (AXP-class provider list) | AXP Settings | required | Clone AXP private-DNS entries; no AXP OTA/repos |
| Internet connectivity / INTERNET special permission UX | AXP/Graphene-class | required | Keep behaviour; **do not** integrate `axp.os` endpoints/branding |
| Disable app (classic) vs Archive | AOSP/LOS A16 Archive | required | Restore usable **Disable** on A16; Archive alone disliked by owner |
| DNS/hosts privacy helpers | parity / GOLDEN modules `hosts` | required | If in AXP surface; Magisk module vs ROM-native TBD |
| Userspace hardening / AVB (unlocked) | parity `011`–`012` pulled into `009` | required | Staged; gaps documented; no bootloader lock |
| Release / definitive signing keys | GOLDEN / plan `/srv/rom/secrets` | required | Ship off test-keys; Phonesky same identity |
| Bootloader lock / relock | IOdes-class | wont | AXP/LOS unlocked norm; Magisk preroot assumes unlocked |
| Kernel update + hardening | parity / FR-017 | required | LOS23 sunfish kernel + attributable patches |
| WebView | GOLDEN Aosmium | exception | LOS23 WebView default; chooser unlocked; no Aosmium |
| Banking / Island / Swissquote / Yuh | `002` Gate E / `009` | partial | **Swissquote PASS** LAB Island (2026-10-09); **Yuh open** (`009-yuh-golden-lab-hypothesis.md`) |
| Localization / location hardening AXP vs LOS | owner complaint | deferred | FR-018 — **do not extra-cap** vs LOS for ship (2026-09-18); no MVP toggle; compare doc later only |
| NeoLauncher | AXP default | wont | Owner: do not integrate; LOS Launcher3 |
| F-Droid client (`org.fdroid.fdroid`) | GOLDEN | substitute | Ship **Droidify** on `system_ext` |
| AXP external market repos / AXP OTA servers | AXP EOL infra | wont | Servers down / EOL — do not wire |
| Sideloadable system package refresh (microG, Magisk, Phonesky, …) | owner cadence ~2–3 mo | required | FR-019 — same-signer / PRESIGNED / Magisk update path; no OTA |
| KernelSU / SusFS | `007` | deferred | Out of ship; optional recycle FR-016 |
| AXP backup ROM feature | parity | impossible / wont | External NeoBackup only |
| FLAG_SECURE global override | project `008` | required | Landed via `009` pack (DO toggle) |

## Bundled packages observed on GOLDEN (2026-09-17 `pm list packages -s`)

| package | role | matrix |
|---------|------|--------|
| `com.aurora.store` | Aurora | required (pin newest) |
| `com.looker.droidify` | Droidify (F-Droid client) | required |
| `org.fdroid.fdroid` | F-Droid | substitute / not shipped |
| `org.fossify.gallery` | Fossify Gallery | required |
| `com.stevesoltys.seedvault` | Seedvault | often los-provides |
| `com.android.launcher3` | Launcher | los-provides — **no NeoLauncher** |
| `org.axpos.aosmium` / `_wv` | Aosmium | exception — do not ship; LOS WebView |
| `com.google.android.gsf` | GSF | required |
| `com.android.vending` | Phonesky | required (project artifact) |

User-installed (not system): Island, banks, Magisk manager (hidden pkg), etc.

## Build oracle note

Prefer AXP **build tree + docs** on `rom-dev01` (see axpos.org developer
building / EXTENDROM preroot) to learn Magisk/product packaging. GOLDEN `adb`
is for runtime behaviour, not the first compile reference. Host currently has
rendered docs under `/srv/rom/references/axp/archive/…`; full AXP `build`
checkout still to stage.