# Yuh: GOLDEN PASS vs LAB FAIL (same modules)

**Status:** open — Swissquote PASS on LAB does not imply Yuh parity.  
**Updated:** 2026-10-10 (live LAB/GOLDEN adb).  
**Oracle:** GOLDEN `11071JEC203839` — read-only. **LAB:** `11231JEC207477`.

## Measured 2026-10-09/10 (supersedes several older guesses)

| Fact | Note |
|------|------|
| APK identical on both (1.47.0 / vc 541) when compared | Not a version mismatch |
| DenyList / Island 6.4.2 / Bootloader Spoofer UI match | Not the differentiator |
| Bootloader Spoofer **not loaded** into Yuh on either phone while DenyList is on | GOLDEN still opens Yuh → spoofer not required every cold open |
| LAB error UI: **“installed from an untrusted source”** | `initiatingPackageName=com.android.shell` (or Aurora) vs GOLDEN `com.android.vending` |
| Play on LAB Island: Yuh “not compatible” while GOLDEN got Play updates | Features required by APK are present; LAB is Pixel 4a + **SDK 36**; GOLDEN is sunfish + **SDK 35** |
| TEESimulator removed; GOLDEN still works | TEE targets are not the Yuh differentiator |
| `keystore2` `HARDWARE_TYPE_UNAVAILABLE` | Seen on **both** phones; not the differentiator |

## Older checklist (still useful, partly disproved)

| Fact | Source |
|------|--------|
| On GOLDEN, Yuh was **FAIL** for weeks until Vector bootloader spoofer (2026-10-02). | `docs/002-golden-inventory.md` |
| Swissquote on GOLDEN did **not** need Vector; Yuh did (historically). | handoff |
| TEESimulator default targets omit banks | still true; not sufficient for Yuh |
| LAB A16 / Magisk 30.7 vs GOLDEN A15 / Magisk 29.0 | still true |

## Practical next paths (LAB only)

1. Get Play to perform a real update of Yuh (`initiatingPackageName=com.android.vending`) — see PlayIntegrityFork `spoofVendingSdk` experiments; inject-s only forces SDK 32.
2. Do **not** expect Island clone alone to rewrite install source.
3. Keep Magisk DenyList on for banking; Vector scope is separate.

## Capture (owner)

```bash
chmod +x scripts/009-diff-yuh-golden-lab.sh
./scripts/009-diff-yuh-golden-lab.sh | tee /tmp/yuh-golden-lab-diff.txt
```

Then one LAB fail log (Island only):

```bash
adb -s 11231JEC207477 logcat -c
# open Yuh in Island until it fails
adb -s 11231JEC207477 logcat -d > /tmp/yuh-lab-fail.log
```

Do not commit keybox material or Crashlytics payloads.

## Agent note

No live GOLDEN/LAB session from the agent environment in Oct 2026; conclusions above are from frozen docs + owner reports until `009-diff-yuh-golden-lab.sh` output exists.