# Quickstart: 005 first working stack (LAB only)

**Device**: LAB `11231JEC207477` — never GOLDEN `11071JEC203839`

## Goal

One flash proves: microG + patched Play + restricted spoofing + modern location
docs. Not banking (`006`), not root (`007`).

## Prerequisites

- Artifact zip from `005` bacon (includes `REPLACE_PREBUILT` + updated privapp)
- Laptop `adb`/`fastboot`; hashes verified
- Oracle notes (optional): `.local-artifacts/002-golden/20260915-spoofing-phonesky/README.md`

## Flash

Follow `docs/003-flash-lab.md` pattern with the **005** zip (dtbo → boot/recovery
→ format if needed → sideload). Say **No** to additional packages.

## After first boot

```bash
SERIAL=11231JEC207477
adb -s "$SERIAL" shell getprop ro.lineage.version
adb -s "$SERIAL" shell pm path com.google.android.gms
adb -s "$SERIAL" shell pm path com.google.android.gsf
adb -s "$SERIAL" shell pm path com.android.vending
# expect all three present — no remount push
```

## Spoofing

1. Enable **Developer options**  
2. Enable **Allow signature spoofing** (`settings get secure allow_signature_fake` → `1`)  
3. Open **microG Settings → Self-Check**  
4. Grant spoofing for GmsCore and Play when prompted (or App info → permissions)  
5. Confirm Self-Check **correct signature** for GmsCore and Play/Companion  

```bash
adb -s "$SERIAL" shell settings get secure allow_signature_fake
adb -s "$SERIAL" shell dumpsys package com.google.android.gms | grep FAKE_PACKAGE_SIGNATURE
adb -s "$SERIAL" shell dumpsys package com.android.vending | grep FAKE_PACKAGE_SIGNATURE
```

## Play auth

1. Open Play Store; sign in  
2. Confirm UI stays up (no FGS crash loop)  
3. Optional logcat gate: **no** `UNREGISTERED_ON_API_CONSOLE` for Phonesky  

In-app Play self-update may still fail (AXP-like) — acceptable.

## Modern location

1. microG Settings → Location  
2. Enable network location as shown  
3. Configure service URL: `https://api.beacondb.net` (BeaconDB; MLS is dead)  
4. Do **not** install Déjà Vu / Nominatim NLP backend APKs  

## Pass criteria (SC)

- [x] Toggle + `allow_signature_fake=1` *(LAB 2026-09-15)*  
- [x] Self-Check correct signature for gms + vending  
- [x] Play sign-in without API-console fingerprint error  
- [x] All three packages from zip without remount *(gms/gsf system; vending upgraded in-place for exact-alarm — next bacon restores system path)*  
- [x] BeaconDB steps recorded; no UnifiedNlp backends required  
- [x] No Magisk/KSU on the build  

## Failure

Capture logcat (`vending`, `GmsAuthenticator`, `SelfCheck`, `PackageManager`).
Do not flash GOLDEN. Packaging-only regressions → fix under vendor overlay;
spoofing regressions → frameworks/Settings patches.