# LAB acceptance — 20261002T162840Z (US-S5-1 Yama + SLAB_FREELIST_RANDOM)

Device: `11231JEC207477`  
Artifact: `20261002T162840Z-axp-stage1-combo4-cve-hi-releasekeys`  
Ship: `AXP-Resurection-Pro-23.2-20261002-sunfish.zip`

Sideload Pro zip + reinforce Magisk `boot`/`dtbo`/`vbmeta`/`vbmeta_system` on
active slot `_b` (2026-10-02 evening).

| Gate | Status | Notes |
|------|--------|-------|
| A Boot/HW | pass | `sys.boot_completed=1`, slot `_b` |
| B Google stack | pass (prior) | microG/Phonesky unchanged this bacon |
| C Toggles | pass (prior) | Not regressed |
| D Magisk | pass | `magiskd` present; TF Magisk boot reinforced |
| E Banking | deferred | PIF/Vector BL spoof — owner config, not this pack |
| F Usability | pass (prior) | |
| G Hardening | pass (this pack) | US-S5-1: `CONFIG_SECURITY_YAMA=y`, `CONFIG_SLAB_FREELIST_RANDOM=y`, LSM lists `yama`; US-S4-1 OpenSSH still absent; `init.openssh.rc` present |

Props:
- `ro.lineage.version=23.2-20261002-UNOFFICIAL-AXP-Resurection-Pro-sunfish`
- `ro.axp.resurection.track=pro`
- `ro.boot.flash.locked=0`, `verifiedbootstate=orange`
- `/proc/config.gz`: YAMA + SLAB_FREELIST_RANDOM + `LSM=…,yama,…`

Recover baseline: `20261002T085915Z-axp-stage1-combo4-cve-hi-releasekeys` (README).  
Prior US-S4 LAB: `docs/009-lab-acceptance-20261002-uss4.md` (`151944Z`).