Active track: Magisk AXP → LOS 23.2 resurrection (009).
Start here: 009-handoff-20261008.md
Closure baseline (LAB, 2026-10-09): 009-closure-parity-20261009.md

Project rules: .specify/memory/constitution.md
Agent rules: ../AGENTS.md
Feature specs: ../specs/ (active ship: 009-axp-los23-port)

KernelSU / ReSukiSU / SusFS (007) is a parallel track (boot worked Sept 2026). Keep all 007-* docs. Bridge to current Magisk ROM: 007-parallel-on-009.md. Do not mix into Magisk ship bacons; A/B or restore Magisk zip after experiments.

009 Magisk ship (day-to-day)

Doc	Role
`009-handoff-20261008.md`	Resume / execution map
`009-closure-parity-20261009.md`	Booted closure zip + Swissquote PASS
`009-magisk-preinstall-runbook.md`	EXTENDROM preroot (Magisk not PRODUCT_PACKAGE)
`009-capability-matrix.md`	Ship capability matrix
`009-version-pins.md`	microG / Magisk / Phonesky pins
`009-gate-g-kernel-attribution.md`	Kernel hardening attribution
`009-kernel-hardening-map.md`	Living kernel map
`009-upstream-rebase-ota.md`	Next LOS sync → rebacon → first project OTA
`009-lab-polish-20261016.md`	Post-test polish (configstore, thermal, Euicc, media)
`009-laptop-migration-20261016.md`	New laptop / USB bundle, git WT, host bacon in flight
`009-sideload-system-updates.md`	FR-019 APK bumps (stub)
`009-yuh-golden-lab-hypothesis.md`	Open Yuh gap (historical LAB vs AXP-era GOLDEN)
`device-roles.md`	LAB = daily driver; GOLDEN = our build (debug); AXP oracle = a16 refs

Public-facing (users / reviewers)

Doc	Role
`public/AXP-Resurrection-Pro-sunfish.md`	What the ROM contains — no LAB/GOLDEN/build-host detail
`public/kernel-cve-backport-list.txt`	449 kernel CVE identifiers in the ship set

Non-normative product trackers

Doc	Role
`axp-pro-parity.md`	Parity matrix — Magisk is ship root on `009`
`hardening-backlog.md`	Candidates until promoted into a `spec.md`
`a15-a16-delta.md`	Porting notes A15→A16
`chatgpt-context.md`	Early chat intent; superseded by constitution/`009` on root

Parallel track — KernelSU / SusFS (kept)

Doc	Role
`007-parallel-on-009.md`	How to retry ReSukiSU+SusFS on current `009` ROM
`007-kernelsu-runbook.md`	Host build / flash runbook
`007-lab-results-20260916.md`	Boot PASS + banks FAIL evidence
`specs/007-kernelsu-sunfish/`	Standby feature spec (FR-016 recycle)

Historical diagnostics (not Magisk day-to-day)

See archive/README.md.

Sept 2026 fortify / CVE bisect (009-fortify-*, 009-cve-bisect-plan.md)
Early lab acceptance / unflashed zip audits
Vanilla LOS bring-up done: 003-* (still useful for repo sync basics)

Host boundary

rom-dev01 (Ubuntu 24.04, public IPv4, SSH) is provisioned outside this project. This repository must not specify or automate Proxmox VM creation, public IP selection, or company Salt states.

Feature 001-development-environment starts from an already-available host.

Reference sources

reference-sources.md — Lineage / AXP / GrapheneOS. Sunfish only.

AXP sunfish preservation

axp-sunfish-preservation.md — archive cookbook after 001 on rom-dev01.