AXPR23 — end of life (2026-10-26)

Status: EOL / archived. No new features, no new AXPR23 builds. AXPR24 (LOS24 / Android 17) is the active line. AXPR23 remains the reference for how the LOS port, the AXP packaging and the WebView integration were done.

Final shipped artifact

ZIP: AXP-Resurection-Pro-23.2-20261025-sunfish.zip
The signed ZIP is retained in the build archive; generated ROM artifacts are intentionally not stored in Git.
SHA-256: 9d205fd3cc945438dfff3a23b129bf88516c7654f5922bc2ee4d478f9485eef0
Status at build: FLASH_READY
Signed with the project release key (C=DE, O=AXP-Resurection, OU=sunfish-a16, CN=release), cert SHA-256 694a8941b64850a2acd0739c3757286c918eb16cc9788a2d7201222f351f1876.
Installed on the designated reference sunfish via A/B adb sideload without a wipe; it booted and was verified.

Verified state on the flashed device

ro.lineage.version: 23.2-20261025-PRO-sunfish.
WebView: org.axpos.aosmium_wv only, native provider through Lineage's static RRO (framework-res__lineage_sunfish__auto_generated_rro_product.apk), order: Google entries (all availableByDefault=false) → AOSmium (availableByDefault=true) → AOSP. LOS webview prebuilt removed from the image by apply_009_single_webview.py.
Runtime WebView smoke (harness com.axpr.wvtest): HTTPS load, reduced Vanadium UA, JS, WASM, Canvas2D, WebGL 2.0, WebCrypto, Blob fetch, localStorage, AudioContext, WebRTC — all pass; sandboxed renderer with seccomp.
hardened_malloc: linked statically into 64-bit libc (h_malloc_info, h_malloc_trim, … present in the runtime APEX libc); 32-bit stays Scudo.
configstore HAL crash loop: gone (0 occurrences; disable_configstore stub present, HAL binary and rc absent).
No FATAL EXCEPTION, ANR, watchdog, tombstone or lowmemorykiller events in the audit window. Remaining errors are AOSP telephony/RIL/SIM messages and expected avc denials from apps probing /proc or the sensors HAL touching diag_device.

Known device-side caveat (not part of the ROM)

Vector 2.2 (bootloader-spoof host) ships a sepolicy.rule that Magisk 30.7 does not load, and it lacks the Android 16 artd path, so dexopt fails while Vector is installed. Policy-only Magisk module axpr-vector-dex2oat (v3) fixes it:

/sdcard/Download/axpr-vector-dex2oat-v3.zip
SHA-256 e30194c26070031debad0ad0eabff1065b386de7b103b714220a5c6ae51a9881
Delivered via post-fs-data.sh + magiskpolicy --live (no binaries, no hooks).
With it: VectorDex2Oat spoofs its cmdline, dex2oat returned code 0, cmd package compile succeeds.
v3 installed on GOLDEN on 2026-10-26 and verified live: policy rules present (artd xposed_file), cmd package compile -m verify -f com.aurora.store = Success, 0 art_exec aborts. Persistence across reboot is the only remaining confirmation (v3 ships the complete rule set in policy.rules).

Details and the full rule list: docs/010-axpr-webview-los23-port.md.

Upstream context

LineageOS 23.2 for sunfish is frozen: last nightly 20261008 (SDK 36, patch level 2026-09-01); 24.0 nightlies start 20261015 (SDK 37, patch level 2026-10-01). LineageOS does not keep both lines per device. Therefore AXPR23 cannot receive further upstream security patches and is intentionally closed.

What stays authoritative for AXPR24

The LOS→AXP port method (scripts/009-*.sh, apply_009_*.py).
AXP packaging/signing shape (release keys, AVB flags, Magisk preroot).
WebView adaptation chain Vanadium → Mulch → AOSmium, the prebuilt module pattern and the provider overlay/RRO lesson.
The device-side IME/kernel notes in docs/009-*.

3.6 KiB Raw Permalink Blame History