AXP-Resurection/specs/002-axp-reference-capture/tasks.md

Tasks: AXP.OS GOLDEN reference capture

Input: Design docs from /specs/002-axp-reference-capture/

Prerequisites: 001 complete on rom-dev01

Phase 1: Setup (no phone)

• T001 Confirm active feature specs/002-axp-reference-capture in .specify/feature.json
• T002 [P] Create docs/002-lab-stock-rescue.md stub (LAB only; Google factory source)
• T003 [P] Create docs/002-golden-inventory.md stub (essential checklist + banking flow placeholders)
• T004 [P] Create host dirs /srv/rom/references/axp/{archive,golden,lab,logs} as android-build

Phase 2: Offline AXP archive seed (no phone)

• [~] T005 Rsync ~/Archives/AXP.OS/ → host archive (~18G/38G in progress; not a 003 flash gate)
• T006 Record archive size + SNAPSHOT_DATE in /srv/rom/references/axp/logs/archive-rsync.txt (partial; refresh when rsync ends)

Phase 3: LAB stock rescue (P1 — may download without phone)

• T007 Resolve current official sunfish factory image URL + SHA-256 from Google primary page (or document pruning if only one remains) (Google CDN 404; hash + IA fallback documented)
• T008 Download factory zip to /srv/rom/references/axp/lab/; verify SHA-256 (VERIFY_OK 2026-09-13)
• T009 Complete docs/002-lab-stock-rescue.md with flash-all steps, wipe warning, LAB-only scope
• T010 Cross-check FR-002/SC-002 in a short verification note in that doc

Phase 4: Device roles measured (P1 — phones required)

• T011 Connect GOLDEN (AXP A15 main); record serial + getprop into golden inventory (raw log on host) — adb sample only, no modifications (serial 11071JEC203839)
• T012 Connect LAB; record serial/label + build identity (serial 11231JEC207477, iodé/LOS 7.8 A16 — see docs/002-lab-iodes-baseline.md)
• T013 Measure bootloader/fastboot unlock state on both; update docs/device-roles.md + inventory (SC-006) (GOLDEN unlocked/orange; LAB locked/green — via getprop)
• T014 Explicit “do not flash GOLDEN” callout in docs/device-roles.md and inventory (SC-001)

Phase 5: Essential GOLDEN inventory (P1 — GOLDEN adb)

• T015 Capture microG essential fields (version, cert, Self-Check notes) (version + sig short; Self-Check UI = re-query)
• T016 Capture Phonesky / com.android.vending essentials (Phonesky_AXP-OS 50.2.12)
• T017 Capture Insular / work profile essentials (dumpsys device_policy excerpt redacted) (Island 6.4.2, user 10)
• T018 Capture Magisk version, modules, DenyList including processes (Magia UI DenyList packages from screenshots; Magisk 29.0; process expand partial; modules dir not readable without root)
• T019 Capture GSF Proxy / related packages versions/paths/signatures
• T020 Record observational Play Integrity + Yuh/Swissquote pass/fail on GOLDEN (SC-004) (Swissquote PASS; Yuh FAIL HA / certificate invalid; Finsky PI token path still completes; keystore2 TEE errors in log)
• T021 Document call-recording + FLAG_SECURE bypass source on GOLDEN (deferred — re-query; not blocking 003)
• T022 Mark any missing rows re-query GOLDEN — do not invent

Phase 6: Banking flow (P1)

• T023 Write redacted GOLDEN banking install order / observed layout in docs/002-golden-inventory.md
• T024 Confirm no passwords/OTPs/PII in Git docs (SC-005)

Phase 7: Polish / gate

• T025 Cross-link known facts into docs/axp-pro-parity.md without inventing features (FR-007)
• T026 FR/SC checklist pass for gate: LAB rescue ready; GOLDEN do-not-flash; inventory+flow sufficient for 006 (see docs/002-gate-handoff.md)
• T027 Handoff note: 002 complete → 003 on LAB only
• T028 Verify Git trees contain no proprietary APK dumps or credential files

Parallel opportunities

• T002–T004 parallel; T005 archive rsync while drafting T007–T009
• T011–T014 require physical devices; block inventory until done