Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.
1.3 KiB
1.3 KiB
Contract: Magisk preinstall (AXP / GOLDEN class)
Ship root: Magisk (newest stable that works on this stack)
Not ship: KernelSU / SusFS (007 optional recycle only)
Behavioural contract
- After a clean
009flash, Magisk is present in an AXP-like preinstalled but not fully activated state (exact files/UI measured from GOLDEN — document in LAB runbook). - Owner can complete activation on LAB using documented steps.
- DenyList-class configuration can hide root from banking packages before first process start (GOLDEN workflow).
- Magisk version in the version-pin record is newest workable stable, not an accidental stale host copy.
Banking interaction
Aurora install → do not open → DenyList (incl. processes) → Island clone → first launch in Island. Banks MUST NOT receive root.
Out of contract
- Shipping Magia branding specifically ( Magisk upstream UI OK if behaviour matches).
- Requiring KernelSU coexistence on the same ship image.
Verification
# After flash (pre-activation): document paths/props matching GOLDEN notes
adb shell ls -l /system_ext/bin/magisk 2>/dev/null || true
adb shell pm list packages | grep -iE 'magisk|magia'
# After activation: Magisk app reports version; DenyList configurable
Evidence under /srv/rom/artifacts/009-axp-los23-port/magisk/.