sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
5.1 KiB
GOLDEN inventory (AXP.OS oracle) — redacted
Device: GOLDEN sunfish (main phone) — DO NOT FLASH / wipe / modify.
Serial: 11071JEC203839
Role: Live AXP.OS Pro 22.2 / Android 15 compatibility oracle.
Access: Non-destructive adb only (sampled 2026-09-13).
Raw artifacts: /srv/rom/references/axp/golden/2026-09-13/ on rom-dev01
(includes Magia DenyList screenshots, Yuh logcat; Git = this summary only).
Identity (measured)
| Field | Value |
|---|---|
| Serial | 11071JEC203839 |
| Owner user | Andres (user 0) |
ro.build.display.id |
BP1A.250505.005 |
ro.build.version.release |
15 |
ro.build.version.security_patch |
2026-03-03 |
| AXP / Lineage identity | ro.lineage.version=22.2-2026.003-sunfish-pro (releasetype=PRO) |
| Bootloader | unlocked (flash.locked=0, verifiedbootstate=orange) |
| Magisk | Binary 29.0 (29000) at /system_ext/bin/magisk; UI app named Magia |
Users / work profile
| User | Name | Notes |
|---|---|---|
| 0 | Andres | Owner |
| 10 | Island | Profile owner = com.oasisfeng.island.fdroid 6.4.2 |
After owner’s 2026-09-13 reclone experiment: com.yuh and
com.swissquote.android present on both user 0 and user 10
(Island reinstall of Yuh firstInstallTime user10 ≈ 21:48).
Essential packages (measured)
| Area | Package / path | Version | Notes |
|---|---|---|---|
| microG GmsCore | com.google.android.gms |
0.3.15.250932 | System base MicrogGmsCore_GH; sig short 73aaa390 |
| Phonesky (AXP) | /system/priv-app/Phonesky_AXP-OS |
50.2.12-24 | Sig short e05f779d |
| GSF Proxy | /system_ext/app/GsfProxy_GH |
v0.1.0 |
|
| Island | com.oasisfeng.island.fdroid |
6.4.2-d46911c9 |
Spec text said “Insular”; measured = Island |
| Aurora Store | com.aurora.store |
4.8.4 |
|
| Yuh | com.yuh |
1.45.11 (vc 535) |
See attestation section |
| Swissquote | com.swissquote.android |
9.9.0 |
Owner reports still OK |
| Aosmium (AXP) | org.axpos.aosmium |
148.0.7778.178 |
Not on DenyList |
| Magisk modules list | /data/adb/modules |
— | Not readable without root shell — re-query if needed |
Magia DenyList (from UI screenshots 2026-09-13)
Checked packages (package-level; process expand not fully visible in shots):
| App | Package |
|---|---|
| BBVA Spain | com.bbva.bbvacontigo |
| BOOM | com.boom.android.mobile2 |
| CieID | it.ipzs.cieid |
| Device configuration | android.autoinstalls.config.google.nexus |
| DKB | com.dkbcodefactory.banking |
| Identifica | it.sielte.sielteidentify |
| N26 | de.number26.android |
| Scalable Capital | capital.scalable.droid |
| Swissquote | com.swissquote.android |
| Webank | com.opentecheng.android.webank |
| Wise | com.transferwise.android |
| Yuh | com.yuh |
Visible unchecked (partial): Aegis, Amarok, Amaze, Aosmium.
Owner notes (2026-09-13): most DenyList banking apps still pass; Yuh failed for ~weeks. Extra Magia DenyList/host checks + Island uninstall/reclone did not fix Yuh at that time.
Owner update 2026-10-02: Yuh works again on GOLDEN after enabling Vector’s
bootloader spoofer module (zygisk_vector / Vector manager). DenyList alone
was never enough for that HA path.
Compatibility / attestation (observational)
| Check | Status | Evidence |
|---|---|---|
| Swissquote | PASS (owner report) | Still used; on DenyList |
| Other DenyList banks (N26, DKB, …) | PASS (owner: “casi todos”) | UI DenyList |
| Yuh | PASS again (owner 2026-10-02) via Vector bootloader spoofer | Was FAIL 2026-09-13 (HA / “certificate is invalid”) |
| Play Integrity token path | Client path still runs | Finsky requestIntegrityToken() finished for com.yuh; DroidGuard pia_attest_e1 for com.yuh |
| KeyMint / TEE | Errors concurrent with 2026-09-13 Yuh FAIL | keystore2: HARDWARE_TYPE_UNAVAILABLE (IRPC / TRUSTED_ENVIRONMENT); addRngEntropy → DEAD_OBJECT / KeyMint -1000 |
Interpretation for Gate E / LAB: GOLDEN banking stack = Magisk DenyList +
playintegrityfix + teesim + Vector bootloader spoofer (owner-proven for
Yuh). Ship ROM still does not bake those modules (009-magisk-preinstall-runbook);
owner installs post-flash. Wrong PIF prints (e.g. comet CANARY on sunfish LAB)
break the same surface. Magisk/Magia remains the AXP oracle path for 009.
Call recording: GOLDEN Secure dump shows native EXTENDROM
extendrom_call_recording=1 (see 008 — port er.sh F_CALLREC, not Magisk
RRO). FLAG_SECURE override: not identified as AXP catalog on GOLDEN; project
009 is native DO.
Banking layout (oracle)
Historical target order (AXP workflow; Magisk DenyList → Island):
- Aurora Store → install
- Do not open
- Magia DenyList (incl. processes) before first process
- Clone into Island
- First launch in Island
- Phonesky/Play in Island as needed
Observed: Yuh+Swissquote intended in Island; after 2026-09-13 debug, both also on owner user 0 — clean up is owner’s choice; agents must not uninstall.
Policy
No flash, wipe, Magisk/Magia changes, or app uninstalls by agents — sample only.