sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
66 lines
2.6 KiB
Markdown
66 lines
2.6 KiB
Markdown
# Contract: LAB acceptance gates (`009`)
|
||
|
||
**Device**: LAB `11231JEC207477` only — never GOLDEN
|
||
**Evidence**: `/srv/rom/artifacts/009-axp-los23-port/<build-id>/`
|
||
|
||
## Gate A — Boot / hardware
|
||
|
||
- [ ] Clean flash boots to home
|
||
- [ ] Call + Wi‑Fi + unlock smoke (vanilla class)
|
||
|
||
## Gate B — Google stack
|
||
|
||
- [ ] microG Self-Check required items pass with spoofing ON as needed
|
||
- [ ] Project Phonesky opens; ordinary app install/update works
|
||
- [ ] No FakeStore primary
|
||
- [ ] Version pins: microG/GSF newest stable; Phonesky = project artifact
|
||
- [ ] If Play lacks GOLDEN-class fix → **FAIL closed** (reconsider Phonesky)
|
||
|
||
## Gate C — Toggles
|
||
|
||
- [ ] Spoofing OFF/ON behaviour per `toggles-surface.md`
|
||
- [ ] Call-rec OFF/ON behaviour per `toggles-surface.md`
|
||
|
||
## Gate D — Magisk
|
||
|
||
- [ ] Preinstall state matches measured GOLDEN/AXP class
|
||
- [ ] Activation documented and completed on LAB
|
||
- [ ] DenyList-class hides root from a test/banking package
|
||
|
||
## Gate E — Banking *(deferred — not MVP)*
|
||
|
||
- [ ] *(Later)* Island present; Swissquote PASS in managed profile workflow
|
||
- [ ] *(Later)* Yuh recorded; not worse than GOLDEN for packaging/spoofing
|
||
- [ ] *(Later)* Banks do not receive root
|
||
|
||
## Gate F — Usability / WebView
|
||
|
||
- [ ] Bundled AXP categories present or documented impossible/deferred
|
||
- [ ] Versions newest workable (except Phonesky rule)
|
||
- [ ] WebView default LOS; chooser unlocked
|
||
|
||
## Gate G — Hardening / signing + kernel
|
||
|
||
- [ ] Project **release / definitive signing keys** on ship images/OTAs (not
|
||
AOSP test-keys); Phonesky / update identity on that key
|
||
- [ ] GOLDEN-class **userspace** hardening + AVB *build* posture as applicable
|
||
on unlocked sunfish **or** each in-scope gap documented (no silent omit)
|
||
- [x] Updated LOS23-compatible sunfish kernel + hardening attribution list
|
||
(FR-017 / SC-010) — see `docs/009-gate-g-kernel-attribution.md`
|
||
(Stage1 + combo4 + Clang FORTIFY; LAB 2026-09-29)
|
||
- [x] Staged known-good images retained for bisect
|
||
(`20260929T123401Z-axp-stage1-combo4`, prior combo4-fortify, GOODMAKE)
|
||
- [x] Localization/location AXP-vs-LOS compare **not** required yet (FR-018)
|
||
- [x] Bootloader relock **not** a Gate G requirement (AXP/LOS unlocked norm;
|
||
IOdes-class lock is non-goal) — see research 2026-09-29
|
||
|
||
## Non-gates
|
||
|
||
- KernelSU presence or SusFS
|
||
- FLAG_SECURE override (optional)
|
||
- Custom AXP backup ROM feature
|
||
- Banking / Swissquote / Yuh (deferred owner future)
|
||
- Localization hardening policy freeze (FR-018 later)
|
||
- Yuh PASS if GOLDEN attestation path still FAILs equivalently
|
||
- Bootloader lock / relock (IOdes-class); unlocked sunfish is the ship model
|