sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
2.6 KiB
2.6 KiB
Contract: LAB acceptance gates (009)
Device: LAB 11231JEC207477 only — never GOLDEN
Evidence: /srv/rom/artifacts/009-axp-los23-port/<build-id>/
Gate A — Boot / hardware
- Clean flash boots to home
- Call + Wi‑Fi + unlock smoke (vanilla class)
Gate B — Google stack
- microG Self-Check required items pass with spoofing ON as needed
- Project Phonesky opens; ordinary app install/update works
- No FakeStore primary
- Version pins: microG/GSF newest stable; Phonesky = project artifact
- If Play lacks GOLDEN-class fix → FAIL closed (reconsider Phonesky)
Gate C — Toggles
- Spoofing OFF/ON behaviour per
toggles-surface.md - Call-rec OFF/ON behaviour per
toggles-surface.md
Gate D — Magisk
- Preinstall state matches measured GOLDEN/AXP class
- Activation documented and completed on LAB
- DenyList-class hides root from a test/banking package
Gate E — Banking (deferred — not MVP)
- (Later) Island present; Swissquote PASS in managed profile workflow
- (Later) Yuh recorded; not worse than GOLDEN for packaging/spoofing
- (Later) Banks do not receive root
Gate F — Usability / WebView
- Bundled AXP categories present or documented impossible/deferred
- Versions newest workable (except Phonesky rule)
- WebView default LOS; chooser unlocked
Gate G — Hardening / signing + kernel
- Project release / definitive signing keys on ship images/OTAs (not AOSP test-keys); Phonesky / update identity on that key
- GOLDEN-class userspace hardening + AVB build posture as applicable on unlocked sunfish or each in-scope gap documented (no silent omit)
- Updated LOS23-compatible sunfish kernel + hardening attribution list
(FR-017 / SC-010) — see
docs/009-gate-g-kernel-attribution.md(Stage1 + combo4 + Clang FORTIFY; LAB 2026-09-29) - Staged known-good images retained for bisect
(
20260929T123401Z-axp-stage1-combo4, prior combo4-fortify, GOODMAKE) - Localization/location AXP-vs-LOS compare not required yet (FR-018)
- Bootloader relock not a Gate G requirement (AXP/LOS unlocked norm; IOdes-class lock is non-goal) — see research 2026-09-29
Non-gates
- KernelSU presence or SusFS
- FLAG_SECURE override (optional)
- Custom AXP backup ROM feature
- Banking / Swissquote / Yuh (deferred owner future)
- Localization hardening policy freeze (FR-018 later)
- Yuh PASS if GOLDEN attestation path still FAILs equivalently
- Bootloader lock / relock (IOdes-class); unlocked sunfish is the ship model