Stock ii overview is a desktop workspace pane; on the phone the useful
half is the search. Task swaps the body for a paged icon grid off the
existing LauncherApps desktop-entry service; appgrid (xarbit plasma6
applet) is layout prior art only. OSK/focus-grab patch constraints
called out in-file — that history must not be re-learned the hard way.
wifi: bringup unit now carries the union ordering (slpi/adsp for TZ MSA,
rmtfs+tqftpserv for firmware serving — the 2026-07-20 boot proved the old
load unit's ordering incomplete) and supersedes blueline-wifi-load;
msa-release adopted into the repo (shutdown unload that keeps warm
reboots clean).
cellular: adopt blueline-clat service+script. clat script now pins a host
route to the Fido MMS proxy via the CLAT — with wifi up the wlan default
beat the clat default and MMS died off-carrier. mmsd config contract
documented (MMS_APN must match the bearer APN ltemobile.apn; shipped as
netsvcs which matches nothing).
tasks: retire 06 qtpim (no longer the contacts path), archive 10 (done),
index catches up on 11 (archived); 01 re-pointed at a contacts-store
decision.
WCN3990 wifi died at boot: udev autoloads ath10k_snoc before rmtfs +
tqftpserv serve the DSP firmware, the wifi firmware crashes (msa unmap
-22), the in-place retry wedges at HTT connect (-110), and no wlan
device exists for the whole boot (WIFI-HW 'missing'). Blacklist the
autoload; blueline-wifi-bringup.service loads it after those services
with a reload-on-wedge retry (a crashed WCN3990 only recovers by module
reinsert). Diagnosed and verified live on-device.
Firmware also provides no MAC, so every probe randomized it and DHCP
reservations could not hold: NM conf.d defaults wifi to
cloned-mac-address=stable (per-network, per-machine, reboot-stable).
Phone currently presents 02:42:c2:03:26:47 on Samaritan Solutions —
update the router reservation to that once.
souveraine-secrets is live on the phone (reboot-verified, keyring
masked) — TASK-11 complete, moved to tasks/archive/ with the outcome.
STORAGE-ENCRYPTION.md: add the doc (design of record, 2026-07-20) with
status updated to match code — secrets-store AEAD + machine wrap built,
Argon2id wrap built with ingress pending; the derive_storage_key gap
paragraph now scoped to what remains. Add session handoff.
Standing audit register (P1-P7 + services review) plus the design-of-record
docs from this arc: Chatty reactions/replies/redactions/edits, contacts
Person layer, and RCS carrier reality.
One page each for machined, secrets, sessiond — what each owns, what
crosses its boundary, and the open gaps before it reaches the RedFlag
capability-token bar. Gaps mapped to concrete RedFlag primitives (token,
closure hash, canonical message, KeyID, independent verifier, binary
integrity, eBPF) with file:line anchors, not doctrine-summary hand-waving.
audit-status.md rolls up priority: P0 unlock/handoff attestation, P1
machined token issuance, P2 secrets caller identity, P3 per-agent UIDs,
P4 binary watchdog shared-deferred with RedFlag SEC-022.
machined system tier landed in souveraine (5039163/116562a); boot-gate
vs session-lock doctrine on record. FEDERATION.md moves here from
souveraine's gitignored docs tree, rewritten: implemented pieces cited,
memfs transport roughed (shared bare remote, branch-per-instance,
domain merge policy, memfs_commit firehose signal), instance awareness
design, and the install-time agent instantiation flag.
