Harden T56 one-shot provisioning

[awatchar]

What changed

• replace the API 22
  un-as Wi-Fi handoff with a DUMP-protected, nonce/path-bound receiver and private fsynced status protocol
• keep credentials out of argv/status/logs and require verified staging/helper cleanup
• tolerate two transient pending-config connection failures while still rejecting permanent errors and the third connected-network failure
• add PowerShell 5.1 parser/security fixtures and Java policy tests

Root cause

The factory T56 has no usable
un-as, and Android 5.1 does not reliably expose nested ordered-broadcast JSON. After registration, a single transient connection error also caused an otherwise valid config candidate to roll back immediately.

Validation

• PowerShell 5.1 nonce/parser/security verifier passed
• Wi-Fi helper Gradle build and merged-manifest review passed
• all FOSS debug unit tests passed
• FOSS debug APK assembled and retained the expected signing certificate
• recovery hardware run on UNIPRO/ZX cc7e49d reached Ready with Device ID E7ROW7, active config v14, then rebooted and returned to same-ID Ready

Acceptance scope

This proves safe recovery of the partially provisioned T56. It is not a pristine factory one-shot run, so Issue #6 and release promotion remain open pending clean bundle/release and remaining device-profile acceptance gates.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
minimum	Ignored		Aug 13, 2026 2:48pm