Skip to content

docs: 记录路由 assets 与 TheRouter 真机验证 #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kairowan merged 1 commit into from
Oct 28, 2026
Merged

docs: 记录路由 assets 与 TheRouter 真机验证 #52

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions docs/evidence/chain-a-report.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,20 @@
- REA/Frida 的真实动态注入与完整语义重建。
- 路由 assets `.rtap` 的真机运行验证（当前设备 PackageManager 异常）。

## 4.1 2026-10-28 真机追加验证

| 项目 | 结果 |
|---|---|
| 设备 | HONOR BRP-AN00，Android 15 / API 35，arm64-v8a |
| 测试 | `python3 tests/scripts/check-therouter-compat.py --cli target/release/shield --serial AASEVB5730002067` |
| TheRouter asm 模式 | 加固、签名、注册、PVM2 通过 |
| TheRouter index 模式 | 加固、签名、注册、PVM2 通过；产物只含 `therouter_registry.rtap`，无 `.txt` |
| ARouter | 产物只含 `arouter_routes.rtap`，无 `.txt` |
| 未知注册模式 | 保持拒绝 |
| 状态 | `verified`（仅该设备、该模拟样本） |

该结果只证明路由 assets 加密和 TheRouter 兼容在该设备/样本上运行通过，不代表所有 ROM、所有业务路由或所有 PVM2 方法均已验证。

## 5. 停止条件

- 如果恢复成本没有显著提高，停止继续增加格式复杂度。
Expand Down
1 change: 1 addition & 0 deletions docs/evidence/experiment-matrix.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@
| A-06 | A | 原包/加固包差分 | 业务输入、异常、反射、JNI | 任一 P0/P1 差异即失败 | 待执行 |
| A-07 | A | 运行时明文采样 | 真机、私有目录、内存 | 记录窗口/路径/清理；无数据即 unverified | 待执行 |
| A-08 | A | 启动/PSS 预算 | 冷启动、PSS | 超过预注册预算即失败 | 历史样本待更新 |
| A-09 | A | 路由 assets 真机 | `.rtap`、TheRouter asm/index | 页面/服务/参数注入失败即失败 | verified：HONOR Android 15，单样本 |
| B-01 | B | 规范摘要/固定向量 | 协议字段 | 与测试向量不一致即失败 | 已有单测 |
| B-02 | B | 未知设备批准/撤销 | 设备公钥 | 未批准拒绝、撤销后拒绝 | 已有单测 |
| B-03 | B | 并发重放 | 相同 nonce | 成功次数 >1 即失败 | 已有单测 |
Expand Down