Files
vphone-cli/research/kernel_patch_jb/runtime_verification/README.md
Lakr 5388e0c9c5 Squash merge startup-hang-fix into main
Prefix research patch comparison doc and normalize root markdown names

Rename research root markdown files to scoped topic names
2026-03-06 02:42:12 +08:00

49 lines
1.5 KiB
Markdown

# JB Runtime Verification Runbook
This folder contains runtime + IDA verification artifacts for jailbreak kernel patches.
## Quick Commands
Run runtime verification against a kernel file:
```bash
make jb_verify_runtime KERNEL_PATH=/path/to/kernelcache.research.vphone600 WORKERS=8
```
Refresh patch-doc tails from latest reports:
```bash
make jb_update_runtime_docs
```
## Core Artifacts
- `runtime_verification_report.json`
- Source of truth for runtime patch hit/no-hit status.
- Includes scheduler coverage (`methods_scheduled`, `doc_methods_unscheduled`).
- `runtime_verification_summary.md`
- Human-readable summary.
- `runtime_patch_points.json`
- Flat list of runtime patch points used for IDA join.
- `ida_runtime_patch_points.json`
- Runtime points enriched with IDA function/disassembly context.
## Current Baseline (2026-03-05)
- Kernel: `/Users/qaq/Documents/Firmwares/PCC-CloudOS-26.3-23D128/kernelcache.research.vphone600`
- Runtime result: `22 hit / 2 nohit / 0 error`
- Default `KernelJBPatcher.find_all()` scheduled methods: `7`
- Doc methods unscheduled: `17`
- No-hit methods:
- `patch_post_validation_additional`
- `patch_syscallmask_apply_to_proc`
## Regression Gate
Treat verification as regressed if any of the following occurs:
- `status=error` appears in `runtime_verification_report.json`.
- A previously `hit` method becomes `nohit` without explicit scheduler/matcher change.
- `methods_scheduled_count` changes unexpectedly from intended plan.
- `doc_methods_unscheduled` changes unexpectedly.