docs: record Y2JB homebrew chain

2026-10-02 20:41:52 +01:00
parent 38e68cf165
commit 0e48387f70
3 changed files with 148 additions and 6 deletions
@@ -106,6 +106,19 @@ Release discovery may propose newer versions, but it must create a new candidate
 record and require review. It must never overwrite the evidence for an already
 approved digest.

+For integration with Y2JB Autoloader, keep the manager as the executor of the
+post-jailbreak chain. The autoloader should stop after Relapse and an externally
+reachable, reviewed ELF loader are ready. Do not duplicate kstuff-lite or
+ShadowMountPlus in `autoload.txt`, because their execution would bypass manager
+hash checks, dependency handling and audit records. The default loopback-only
+loader must be replaced or explicitly configured for the LAN integration; access
+must remain restricted by firewall to `192.168.20.30 → 192.168.40.14:9021`.
+
+The first manager profile should encode kstuff-lite, positive startup evidence,
+at least 4000 ms delay, then ShadowMountPlus. An open port is not positive startup
+evidence. Runtime state is valid only for the current console boot and must be
+invalidated after reboot or ambiguous connectivity loss.
+
 ## Controlled runtime-test procedure

 The current Relapse flow ends at `elfldr is listening on port 9021`; there is no R2