R09 — Root Lost After Firmware Flash
| Severity | Trigger | Mitigation |
|---|---|---|
| 🟡 Medium | Full OTA update | Expected behaviour — re-root using Phase 02 procedure |
R10 — Onyx Telemetry
| Severity | Trigger | Mitigation |
|---|---|---|
| 🟡 Medium | Unblocked network on test device | Install AFWall+ immediately after rooting. Block all Onyx cloud services during development. |
R11 — GPL Compliance
| Severity | Trigger | Mitigation |
|---|---|---|
| 🟡 Medium | Publishing firmware that contains Onyx kernel binary | Do not redistribute modified boot.img binaries in a way that implies GPL compliance. Onyx has not published GPL-compliant kernel sources. Note kernel binary status in all releases. |