Session 02 — 2026-03-16b

Duration: ~2 hours · Phases: 02 (Rooting), 01 Step 7 (HAL inspection)

---

Key Events

• Magisk v30.7 APK installed; stock boot.img patched on-device; pulled to firmware/na1-magisk-boot.img
• fastboot boot (test boot) stalled at “Sending” — fastboot flash/boot confirmed broken
• Flashed via EDL: tools/edl-run w boot firmware/na1-magisk-boot.img — success
• adb shell su -c "id" → uid=0(root) ✅
• udev rules fixed: wrong VID (2207 → 18d1), missing PID (d00d for fastboot)

HAL Inspection (Phase 01 Step 7)

• E-ink: entirely kernel-side. No vendor HAL blob. Driver = onyx_epdc_fb (platform driver), waveform SPI flash = epd_spi_flash
• EMR: Wacom I2C digitizer, wacom_ts driver, i2c@c1b6000/wacom@09
• Both built into kernel binary (not loadable modules)
• sensors.NoteAir.so = only device-specific HIDL blob

Phase Status After

Phase 01 ✅ Complete · Phase 02 ✅ Complete · TWRP next