Home / Features
Product Catalog

CYRONIX OS
FEATURE SYSTEM.

Every capability in Cyronix OS is audited and categorized. We never mark a feature as implemented without verifiable proof in the codebase or physical hardware.

Kernel Hardening

IMPLEMENTED

Yama LSM ptrace restrictions, software Privileged Access Never (PAN), PANIC_ON_OOPS, list debugging, and branch predictor mitigation against speculative execution leaks.

Android Layer: Linux Kernel (3.18.124-perf)
Device Dependency: Snapdragon 821 Board Support
Config: vendor/cyronix/kernel/cyronix_hardening.config
Inspect Security →

USB Restricted Mode

IMPLEMENTED

When the device is locked, new USB connections are refused by the kernel, mitigating physical forensic extraction rigs and malicious BadUSB attacks.

Android Layer: Trust HAL & Kernel
Device Dependency: Kernel sysctl (deny_new_usb)
Status: Enabled by default in Release 1.5.0
Inspect Security →

Zero OS-Level Telemetry

IMPLEMENTED

Completely de-Googled core. Zero crash reporters, zero advertising identifiers, zero analytics SDKs, and zero background beaconing packets.

Android Layer: System Framework & Core Services
Device Dependency: Hardware Independent
Verification: Security Center Permission Overview
Inspect Privacy →

Per-App Network Firewall

IMPLEMENTED

Cut any application off from cellular data or Wi-Fi with a single toggle in Security Center. Enforced at the Linux netfilter kernel UID level.

Android Layer: Netfilter / iptables / Trust
Device Dependency: Kernel xt_owner match
Location: Security Center > App Network Control
Inspect Privacy →

Auto-Wipe on Failed Unlocks

IMPLEMENTED

Opt-in protection that automatically erases userdata after 10 consecutive incorrect passcode attempts to defeat automated brute-force rigs.

Android Layer: DevicePolicyManager
Device Dependency: None
Safety: Requires explicit full-screen consent
Inspect Control →

Keep My Recovery Protection

IMPLEMENTED

Prevents operating system updates from overwriting an owner-installed CYRONIX Recovery OS with stock boot scripts.

Android Layer: Init & System Update
Property: persist.vendor.recovery_update
Introduced: Release 1.4.1
Inspect Recovery →

CYRONIX Design System (1.6.0)

IMPLEMENTED

OLED black background (#0B0F14), surface (#121820), Space Grotesk tabular numerals, Inter UI font, and squircle Quick Settings tiles at 60 FPS on Adreno 530.

Android Layer: Framework Overlays & SystemUI
GPU Target: Adreno 530 (Zero translucent blur cost)
Fonts: Inter 4.1, Space Grotesk 2.0, JetBrains Mono
Inspect Customization →

CYRONIX Keyboard

IMPLEMENTED

Customized AOSP keyboard with rounded key geometry, teal action key, Inter font labels, 60/40ms preview motion, and complete zero-network isolation.

Android Layer: LatinIME (packages/inputmethods)
Privacy: Zero internet permission; offline dictionary
Themes: CYRONIX Dark / Light / System
Inspect Customization →

Android Verified Boot (AVB 2.0)

DEVICE DEPENDENT

Cryptographic chain of trust verified at bootloader initialization. NOT AVAILABLE on OnePlus 3T due to 2016 bootloader design lacking vbmeta partition.

Android Layer: Secondary Bootloader (SBL)
Status on OP3T: NOT AVAILABLE (Documented Honestly)
dm-verity: System partition integrity enforced
Read Transparency →

Android 17 Platform Upgrade

BLOCKED ON OP3T

Blocked on OnePlus 3T MSM8996pro hardware due to 3.18 kernel limits, eBPF requirements, and 64-bit binder constraints. Planned for future modern device tiers.

Platform Target: Android 17 / API 37
Constraint: Qualcomm 32-bit vendor blob boundary
Investigation: CYRONIX_ANDROID17_MIGRATION.md
View Roadmap →