TRANSPARENCY & HARDWARE AUDIT
Unfiltered disclosures regarding hardware boundaries, proprietary vendor blobs, telemetry elimination, and build reproducibility.
1. Why Android 17 / 14+ is Blocked on OnePlus 3T
HARDWARE INCOMPATIBLEIn the custom ROM community, projects frequently claim forward compatibility with modern Android versions for marketing purposes. Cyronix Dev & Security adheres to strict engineering honesty. The OnePlus 3T is powered by the Qualcomm Snapdragon 821 (MSM8996pro). The technical obstacles preventing stable modern Android support are physical:
| Constraint Layer | MSM8996 / 3.18 Reality | Modern Android Requirement | Result |
|---|---|---|---|
| Linux Kernel | 3.18.124-perf | Kernel 5.4+ or 6.1+ GKI | BLOCKED |
| eBPF Traffic Engine | Missing backport & LLVM JIT | Mandatory Android 12+ networking | BLOCKED |
| 64-bit Binder | 32-bit legacy binder IPC | Strict 64-bit IPC structures | BLOCKED |
| Qualcomm Adreno 530 | Vulkan 1.0 (No ASTC / Vulkan 1.3) | Android UI Vulkan 1.3 render path | GLITCHES |
| Qualcomm Vendor Blobs | Closed-source 2019 OxygenOS blobs | Treble HIDL/AIDL HAL 2.0+ | CAMERA/RIL FAIL |
Attempting to force Android 14+ on this device leads to random modem restarts, camera HAL crashes, rapid battery drain, and thermal throttling. Cyronix OS stays on Android 11 (API 30) because it is the highest version providing flawless stability, battery endurance, and complete hardware acceleration.
2. Proprietary Vendor Blob Audit
Smartphones require binary firmware blobs to initialize the modem, GPU, fingerprint scanner, and camera sensors. Cyronix OS confines these blobs strictly to /vendor and enforces strict SELinux domain boundaries:
- Cellular Modem (RIL): Closed-source Qualcomm QMI blobs isolated to
rildSELinux domain without network sockets. - Adreno 530 GPU: Proprietary libGLES/libEGL driver libraries executed in unprivileged process memory.
- Goodix / FPC Fingerprint: Hardware keystore operates inside Qualcomm TrustZone (TEE); biometrics are never stored in Android userspace.
- Zero Tracking Blobs: All OnePlus analytics packages (
OPBugReport,OnePlusSystemService) are completely purged from the vendor tree.
3. Outbound Network & Telemetry Disclosures
Cyronix OS executes zero unsolicited outbound network calls. The table below lists every single potential network contact point:
| Service | Destination Endpoint | Frequency | Configurable |
|---|---|---|---|
| OTA Updates | https://cyronixos.cyronixsecurity.com/api/updates |
Manual or 24-hr check | Toggleable / User Controlled |
| NTP Time Sync | pool.ntp.org (over UDP 123) |
On boot / Network change | Yes (via Settings) |
| Captive Portal Check | Disabled by default (or user-defined URL) | On Wi-Fi association | Disabled by default |
| Crash Telemetry | NONE — Logs saved locally only | Never transmitted | N/A (Zero Telemetry) |
4. Cryptographic Build Signatures
All production builds (cyronix_oneplus3-user) are signed with unique 4096-bit RSA keys managed by Cyronix Dev & Security. AOSP test keys (testkey) are strictly prohibited from release candidates. Verify the signature fingerprint against the published key in our Security Policy.