igorcv88/DFReroot-S25U v2.0.2-zzic

DFReroot 2.0.2-zzic (v2.0.2-zzic)

on GitHub

DFReroot 2.0.2-zzic — Galaxy S25 Ultra SM-S938B / S938BXXUCZZIC

Install df_installer_2.0.2-zzic.apk first; df_reroot_2.0.2-zzic.apk is also
bundled inside it, so it does not need to be sideloaded separately.

Compatibility state — read before installing

The fail-closed S25U_ZZIC profile refuses to run unless the device matches
the pinned firmware exactly. Runtime compatibility on this firmware is
UNVERIFIED: see docs/S25U_ZZIC_COMPATIBILITY.md for the gate matrix
and which gates still need on-device evidence.

On the exact ZZIC target this build will refuse to root the device, by
design, at two boundaries that no runtime option overrides:

1. [DFR][USERSPACE] ZZIC_CRASHDUMP_IDENTITY FAIL required hash is not pinned
   — crash_dump64's pristine SHA-256 has never been captured from hardware.
2. [DFR][MODULE] ZZIC_MODULE_POLICY=REFUSE_UNVERIFIED — the bundled
   android15-6.6 module is Gate-G UNVERIFIED against this kernel.

Running it is therefore an evidence-collection step: the hop into
network_stack and the [DFR][*] diagnostics still execute and are what
docs/HANDOFF.md asks for. Nothing is written to the page cache.

Checksums

831a126d98b3cf26cdf8c06860d57a6ab43a023a384c6022cc18c29dda2d88ab  df_reroot_2.0.2-zzic.apk
de388d292c9340b91247cbbe7dfbb5bdd71d5a0e0f170c3e7049aff1898dfae1  df_installer_2.0.2-zzic.apk
1bc7522c370e2b7a3a23f8b25727628f041278906a8e02604155034f12f8ecb8  build-provenance.txt

Build provenance (toolchain, commit, payload hashes) is attached as
build-provenance.txt.