

It passes if the following properties match a known certified build: SafetyNet’s CTS profile check verifies the build profile against Google’s database of CTS-certified builds. fastboot: Revert to Android 11 method of checking lock status.init: Set properties to make SafetyNet pass.These values override the ones from the kernel command line, so Google Play Services is made unaware of the unlocked bootloader. ProtonAOSP sets fake values for these properties at boot. SafetyNet checks some system properties passed by the bootloader (via the kernel command line) to determine whether the bootloader is unlocked, and if so, fails the basic integrity check. Please note that these workarounds may break at any time, and custom ROMs will not be able to pass SafetyNet forever.

ProtonAOSP uses a variety of workarounds to pass Google’s SafetyNet attestation checks without breaking any parts of the system.
