{"version": 2, "width": 120, "height": 32, "title": "txm-boot", "env": {"TERM": "xterm-256color"}}
[0.1112, "o", "[profile] validated ios-27.1-t8160-duo (16 SHA256 pins, 23 byte checks, 0 optional sites)\r\n"]
[0.1118, "o", "  ____ _               ____\r\n / ___| |   __  __    |  _ \\ _   _ _ __  _ __   ___ _ __\r\n| |  _| |   \\ \\/ /____| |_) | | | | '_ \\| '_ \\ / _ \\ '__|\r\n| |_| | |___ >  <_____|  _ <| |_| | | | | | | |  __/ |\r\n \\____|_____/_/\\_\\    |_| \\_\\\\__,_|_| |_|_| |_|\\___|_|\r\n    the guarded-world hypervisor harness · Antid0te\r\n"]
[0.2241, "o", "[cpu] 4/6 target CPUs selected; boot MPIDR=0x80000000\r\n"]
[0.2248, "o", "[txm-only] patched DT memory-map ranges (TrustCache/TXM/DeviceTree)\r\n"]
[0.2285, "o", "plugin: execution order:\r\n"]
[0.2291, "o", "[txm-only] profile ios-27.1-t8160-duo -> frame-type shift 3, context layout 217\r\n[txm-only] TXM image: va=0xfffffff017004000 pa=0x4d68000 size=0xa444000 entry_va=0xfffffff017084000\r\n[txm-only] harness allocator starts at gpa 0xf2ac000\r\n"]
[0.2291, "o", "[txm-only] frame table: gpa=0xf2ac000 size=0x204000 (2097154 entries)\r\n"]
[0.2294, "o", "[txm-only]   seg va=0xfffffff017004000 pa=0x4d68000 size=0x1c000 prot=0x60000000000080 → rwx (idx C)\r\n"]
[0.2294, "o", "[txm-only]   seg va=0xfffffff017020000 pa=0x4d84000 size=0x10000 prot=0x60000000000000 → rwx (idx C)\r\n"]
[0.2294, "o", "[txm-only]   seg va=0xfffffff017030000 pa=0x4d94000 size=0x50000 prot=0x40000000000080 → rwx (idx C)\r\n[txm-only]   seg va=0xfffffff017080000 pa=0x4de4000 size=0x8000 prot=0x40000000000080 → rwx (idx C)\r\n"]
[0.2294, "o", "[txm-only]   seg va=0xfffffff017088000 pa=0xf1a4000 size=0x4000 prot=0x60000000000000 → rwx (idx C)\r\n[txm-only]   seg va=0xfffffff01708c000 pa=0xf1a8000 size=0x4000 prot=0x60000000000080 → rwx (idx C)\r\n"]
[0.2295, "o", "[txm-only]   seg va=0xffffff8000000000 pa=0x92cc000 size=0x18000 prot=0x40000000000080 → rwx (idx C)\r\n"]
[0.2301, "o", "[txm-only]   seg va=0xffffff8000018000 pa=0x92e4000 size=0x1b20000 prot=0x60000000000080 → rwx (idx C)\r\n"]
[0.2301, "o", "[txm-only]   seg va=0xffffff8001b38000 pa=0xf7e0000 size=0x484000 prot=0x60000000000000 → rwx (idx C)\r\n[txm-only] mapped 9 TXM high-VA segments into TTBR1\r\n"]
[0.2343, "o", "[txm-only] identity-mapped guest RAM [0x3000000,0x41800000) into TTBR0\r\n"]
[0.2362, "o", "[txm-only] mapped PAPT aperture [0x10003000000,0x10041800000) -> PA [0x3000000,0x41800000)\r\n[txm-only] VBAR = 0x1006c000 (BRK-filled vector page)\r\n"]
[0.2363, "o", "[txm-only] entering TXM: PC=0xfffffff017084000 X0(args)=0xff38000 SP=0xff34000 ttbr0=0xff4c000 ttbr1=0xff50000\r\n"]
[0.2363, "o", "[SPTM] TXM Bootstrap\r\n"]
[0.2363, "o", "[SPTM] SPTM Retype (0xf4b0000, 0x0, TXM_LOG)\r\n[SPTM] SPTM Retype (0xf4b4000, 0x0, TXM_LOG)\r\n"]
[0.2364, "o", "TXM LOG: setup logging: 32768 bytes (256 | 128)\r\n"]
[0.2364, "o", "TXM LOG: system supports DIT feature\r\n"]
[0.2364, "o", "TXM LOG: unable to find esdm-fuses property in /chosen\r\n"]
[0.2364, "o", "TXM LOG: unable to find vmm-present property in /defaults\r\nTXM LOG: resolved system platform identity: 1\r\n"]
[0.2365, "o", "TXM LOG: Code Signing Monitor Image4 Module Version 7.0.0: Sat Aug 15 16:52:24 PDT 2026; root:AppleImage4_txm-374~7220/libimage4_TXM/RELEASE_ARM64E\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[pdmg]: failed to read nonce slot data: 2\r\nTXM LOG: libimage4: magazine[cptx]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[dvdi]: failed to read nonce slot data: 2\r\nTXM LOG: libimage4: magazine[c1bt]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[c1ab]: failed to read nonce slot data: 2\r\nTXM LOG: libimage4: magazine[c1gn]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[c1sm]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[d1ma]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[c1ge]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[c1er]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[c1ai]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: magazine[c1al]: failed to read nonce slot data: 2\r\n"]
[0.2365, "o", "TXM LOG: libimage4: failed to read from boot manifest: p = love, name = love: 2\r\nTXM LOG: libimage4: failed to read from boot manifest: p = vnum, name = love: 2\r\n"]
[0.2366, "o", "TXM LOG: libimage4: no boot uuid set\r\n"]
[0.2366, "o", "[SPTM] SPTM Retype (0xf4b8000, 0x0, TXM_MALLOC_PAGE)\r\n"]
[0.2366, "o", "[SPTM] SPTM Retype (0xf4bc000, 0x0, TXM_MALLOC_PAGE)\r\n"]
[0.2366, "o", "[SPTM] SPTM Retype (0xf4c0000, 0x0, TXM_MALLOC_PAGE)\r\n"]
[0.2366, "o", "[SPTM] SPTM Retype (0xf4c4000, 0x0, TXM_MALLOC_PAGE)\r\n"]
[0.2366, "o", "[SPTM] SPTM Retype (0xf4c8000, 0x0, TXM_ADDRESS_SPACE_TABLE)\r\nTXM LOG: unable to find sepfw-never-boot property in /chosen\r\n"]
[0.2366, "o", "[SPTM] SPTM Retype (0xf4cc000, 0x0, TXM_SEP_SECURE_CHANNEL)\r\nTXM LOG: setup the shared page for the secure channel\r\n"]
[0.2366, "o", "TXM LOG: system SecureUI state: 0\r\nTXM LOG: unable to find research-enabled property in /chosen\r\n"]
[0.2366, "o", "TXM LOG: unable to find research ERM property in /chosen\r\n"]
[0.2367, "o", "TXM LOG: unable to find iboot-build-variant property in /chosen/iBoot\r\n[SPTM] SPTM Retype (0x4dec000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4df0000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4df4000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4df8000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4dfc000, 0x3c, 0x3c)\r\n[SPTM] SPTM Retype (0x4e00000, 0x3c, 0x3c)\r\n[SPTM] SPTM Retype (0x4e04000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e08000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e0c000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e10000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e14000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e18000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e1c000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e20000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e24000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e28000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e2c000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e30000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e34000, 0x3c, 0x3c)\r\n[SPTM] SPTM Retype (0x4e38000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e3c000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e40000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e44000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "[SPTM] SPTM Retype (0x4e48000, 0x3c, 0x3c)\r\n"]
[0.2367, "o", "TXM LOG: loaded external trust cache modules: 1/5\r\nTXM LOG: platform code only policy: 0\r\n"]
[0.2367, "o", "TXM LOG: restricted execution mode support: 0\r\n"]
[0.2368, "o", "TXM LOG: successfully queried the UniqueDeviceIDv2 from the device tree\r\n[SPTM] SPTM Register Callback (0, 0xfffffff01703da24, 2)\r\n"]
[0.2368, "o", "[SPTM] SPTM Register Callback (1, 0xfffffff01703d890, 1)\r\n"]
[0.2368, "o", "TXM LOG: build variant: txm.iphoneos.release.TrustedExecutionMonitor_Guarded-217.0.2\r\nTXM LOG: fusing: 0x00000000\r\n"]
[0.2368, "o", "TXM LOG: virtualized: 0\r\n"]
[0.2368, "o", "TXM LOG: build type: 0\r\nTXM LOG: device type: 1\r\n"]
[0.2368, "o", "TXM LOG: research configuration: 0\r\n"]
[0.2368, "o", "TXM LOG: extended research configuration: 0\r\n[SPTM] TXM boot complete — firing on_txm_ready\r\n"]
[0.2375, "o", "[cpu] booting CPU1 MPIDR=0x80000001\r\n"]
[0.2375, "o", "[SPTM] SVC #0x26 — Enable Interrupts\r\n"]
[0.2375, "o", "[txm-only] CPU1 stack=0xfee8000 GetBuildVariant=txm.iphoneos.release.TrustedExecutionMonitor_Guarded-217.0.2\r\n"]
[0.2375, "o", "[cpu] CPU1 booted\r\n"]
[0.2378, "o", "[cpu] booting CPU2 MPIDR=0x80000002\r\n"]
[0.2378, "o", "[SPTM] SVC #0x26 — Enable Interrupts\r\n"]
[0.2379, "o", "[txm-only] CPU2 stack=0xfeec000 GetBuildVariant=txm.iphoneos.release.TrustedExecutionMonitor_Guarded-217.0.2\r\n[cpu] CPU2 booted\r\n"]
[0.2383, "o", "[cpu] booting CPU3 MPIDR=0x80000003\r\n"]
[0.2383, "o", "[SPTM] SVC #0x26 — Enable Interrupts\r\n[txm-only] CPU3 stack=0xfef0000 GetBuildVariant=txm.iphoneos.release.TrustedExecutionMonitor_Guarded-217.0.2\r\n"]
[0.2383, "o", "[cpu] CPU3 booted\r\n[txm-only] dispatching on_txm_ready on CPU0\r\n"]