# Kernel Analysis Vphone600

Analyze vphone600 kernel artifacts using the local symbol database and XNU source tree.

- Repository: https://github.com/Lakr233/vphone-cli (16348 stars)
- Category: Data and ML
- License: MIT
- Last updated: 2026-10-31
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add Lakr233/vphone-cli --skill kernel-analysis-vphone600 -g -a claude-code -y`
Codex: `npx skills add Lakr233/vphone-cli --skill kernel-analysis-vphone600 -g -a codex -y`
Cursor: `npx skills add Lakr233/vphone-cli --skill kernel-analysis-vphone600 -g -a cursor -y`
Gemini CLI: `npx skills add Lakr233/vphone-cli --skill kernel-analysis-vphone600 -g -a gemini-cli -y`

## Description

Analyze vphone600 kernel artifacts using the local symbol database and XNU source tree. Use when working on kernel reverse engineering, address-to-symbol lookup, release-vs-research kernel comparison, or patch analysis for vphone600 variants in this repository.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Kernel Analysis Vphone600

Use the local `Research/KernelSymbols` dataset as the first source of truth for symbol lookup.
Use `Research/Reference/xnu` as the source-level reference for semantics and structure.

## Required Paths

- `Research/KernelSymbols/kernel_symbols.db`
- `Research/KernelSymbols/kernel_index.tsv` (plain-text `kernel_name → json_path` index with `json_sha256`)
- `Research/KernelSymbols/json/`, the recovered symbol datasets:
  - `kernelcache.release.vphone600.bin.symbols.json`
  - `kernelcache.research.vphone600.bin.symbols.json`
- `Research/Reference/xnu`

The `json_path` column in both the database and `kernel_index.tsv` records the absolute path from symbolication
time and may not match this checkout; resolve the JSON files under `Research/KernelSymbols/json/` instead.

If `Research/Reference/xnu` is missing, create it with a shallow clone:

```bash
mkdir -p Research/Reference
git clone --depth 1 https://github.com/apple-oss-distributions/xnu.git Research/Reference/xnu
```

## Workflow

1. Confirm scope is `vphone600` only.
2. Query `kernel_symbols.db` to select `release` or `research` dataset by name.
3. Load the linked JSON symbol file and perform symbol/address lookups.
4. Cross-reference candidate code paths in `Research/Reference/xnu`.
5. Report findings with explicit kernel name, symbol path, and address.

## Output Rules

- Always include which kernel was used: `kernelcache.release.vphone600` or `kernelcache.research.vphone600`.
- Always include exact symbol name and address when available.
- Always distinguish fact from inference when mapping symbols to XNU behavior.
- Avoid claiming coverage outside vphone600 unless explicitly requested.

## References

- Read `references/kernel-info-queries.md` for reusable SQL and shell query snippets.