Tricky Addon Enhanced is an automation and management layer for TrickyStore or TEESimulator, using one native daemon to maintain targets, attestation data, and engine health.
Automated Attestation Management
A clean-room Rust implementation that replaces several recurring shell tasks with a persistent, event-driven service.
Keybox Lifecycle
Validates, backs up, rotates, and fails over among supported keybox sources while protecting a user-supplied custom file.
Patch and VBHash Data
Maintains engine-aware system, boot, and vendor patch levels and can capture or inject verified boot hash properties.
Engine Monitoring
Watches the selected attestation engine, rotates logs, detects conflicts, and exposes operational status in the WebUI.
Native Daemon Architecture
The addon is a clean-room Rust rewrite centered on a single native daemon. It keeps configuration in memory, uses filesystem events to detect newly installed applications, and coordinates tasks that older implementations handled through multiple periodically executed shell processes.
Its primary configuration is stored at /data/adb/tricky_store/config.toml. Operational logs are retained under /data/adb/Tricky-addon-enhanced/logs/, where rotation prevents a single log from growing without limit.
Automation Areas
| Area | Automated Behavior | User Control |
|---|---|---|
| Keyboxes | Validation, backups, scheduled rotation, and source failover. | Choose a source and interval, protect a custom keybox, or enable optional generation. |
| Security patch | Maintains system, boot, and vendor values appropriate to the active engine. | Automatic bulletin retrieval can be replaced with manual values. |
| Target list | Can react to new package installations and exclude recognized Xposed modules. | Optional Magisk DenyList integration and manual package selection remain available. |
| Device identity | Supports verified boot hash handling and Lineage-specific property cleanup. | Individual property behavior can be disabled when it conflicts with biometric enrollment or a ROM. |
Requirements and Installation Behavior
- Install TrickyStore or TEESimulator first; this addon does not replace the attestation engine.
- Upstream documents KernelSU 32234+, APatch 11159+, and Magisk 20.4+ as supported baselines.
- KernelSU and APatch can apply a hot installation. Magisk users should reboot before relying on the new daemon.
- On Magisk, use KSUWebUIStandalone or WebUI X to access the management interface.