Privacy Kit 1.21

Privacy Kit 1.21

Leak fixes (from a fingerprint report showing exposed values — these are in the normal per-app hooking path, so they help everyone):

• Dalvik User-Agent / http.agent no longer leaks the real model — System.getProperty("http.agent") now rewrites the model/Android-version/build tokens (this was the reported SM-S938B leak).
• Screen xdpi/ydpi — the "Coarsen screen metrics" toggle now also covers Resources.getSystem().getDisplayMetrics() (a path it was missing).
• App install time — the APK's File.lastModified() is now spoofed for the app's own paths, not just PackageInfo.firstInstallTime.
• Baseband/radio — added gsm.version.baseband1/2, ro.baseband, ro.boot.baseband (was only gsm.version.baseband).

Framework mode (experimental) — fixed the IMEI path (getImei() routes through PhoneInterfaceManager, not PhoneSubInfoController), added SubscriptionManagerService phone-number + sim-carrier-id + network-country, and build_serial at system_server.

PK Probe 1.21 (attached) — now a self-check LEAK SCANNER: add com.test.gmsprobe to Privacy Kit's scope + a profile, open it, and it reads every surface via multiple paths and flags ⚠ LEAK wherever they disagree (summary + logcat + /sdcard/Download/pkprobe.txt).

Remaining exposures (CPU freq, /proc/cpuinfo SoC, native stat timestamps) need the Zygisk/KPM layer and are tracked separately. After updating, re-toggle Privacy Kit in LSPosed and reboot.