Privacy Kit 1.22

Privacy Kit 1.22

Module APK: PrivacyKit-1.22.apk · Companion: PKProbe-1.22.apk · Native: privacykit-zygisk-v1.3.zip · Kernel tier: privacykit_kpm.kpm

App

• KPM content pipeline: the optional Kernel Patch Module now receives content coherent with the device each profile impersonates — the app asks your configured AI provider to render a matching /proc/cpuinfo + per-cluster CPU frequencies for the spoofed SoC, and pushes them (plus a deterministic /proc/net/if_inet6 from the spoofed Wi-Fi MAC and the install timestamp) into the kernel. New "Sync KPM content (AI)" action in Developer Settings.

PK Probe (companion) — rewritten as a baseline-diff verifier

Read every identifier via every path unhooked → save a snapshot → read again hooked → diff each path: changed = hooked, unchanged = leaking the real value. Per-path granularity catches "getter spoofed but /proc, /sys, getprop or native still leaks". Placeholder constants (02:00:… MAC, unknown serial) are ignored; boot-token guard avoids false positives across a reboot. Flow: install unhooked → SAVE BASELINE → add com.test.gmsprobe to the LSPosed scope + apply a full profile → relaunch → COMPARE.

Kernel tier (Tier-2, APatch only) — privacykit_kpm.kpm

A loadable KernelPatch Module that spoofs file timestamps, /proc/cpuinfo, CPU cluster frequencies and /proc/net/if_inet6 at the kernel (below every app and service). Built against KernelPatch 0.13.5 (AArch64). apd kpm load /data/local/tmp/privacykit_kpm.kpm.

⚠️ KPM is experimental and NOT yet verified on-device. It requires APatch with KPM support. A bad kernel module can brick boot — load it only on a device you can recover (fastboot/OrangeFox). It is written fail-open (any error → the real syscall stands), and stays off by default in the app. If it fails to load, rebuild it against your APatch's exact KernelPatch version.

Signing: same 95:E9 cert as prior releases — installs over an existing Privacy Kit.