reverse-skills-max: initial public release (restored, redacted, hardened)

reverse-skill-repo/CTF-Sandbox-Orchestrator/competition-firmware-layout/references/firmware-layout.md

@@ -0,0 +1,27 @@
+# Firmware Layout Checklist
+
+## First Pass
+
+- Identify outer container, partition headers, compression, checksums, and appended images
+- Record partition names, offsets, sizes, filesystem types, mount points, and hashes
+- Separate bootloader, kernel, initramfs, rootfs, config, and update payloads
+
+## Boot Or Update Chain
+
+1. Boot ROM or vendor bootstrap
+2. Bootloader or secure boot stage
+3. Kernel and initramfs
+4. Root filesystem init path and services
+5. Update verifier, installer, and post-install hooks
+
+## Evidence To Keep Together
+
+- Boundary facts: offsets, sizes, signatures, hashes, partition names
+- Consumed state: keys, certs, passwords, default configs, scripts, or service files
+- Reachable effect: debug service, auth branch, update bypass, or recovered artifact
+
+## Common Pitfalls
+
+- Editing extracted files before recording pristine offsets and hashes
+- Mixing config recovered from one partition with behavior sourced from another without proving the link
+- Treating an extracted secret as decisive without showing where the boot or update flow actually consumes it