EOL Android Pixel model paired with an OS version newer than its last update
br.android_model_os_exceeds · convicts
What it catches
The UPPER bound of the model<->OS-version axis (br.android_model_os_predates is the lower/launch bound). A device cannot run an Android NEWER than its LAST update. Pixels 2-5 are END-OF-LIFE with a FIXED last version — Google shipped 3 years of OS updates pre-Pixel-8, so Pixel 2 topped out at Android 11, Pixel 3 at 12, Pixel 4 at 13, Pixel 5 at 14, and these will NEVER advance (support ended). A pinned EOL Pixel whose platformVersion major EXCEEDS its last release is a fork/randomizer pairing an old model with an impossible-for-it new OS — the case the launch lower-bound misses (old model + NEW OS, vs new model + old OS). CONVICTING (w0.6). FP-SAFE: an EOL device's maximum OS is fixed by the manufacturer's ended support; scoped ONLY to Pixels 2-5 (Pixel 6+ still receive updates, so their max is open and they are excluded). EXPERIMENTAL. GROUNDED LIVE: KS_DEVICE='Pixel 7' (a newer-Android device) + KS_FORGE_JS_MODEL='Pixel 2' (last OS 11) FIRES android_model_os_exceeds (the platformVersion exceeds 11); an in-window pairing (e.g. Pixel 5 on Android 11-14) does NOT fire. Together with android_model_os_predates this closes the model<->OS window on BOTH sides — a coherent Android device's OS must lie within its model's real support window.
Signals it reads
browser.android_model_os_exceeds
How it fires
present
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.