zorin-device-core-aosp
Privileged Android backend for Zorin Trust Runtime. It is separate because it is built into an AOSP product, has Soong/SELinux integration and controls capabilities unavailable to a normal APK.
Services
Section titled “Services”dev.zorin.core.IDeviceCore/default— bounded observability API.dev.zorin.trust.ITrustCore/default— identity, policy, bounded owner proofs and future USB/credential control plane.
The trust service is fail-closed until a KeyMint/Keystore2 provider is wired. There is no software-key fallback and no raw signing endpoint.