Audit Android Special Access

Mission

Review synthetic overlay, accessibility, notification, VPN and install-source assignments.

Required work

1. Classify each special-access category
2. Verify the claimed feature that requires it
3. Flag combinations that increase risk
4. Document access to revoke or monitor

Evidence to produce

A high-impact access register with owner, purpose, necessity and revocation decision.

Quality checks

The result must identify its source data, separate observation from assumption, preserve supplied originals, and explain any limitation or uncertain conclusion.