ReSukiSU Ultima

Last post I put up said R4 was probably the final KPM-compatible ReSuki build, and that if anyone leaned on any .KPM modules they'd want to stay put on it.

Well. プロフィール that....
Rather than sit frozen on an old commit forever, I did the other thing you can do when upstream drops a feature you care about - I forked it and started maintaining my own version. It's called ReSukiSU Ultima, and it's grown into a fair bit more than "ReSuki but with KPM bolted back on."
Here's what's in it: 

KPM Is Back
This was the whole reason I started. KPM got dropped upstream (faac309), so Ultima re-adds it on top of current ReSukiSU instead of pinning to a dead commit- .KPM modules keep working, and I can still get every other fix and change that lands upstream. Best of both.

Sentinel 🛡️
This is the big new one (many commits getting this right)

Sentinel is kernel-side root-probe detection. Loads of apps quietly check whether your phone is rooted - banking apps, some games, the usual suspects - by poking at things like /system/bin/su. Sentinel watches for exactly that and reports it to the manager.

From there you can cloak the app. Cloaking hides root from that one app by leaning on the existing アプリ Profile enforcement, so as far as it's concerned it's running on a clean, unrooted phone. No extra modules, no per-app faff.

A couple ways to run it:
- Auto-cloak - just cloak anything new that comes probing, automatically.
- Notify on root requests: Like magisk instead of auto-cloaking, get a notification when a non-cloaked app goes looking, with Grant, Cloak or Ignore right there in the shade. Anything you've already cloaked stays silent, so there's no nagging. 

It's off until you turn it on, and it costs basically nothing when it's off.

Built-in Zygisk
Ultima ships its own Zygisk, so Zygisk modules work without stacking a separate provider on top. It's ptrace-based, deployed under ksud rather than as a module, and it's off by default - flip it on in settings and reboot.

The engine is adapted from ReZygisk by The PerformanC Organization, which is open source under GPL-3.0. More on that below.

The Usual Stuff
Everything you'd expect is still here

SUSFS is now on v2.2.0, and the built-in SUSFS settings keep pace - including the new Open Redirect tab (first manager to have added this!!). It lets you serve an app a replacement file when it opens a path: point the original path an app reads at a clean decoy, and the kernel quietly hands back your version instead. The real file is never touched, and your root/su processes still see the original - only normal apps get sent to the decoy. This is a new SUSFS feature 

And yes, it still has the older manager UI I prefer, and Lady is still my background. Some things are non-negotiable :)

Grab it here;

[UPDATED: 10/07/26 - 35055]
Source lives here: https://github.com/spacealtctrl/ReSukiSU-Ultima
ResukiSU Ultima Manager: [Release], [Spoofed]
Anykernel3.zip: Here (Sony Xperia 1 V)

Credit Where It's Due
If you read my first post, you know I care about this bit.
None of this is built in a vacuum. Ultima stands on:
- KernelSU (weishu) - where すべて of this started.
- SukiSU-Ultra and ReSukiSU - the fork line Ultima continues from.
- ReZygisk by The PerformanC Organization - the Zygisk engine, kept open source so people like me can build on it.
- SUSFS (simonpunk) - the root-hiding backbone.

All of it is GPL, すべて of it stays credited, and Ultima's source is public so you can check exactly what's going into your kernel.
As always, this is what I run on my own daily driver, so it gets tested properly before it goes out. Flash it, break it, tell me what broke. 

Thanks for testing, and thanks for sticking around.
Over and out,

ˢᶜᵒᵗᵗඞ 🛸
@spacealtctrl