competition-firmware-layout

1# Competition Firmware Layout
2 
3Use this skill only as a downstream specialization after `$ctf-sandbox-orchestrator` is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to `$ctf-sandbox-orchestrator` first.
4 
5Use this skill when the hard part is understanding how a firmware image is structured, booted, updated, and turned into reachable device behavior.
6 
7Reply in Simplified Chinese unless the user explicitly requests English.
8 
9## Quick Start
10 
111. Preserve the original image, extracted partitions, unpacked filesystems, and patched copies as separate artifacts.
122. Map outer container, partition table, bootloader, kernel, rootfs, config, and update metadata before editing anything.
133. Track the boot or update chain in order instead of jumping straight to the most interesting file.
144. Record keys, signatures, offsets, partition boundaries, and init entrypoints in one compact evidence chain.
155. Reproduce the decisive secret, branch, or reachable service from the smallest extracted path.
16 
17## Workflow
18 
19### 1. Establish Image Layout
20 
21- Identify container type, partition headers, compression, filesystem type, and any appended or nested images.
22- Record offsets, sizes, hashes, mount points, and partition names before extraction mutates anything.
23- Separate bootloader, kernel, initramfs, rootfs, config blobs, and update metadata as different layers.
24 
25### 2. Trace Boot Or Update Flow
26…