Docs: technical reference set (protocols, file formats, security, glossary, lab, ethics)

[tfastdigital]

Adds an educational/technical-reference layer to the docs, grounded in the actual source (real struct offsets, protocol command names, and XML verbs read from the code — not invented).

New docs

• docs/FILE_FORMATS.md — byte-level data structures: GPT, Samsung PIT, Unisoc PAC, MTK scatter, Android sparse, MTK seccfg, ext4 — each tied to the file that parses it.
• docs/PROTOCOLS.md — wire protocols with Mermaid state machines: Sahara→Firehose (EDL), Odin/LOKE, BROM→DA (with the auth-bypass fork), Unisoc FDL1→FDL2, Kirin, and the ADB/fastboot fallback.
• docs/SECURITY_CONCEPTS.md — verified boot chain, FRP, bootloader lock/seccfg, IMEI/EFS, and where crypto is real vs. obfuscation; threat-model table.
• docs/GLOSSARY.md — every acronym/term in one place.
• docs/LAB_SETUP.md — safe practice environment: test devices, drivers, backups, brick recovery.
• docs/LEGAL_AND_ETHICS.md — authorized vs. prohibited use, records to keep, jurisdiction notes.

Changed

• docs/RESOURCES.md — expanded from a link list into an annotated research bibliography.
• README.md — new docs listed in the Documentation section and repo tree.

Docs only — no code changes.

🤖 Generated with Claude Code