Audior - how to verify that it works? - notifications?

user123892137

Hello,
I've been testing the Auditor app and remote verification for few days now, phone gets connected to remote server, everything seems to be configured, however i have no idea how to properly verified that it is working or it would work in case of something suspicious happening.

I see it detects when OEM unlocking and ADB is ON or OFF, but should any changes to those options trigger notifications?

When or in what case email notfications would be triggered?

Is there any "easy" or documented way to make auditor unhappy enough to send notification?

The only info about auditor i found is https://attestation.app/about which is OK for brief overview, but nowehere near enough to answer questions above.

So far i tried:

enabling dev options and ADB (no notification even when initialization was done without those options)
unlocking bootloader (which wipes data so auditor did nothing as it was wiped)
trying reconncet to auditor with unlocked bootloader (error 400)
locking bootloader and reinit remote verification (just appered as new device)

none of attempts aboved notify me about anything.

GrapheneOS

user123892137 It sends email alerts when a valid attestation isn't received for the configured time period. It's easy enough to trigger that by blocking it sending alerts. Causing it to be unable to send a valid attestation would generally involve an OS exploit. It doesn't support configuring alerts for having an outdated patch level or sensitive OS settings changing but those are planned features.