kernel: RV1106 6.18.46 patch series + hermetic build wrapper (P1)

- patches/: the pristine-6.18.46 -> WardenOS delta as a 13-patch, subsystem-split
  series (223 files, ~136K lines: clk, pinctrl, DTs/mach, usb-phy, VOP/panel/rgb,
  mailbox, pvtm, rknpu, rga, aic8800 wifi, audio codec, thermal/rtc/adc/gmac/touch).
  Verified: every patch applies cleanly onto pristine (git apply --check), the full
  series reproduces the hardware-verified tree, and the applied source configures +
  builds the warden dtb + rockchip DRM drivers (rc=0).
- build/build-kernel.sh: fetch+verify pristine (sha256-pinned) -> apply series ->
  warden_defconfig -> zImage + rv1106-warden.dtb. build/warden_defconfig captured.
- CI: `patches-apply` (GitHub-hosted, cached tarball) enforces the series applies;
  `kernel-build` (self-hosted warden-sdk runner, dispatch-gated until registered)
  runs the full build and uploads the image.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017wB8KB3MMQztRDXCMCkPrf

patches/README.md

@@ -0,0 +1,40 @@
+# RV1106 kernel patch series (pristine linux-6.18.46 → WardenOS)
+
+The delta that forward-ports the vendor Rockchip 5.10.160 RV1106 support onto a
+pristine upstream **linux-6.18.46**, as a reviewable, subsystem-split series. Every
+patch applies cleanly onto pristine 6.18.46 (`git apply --check`), and the whole set
+reproduces the 223-file / ~136K-line delta that boots and is hardware-verified on
+`warden-c8a3` (see `../kernel/rv1106-enablement/`).
+
+Build it with `../build/build-kernel.sh` (fetch pristine → apply these → configure
+with `../build/warden_defconfig` → `zImage` + `rv1106-warden.dtb`).
+
+## The series
+
+| Patch | Scope |
+|---|---|
+| `05-build-wiring.patch` | top-level `drivers/{Kconfig,Makefile}` (wire in rknpu) |
+| `10-clk-rv1106.patch` | CRU clock driver (`clk-rv1106.c`, reuses rv1126 data) |
+| `15-pinctrl.patch` | `pinctrl-rockchip` RV1106 iomux |
+| `20-arch-dts-bindings.patch` | `arch/arm` DTs (`rv1106.dtsi`, `rv1106-warden.dts`, pinctrl), mach, configs, `include/dt-bindings` |
+| `25-usb-phy.patch` | inno-usb2 phy |
+| `30-drm-vop-panel-rgb.patch` | VOP (`rgb_dclk_pol`=0 + WIN1 scanout), panel-simple bus-format, rockchip_rgb |
+| `35-mailbox-hpmcu.patch` | rockchip-mailbox (rv1106 num_chans=1) |
+| `40-pvtm-soc.patch` | PVTM (core+pmu) + `include/soc/rockchip/pvtm.h` |
+| `45-npu-rknpu.patch` | open GPL rknpu 0.9.2 driver + `rknpu_ioctl.h` uapi |
+| `50-rga.patch` | RGA 2D (rga3) + `drivers/video` wiring |
+| `60-wifi-aic8800.patch` | out-of-tree AIC8800 wifi/BT (the 88.5K-line vendor blob) |
+| `70-audio-codec.patch` | `rv1106_codec` + I2S wiring |
+| `80-misc-thermal-rtc-adc.patch` | tsadc, rtc-rockchip, saradc, trng, otp, gmac, goodix touch |
+
+## Provenance & regeneration
+
+Baseline: `linux-6.18.46` from kernel.org (`build/linux-6.18.46.tar.xz.sha256`
+pins the tarball). The series was generated by overlaying the hardware-verified
+source tree onto pristine (build artifacts excluded) and splitting `git diff` by
+subsystem. Licensing/origin of each block is tracked in
+`../kernel/rv1106-enablement/PROVENANCE.md`.
+
+Whitespace: `60-wifi-aic8800.patch` carries the vendor blob's trailing-whitespace
+verbatim; `git apply --whitespace=nowarn` (the build wrapper) accepts it. Do not
+re-flow vendor code — it must stay diffable against future vendor drops.