SvenLorence/TEESimulator-RS ? reverse-engineered prompt

Build me an Android root module for Android 10 and up that helps a rooted phone pass apps that check for real hardware security. I want it to hook into the system keystore flow, generate believable attestation certificate chains from a valid keybox.xml, and make apps think the device still has genuine hardware backed keys. It should work with Magisk, KernelSU, and APatch.

Please make it read config from /data/adb/tricky_store/ so I can drop in keybox.xml, choose which apps are covered in target.txt, and optionally override reported security patch dates per app. I also want the same behavior described here, including automatic mode, force software only mode, and certificate only patch mode for selected apps.

Make sure generated keys survive reboots, config reloads when files change without needing a reboot, and each app gets a simple rate limit so abusive requests fall back to software certificates. Package it as a flashable ZIP I can install with a root manager. If you need details, check current docs and the upstream project online.