exec_path confirms the Lenovo/A15 ran the whole battery via the legacy Shizuku.newProcess path: 6/7 commands with real data, incl. Lenovo's IpClient dump format (distinct from OnePlus's — the per-vendor parser sample the prober exists to collect). Design consequence recorded: core-shizuku needs a dual-path executor. ip_monitor times out under newProcess; bind-wait shortening noted as future tuning. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>