Everything in GrapheneOS, plus:

App swaps

• Web replaces the Vanadium browser (Vanadium stays as the system WebView).
• Camera replaces GrapheneOS Camera.
• PDF replaces GrapheneOS PDF Viewer.
• Photos replaces Gallery.
• Contacts, Calculator, Clock, Calendar and Music replace their AOSP counterparts.
• Communicate replaces both Phone and Messaging as the default dialer and SMS/MMS app.
• Files replaces DocumentsUI, so it is the system file picker in every app's open and save dialogs.
• Keyboard replaces the AOSP keyboard, and works on the lock screen and during setup.
• Speech replaces GrapheneOS Speech Services as the default on-device speech-to-text and text-to-speech engine.
• App Store replaces the GrapheneOS App Store as the first-party store.
• eSIM replaces Google's eSIM manager (the Pixel eSIM hardware backend is kept).
• Backup replaces Seedvault and the GrapheneOS contacts backup as the system backup transport: encrypted with a recovery phrase, to a folder or your own WebDAV/Nextcloud server.
• Network Location replaces GrapheneOS Network Location, and also serves geocoding, from an on-device database.
• Emergency replaces Emergency Info: medical info, emergency contacts and the SOS gesture.
• Log Viewer, Setup Wizard and Updater replace their GrapheneOS counterparts.
• Auditor and the GrapheneOS Info app are removed.

New system apps

• Cast is the system remote-display provider, so it appears in Settings › Cast and can use a TV as a separate desktop-mode screen instead of a mirror.
• Share gets privileged network access for AirDrop directly with Apple devices over AWDL, falling back to the local Wi-Fi network.
• Parental Controls holds the system supervision role: Settings › Parental controls appears, and bedtime, downtime, school time and app limits are enforced on-device behind a parent PIN.
• Screen Time holds the system wellbeing role, so it can pause apps when timers run out, and it gets its own top-level entry in Settings.
• Auto holds the system car-projection role, connecting the phone to car displays.
• Find Family and Health come preinstalled as ordinary apps.

Framework changes

• Desktop-mode casting: a casting app's virtual display can arrive as a pending connection, so the system asks whether to mirror or extend; the receiver's resolutions and refresh rates are listed with the best one chosen by default; and streamed displays count as external displays in System UI and Settings.
• RCS on more carriers: Communicate gets carrier privileges even when the SIM grants none (for example Jibe-backed MVNOs). Real SIM grants still take precedence.
• No screenshot detection: apps that register for screenshot callbacks are never told when you take one.
• Fewer sensor grants: built-in system components opt out of the GrapheneOS Sensors permission, so they never receive it.
• Offline geocoding: geocoding is pinned to the on-device provider and GrapheneOS's geocoding-server setting is gone; Settings shows "Network location & geocoding" as working offline.
• MAOS network services: connectivity and captive-portal checks, the private DNS probe, and GPS assistance (SUPL and PSDS) go through MAOS servers.
• Settings integration: Parental controls, Screen Time, Cast, and log and crash-report viewing open the Modern Apps versions.
• Updates: the App Store and Updater are exempt from app hibernation, and over-the-air updates come from MAOS's own update server.
• Google Sans Flex is the system font, with Roboto covering Cyrillic, Greek and other scripts it lacks.