I am here to help if I can and to learn from you.
Sorry for my "paranoia", I am just mad that NSA/Google/Intel/Samsung and all others are screwing this stuff called Android that once was the best of the best. And as I said I see the end of android at the corner!.
Yes I am here to help social-design-concepts with what I think are dump partitions from my device. But he has not tell me yet which one?
Regards "locked bootloader".
1-A locked bootloader is one that will only boot an OS that it "approves" of.
2-This may mean that device's boot partition has an approved digital signature,
and I can personal add
3- there are may be signature in system, boot and recovery too
4- then system check the bootloader, boot and recovery
5-bootloader checks boot and system and so on..
then if any do not see what it expect it fails to boot fully in to OS.
Then there are the partition check by block, and auto correction by OTA!!! This has not happen because Carriers are afraid of the end result but it is coming.
and Knox SELinux etc.
For me Lock is just the initial blockage to then deny you of the respective warranty!!, it used to be overcome with OEM Unlock!
About signatures, which one!
Now for Galaxy TAB3 10.1, I can assure that I can make changes to Boot, Recovery and System. We had no luck in a full CM10.1 or C10.2 running rom due to Private unreleased drivers sources(Thanks Intel). But we can install partially working CM roms and Ubuntu. All this without any signature complain or halt in OS.
By the way in this moment I am trying to run Ubuntu without any VNC by modifying the initramfs in the boot so that it boot from an Ubuntu image in external SDCARD. The I will try to do dual boot if I can. I am no expert I am just following tutorials left from many people on other devices.
As I said I am here to help.