Did you relock the bootloader and disable OEM unlocking as part of the GrapheneOS onboarding?