[gagegreg]

For testers (plain English)

Nothing to test.

Linked issue

This is a credential migration for the unified Flutter app requested by Greg.

Checks

• Workflow YAML parses, embedded shell passes bash -n, and git diff --check passes
• CI is green, including both emulator smoke jobs
• Diff is limited to this transfer workflow

Invariants (CLAUDE.md)

• Bluetooth protocol unchanged
• Application ID remains com.backyardbrains.bybbackpack
• No APK, AAB, keystore, credential, or other build output committed

The existing release environment holds the Android upload key and Play service account used by a successful internal-track upload (run 36128758661). This manual main-only workflow copies exactly those five secrets to private BackyardBrains/BYBBackpack using a destination-restricted token supplied as an Actions secret. It checks all inputs before writing, sends values through stdin, and logs names only. No token is deleted; Greg explicitly requires it to remain until he says OK (Watson capture 111434). The transfer token was provisioned as an Actions secret on 2026-10-19 and must remain until Greg says OK to delete it.

[github-actions]

Auto-merge gate: not merging, because it changes a workflow, the merge gate, or the repo rules (.github/workflows/transfer-backpack-release-secrets.yml), which always needs a review; Jev sees a dangerous change (0.23 > 0.2): Bluetooth protocol, tests/CI weakened, a secret, or the app ID; Jev's approval 0.44 is below 0.7. A person or an agent session should look at this; merge by hand when it's right.

Jev question	Answer	Needed
Would a careful maintainer approve it?	0.44	≥ 0.7
Dangerous change (protocol, tests, secrets, app ID)?	0.23	≤ 0.2
Diff matches the description?	0.92	≥ 0.6