Skip to content

Prepare Android 0.1.0 production builds and signed release candidates - #5

Merged
macro88 merged 5 commits into
mainfrom
codex/android-release
Nov 10, 2026
Merged

macro88 merged 5 commits into
mainfrom
codex/android-release

Conversation

@macro88

@macro88 macro88 commented Nov 10, 2026 •

Copy link
Copy Markdown
Member

Hypergolic needs a production Android package and a repeatable path from reviewed source to a signed APK. This adds space.hypergolic version 0.1.0 (versionCode 1), production UI defaults, and a manual GitHub workflow that creates a draft release.

  • Keep development builds available while production starts with an empty workspace, hides developer controls and blocks bundled test launch entry points. Add About links and a data-flow privacy document.
  • Build an unsigned ARM64 APK without signing credentials, then sign on a separate runner behind the android-release environment. Require successful CI for the exact main commit and pin the production certificate.
  • Verify package/config/permissions, notices, native-library and ZIP alignment, signature, hashes and source receipts. Refuse existing output, tags and releases; publish only a draft containing the APK, SHA256SUMS and build.json.
  • Fix the native signer's 16 KB ELF alignment and refresh bundled attribution inventories.

Validation: 13 release regressions and 12 existing tester regressions passed; TypeScript, Expo Doctor (20/20), focused security/storage/shell/native checks passed. React Doctor and AISlop both scored 100/100, with all ten lockfile audits clean. The implementation passed a production Android build, disposable-key signing verification, an isolated Android emulator smoke test, and an unsigned iPhoneOS Release compile. The final certificate-only commit passed release regressions and the quality gates again.

Hosted CI passed for ef14934669407a631e82be7ae5e9333b3c98d523: PR run and branch run, each with 15 successful jobs and the main-only score badge job skipped. This includes Android and iOS native compilation, browser tests, shared regressions and the 100/100 quality gates. Production-key signing, physical-device/update and 16 KB runtime acceptance, upstream attribution review, website and distribution setup remain before public release. The earlier test-signed APK is not a release artifact. See the release guide for the candidate and acceptance process.

Copilot AI balanced review requested due to automatic review settings November 10, 2026 07:47

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

@macro88
macro88 merged commit e59292d into main Nov 10, 2026
32 checks passed
@macro88
macro88 deleted the codex/android-release branch November 10, 2026 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants