Repository navigation
Add INSTALL.md: a personal sideload runbook - #65
Merged
Merged
Conversation
Build a debug or signed-release APK, get it onto a phone, and grant only the permissions the app actually needs on first launch. Not a wiki/ page — this is a one-off "get it on my phone" doc, distinct from wiki/testing.md's development workflow. Linked from README.md. Prompted by a security screen of the current codebase (no code changes needed — no INTERNET permission, SafeLog structurally prevents notification content from reaching logcat, backup/ device-transfer excludes everything, the notification listener is the only non-launcher exported component and is signature-permission gated). INSTALL.md's permission-grant guidance and SECURITY.md references reflect that screen. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
INSTALL.md: build a debug or signed-release APK, get it onto a phone, and grant only the permissions the app actually needs on first launch. Distinct fromwiki/testing.md's dev-workflow guide — this is the "get it on my phone" doc — so it's a plain root-level file, not awiki/page (no-4llmcompanion, not tracked bycheck_wiki.py's phase/freshness checks). Linked fromREADME.md.Prompted by a security screen of the current codebase — no code changes were needed. Confirmed: no
INTERNETpermission anywhere (source + merged manifests),SafeLogstructurally prevents notification content from reaching logcat (only free-text-free methods, every call site checked), backup/device-transfer excludes everything (allowBackup=false,dataExtractionRulesexcludesdomain="root"), the notification listener is the only non-launcher exported component and requires the signature-onlyBIND_NOTIFICATION_LISTENER_SERVICEpermission,MainActivitysetsfilterTouchesWhenObscured(tapjacking), rule storage is plainkotlinx.serializationJSON (no reflection/polymorphism deserialization surface), and release signing reads from env vars only (never committed).INSTALL.md's permission-grant guidance and itsSECURITY.md/wiki/testing.mdreferences reflect that screen.wiki/scripts/check_wiki.py check— clean.🤖 Generated with Claude Code