Add deterministic Android build, dependency and release verification.
The build should compile from reviewed inputs without silently mutating dependencies or accepting unverified artifacts.
Changes
Add and verify the Gradle wrapper
Pin Gradle distribution and dependency verification metadata
Verify production app configuration
Keep production release signing fail closed
Run Flutter analyze and tests
Run Android lint
Verify cold and warm Android builds
Verify vendored runtime immutability
Run the R8 release smoke build
Add focused runtime and security regression coverage
This PR changes build and verification behavior only.
## Summary
Add deterministic Android build, dependency and release verification.
The build should compile from reviewed inputs without silently mutating dependencies or accepting unverified artifacts.
## Changes
- Add and verify the Gradle wrapper
- Pin Gradle distribution and dependency verification metadata
- Verify production app configuration
- Keep production release signing fail closed
- Run Flutter analyze and tests
- Run Android lint
- Verify cold and warm Android builds
- Verify vendored runtime immutability
- Run the R8 release smoke build
- Add focused runtime and security regression coverage
This PR changes build and verification behavior only.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Add deterministic Android build, dependency and release verification.
The build should compile from reviewed inputs without silently mutating dependencies or accepting unverified artifacts.
Changes
This PR changes build and verification behavior only.