7 Commits

Include renames

Author	SHA1	Message	Date
james.maesandClaude Sonnet 5.5	9418c03c4b	docs: reconcile scanner setup and release status ... Clarify local demo and signed APK installation, record device acceptance and signing custody, and archive superseded status logs. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 13:29:13 -06:00
james.maesandClaude Sonnet 5.5	bcbd1b4e98	docs: record scanner signing and direct installation ... Record the selected APK/MDM channel, recovery-verified QRun signing identity and verified local 1.0.0 artifact. Add direct installation and enrollment instructions for the initial devices. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 10:28:29 -06:00
james.maesandClaude Sonnet 5.5	9cf789c5b1	docs: align scanner setup with current forge and release policy ... Correct Java and QQQ requirements, distinguish Gitea checks from legacy workflows, and retain the owner's deferred signing and distribution decision. Documentation only; runtime code and installed APK are unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 16:20:39 -06:00
james.maesandOpenAI GPT-6.1	d316567fdc	feat: secure Zebra scanning and unify mobile Back routing ... Use the optional device-provided EMDK service for normal scanner input, with exact compile-only SDK provenance and no shipped vendor classes. Keep synthetic scan broadcasts confined to the disposable E2E variant. Pause input behind overlays and lost focus, and share live drawer-first Back routing across every process/application handler and toolbar arrow. Replace inherited Auth0/Coil prereleases with reviewed stable versions. Invalidate standard generated notices on dependency graph changes and retain strict runtime/license checks. Pin hosted acceptance to the source-qualified API 1.9 core/server tuple with runtime provenance. Validation: 127 JVM tests, 34 TC22 shared native cases, eight-overlay native regression, and ordinary-UID/distinct-signer injection rejection pass. Eight forged broadcasts cause no process/record mutation; a real manual positive control saves through the API. All package/lint gates, four-APK notice/DEX/native/manifest inspection, focused independent source review, workflow syntax and staged secret checks pass. Actual hardware triggers, configured provider, optional files deployment and final signing/distribution remain separate documented release gates. No normal operator installation or data was changed by these tests. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 20:18:41 -05:00
james.maesandOpenAI GPT-6	6574ec4991	fix: enforce semantic UI API contracts in scanner host ... Discover compatible API versions, client channels and mobile extensions before login. Follow server process completion, metadata updates, form rules and cancellation, with isolated native OpenAPI conformance coverage. Co-Authored-By: OpenAI GPT-6 (Codex) <noreply@openai.com>	2026-10-30 18:30:01 -05:00
james.maesandOpenAI GPT-6	13391d210e	test: cover scanner workflow against the real QQQ server ... Co-Authored-By: OpenAI GPT-6 (Codex) <noreply@openai.com>	2026-10-30 16:42:04 -05:00
james.maes	dfdbb74d21	feat: add native scanner host and Android verification workflows	2026-10-29 14:16:19 -05:00