Mobile Computing · Cluster
Mobile Platforms
OS services, sandboxing, and lifecycle.
- 01 Process Launch: From Launcher Tap to First Instruction How a tap on an icon becomes a running process, why mobile systems fork from a preloaded template instead of spawning fresh, and where a cold start spends its time.
- 02 Per-App UID Isolation and the Data Directory Contract How assigning each installed app its own kernel user ID turns file permissions into an application boundary, what the private data directory guarantees, and where the model leaks.
- 03 Lifecycle Callbacks and the Process Importance Ranking Why an app receives stopped and destroyed notifications in a fixed order, how the platform derives that order from a ranked list of processes, and which transitions are not reversible.
- 04 Saved State, Process Death, and the Bundle Size Limit What survives when the platform reclaims an app process, how the saved-state channel is serialised through the system service, and why its size is capped.
- 05 Permission Grants and Where They Are Enforced How install-time and runtime permission models differ, which layer checks a grant at the moment of use, and why a granted permission can still fail at the call site.
- 06 Binder IPC: Parcels, Handles, and One-Way Calls How a single-copy parcel transfer works, what a binder handle actually names, and why one-way calls have ordering guarantees but no completion signal.
- 07 Code Signing and Entitlement Enforcement at Load Time What a signature actually covers on a mobile binary, how the kernel or loader checks it before the first instruction, and what an entitlement grants that a file mode cannot.
- 08 Memory Pressure, Reclaim Order, and the Kill Decision How a mobile system decides which process to kill under memory pressure, why the score is an out-of-memory adjustment rather than a priority, and how file-backed pages change the arithmetic.
- 09 Intent Resolution, Exported Components, and URI Grants How a late-bound call is matched to a component, what makes a component reachable from other apps, and why a URI permission is a separate grant from the intent that carries it.
- 10 Mandatory Access Control Above the UID Boundary Why a per-app user ID is not sufficient authorisation, how type enforcement composes with discretionary permissions, and what the policy costs to maintain.