Mobile Computing · Cluster
Mobile Release
Signing, distribution, and staged rollout.
- 01 The APK Signing Block and Whole-File Digest Verification How the v2 signature sits between the ZIP entries and the central directory, how a digest covers a file that contains the digest, and why JAR signing could not do this.
- 02 Certificate, Profile, and Entitlement Binding in iOS Code Signing How a provisioning profile licenses one signing identity to assert a specific set of entitlements, and why the kernel rejects an app whose entitlements exceed its profile.
- 03 Split APKs and App Bundles: How One Build Becomes Many Downloads Why an Android App Bundle is not installable, how configuration splits are selected at install time, and what the bundletool size model assumes about the target device.
- 04 Version Codes, Monotonic Ordering, and Downgrade Refusal Why the installer compares an integer rather than a version string, how a version code that wraps or repeats poisons an update path, and where platform policies override monotonicity.
- 05 Staged Rollout Cohorts and What Halt Actually Does How a percentage rollout maps devices to cohorts, why halting stops new adoption but not installed copies, and what the store can and cannot undo after a release is live.
- 06 Delta Update Patches: Source Identity, Not Just a Diff Why a binary delta is only applicable to the exact bytes it was computed from, how the store identifies those bytes, and why splitting an app bundle changes what a delta can save.
- 07 Signing Key Rotation and the Proof-of-Rotation Lineage How a new signing key proves continuity with the old one, why the lineage is a linked list of cross-signed certificates, and what a device that has never seen the old key must be told.
- 08 Install Sessions: Atomicity Across Multiple Split APKs How the installer stages a set of APKs as one transaction, what commit guarantees about visibility, and what happens to a half-written session when the device reboots.
- 09 Reproducible Mobile Builds and Independent Artifact Verification Which build inputs leak into a mobile binary, how path and timestamp normalisation makes two builds comparable, and what a third party can actually prove by rebuilding.
- 10 Rollback Without Downgrade: Containment After a Bad Release Ships Why the installer cannot un-ship a build, how remote configuration and feature gating contain a defect, and which failures those mechanisms cannot reach at all.