Aster Android 0.9.0 — development test build

Package: dev.ident.aster
Version code: 9
Minimum Android: Android 8.0 / API 26
Target SDK: 36
Engine: the device's Android System WebView
Signing: debug signature, verified using APK Signature Scheme v2

This is an early test APK. It compiled successfully, but it has not been run
on an emulator or physical device here. It is not a production release or a
Google Play build. Aster Certificate badges are not implemented.

Implemented test targets: HTTPS browsing and direct search, tabs, Spaces,
bookmarks, local URL session restoration, find, sharing, download confirmation,
file chooser handling, TLS rejection, per-tab TLS status, activity lifecycle,
renderer recovery and Android back navigation. Spaces share browser cookies;
they are not isolated profiles. Website camera/microphone/location requests
are currently denied. Full history and page back-stack restoration are unfinished.

Verification: Gradle assembleDebug succeeded with the declared Kotlin 2.0.21
and AGP 8.7.3. The offline policy check passed 29 assertions. The APK signature
and SHA-256 were checked after copying this artifact. AGP 8.7.3 warns that it
was tested through SDK 35 while this project targets SDK 36.

Install on a test device by opening the APK and following Android's normal
installation prompt. No account or IDENT proxy is required. Existing developer
builds with a different signing key may not support an in-place update.

Suggested manual checks:
1. Launch, visit an HTTPS site, search and navigate back/forward.
2. Open multiple tabs and Spaces, add a bookmark, then restart the app.
3. Rotate the device, background and resume the app, and use Android back.
4. Select and cancel a file upload; navigate away while the picker is open.
5. Confirm and cancel a website download; inspect the device download record.
6. Visit a controlled invalid-TLS test page and confirm navigation is blocked.
7. Check phone/tablet layouts, keyboard insets and TalkBack.

Please record Android version, WebView version, reproduction steps and the APK
SHA-256 with test results. No release signing key or credentials are included.
See SHA256SUMS-ANDROID.txt for the exact artifact hash.

Source and dependency notices:
Aster-Android-0.9.0-dev-test-source.zip contains the Android application source,
excluding build/cache directories, local SDK paths and signing key files.
THIRD-PARTY-NOTICES-ANDROID.txt identifies Kotlin stdlib and JetBrains annotations.
LICENSE-APACHE-2.0.txt supplies their Apache 2.0 license text.
RUNTIME-DEPENDENCIES-ANDROID.txt records the resolved app runtime dependency list.
SHA256SUMS-ANDROID.txt covers all Android test-download files.