The unit suites run on the project's own runner before main moves. And scripts/verify-build.py proves what two clean builds already showed: every byte of the APK's contents reproduces from this source — only the signing block differs, because signatures are randomized. Rebuild, compare contents, check the certificate: that is the whole trust chain. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>