Use the source’s declared toolchain#
The reviewed README requires Go 1.26.6 or newer in the Go 1.26 line, Git, and JDK 17 with Android SDK 36 for Android builds. Treat these as the requirements of the pinned source—not claims about your installed tools.
Run the following commands from a checkout of that repository, not from this website project.
Run the complete repository gate#
go run ./cmd/gate
# Include the Android host gate
go run ./cmd/gate -androidWhere: the repository root. Effect: runs module verification, compilation, vet, uncached tests and applicable audit/product gates according to the README. Success: each invoked gate completes successfully.
A focused test or a compile pass is not equivalent to this gate. This website work did not execute the VPN gate or qualify a runtime.
Create an Android internal build#
cd android
./gradlew :app:assembleInternal --no-build-cacheWhere: Linux or macOS development machine with the declared JDK/SDK. On Windows the documented wrapper invocation is:
cd android
.\gradlew.bat :app:assembleInternal --no-build-cacheChanges: generates an internal Android artifact in the source build environment. Internal trust fixtures are not public release material. A compiled APK must not be relabelled as a production release without the appropriate gates.
A deterministic compiler exercise#
go run ./cmd/kdc generate --seed 12345 --out profile.json
go run ./cmd/kdc validate --profile profile.jsonWhere: the repository root with the Go toolchain. Changes: creates and validates a deterministic compiler profile. Keep generated sensitive deployment material out of source control unless it is an explicitly non-secret fixture.
Success: generation and validation succeed. This is not a sealed Android profile issuance procedure or proof of Internet egress.
When something fails#
Record the exact source revision, toolchain and categorical error. Correct the underlying build or test problem. Do not disable security assertions, package verification or profile checks to obtain a green result.
Source and scope
Reviewed . The linked source describes the implementation; released-build evidence is a separate check.