Skip to content

Release Android 0.6.119 with contained recording playback #346

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
TheCryptoDonkey wants to merge 2 commits into from
Closed

Release Android 0.6.119 with contained recording playback #346

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
26aade4
chore: prepare Android 0.6.119 recording playback
TheCryptoDonkey Oct 27, 2026
4cc775c
Merge remote-tracking branch 'origin/main' into release/android-0.6.1…
TheCryptoDonkey Oct 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,9 @@
## 0.6.119 — 27 October 2026

- Play audio and video attachments in a dedicated process, containing media-player crashes away from the room screen.
- Keep authenticated recording bytes in bounded, read-only shared memory and retain explicit play, pause, seek and background-pause controls.
- This is same-UID crash containment, not a separate security identity. Physical GrapheneOS playback and lifecycle acceptance remains outstanding.

## 0.6.116 — 26 October 2026

- Restore bundled on-device background segmentation: keep the person visible
Expand Down
4 changes: 2 additions & 2 deletions app/build.gradle.kts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -98,8 +98,8 @@ android {
minSdk = 33
targetSdk = 35
// Remain newer than the 0.6.3 rendezvous candidate (code 26).
versionCode = 141
versionName = "0.6.118"
versionCode = 142
versionName = "0.6.119"

buildConfigField("String", "ACCOUNT_NETWORK_DEFAULT", "\"$accountNetworkDefault\"")
buildConfigField("String", "INVITATION_PROFILE", "\"$invitationProfile\"")
Expand Down
18 changes: 18 additions & 0 deletions docs/android-release.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,21 @@
## 0.6.119 (142): contain recording playback in a dedicated process

Authenticated audio and video attachments now play through Android `MediaPlayer`
in a non-exported, dedicated same-UID process. The room process retains only the
Compose controls and a `SurfaceView`; bounded plaintext crosses through sealed,
read-only shared memory. This contains media-client failures but is not an
isolated-UID confidentiality or privilege boundary: platform media services
perform demuxing and decoding. The security trade-off is recorded in
`docs/attachment-safety.md`.

PR #344 passed all 17 hosted jobs after an Android 13 emulator install failure
was rerun. Recording coverage includes preparation without autoplay, explicit
play and pause, corrupt/truncated input, recipient UI playback and minified-release
signing-lineage checks on Android 13 and 15. The versioned candidate has separate
hosted CI, production signing and publication gates. Physical GrapheneOS audible
output, video, seeking, accessibility, memory pressure, process death, active-call
behaviour and physical upgrade/readback remain required.

## 0.6.118 (141): safe model startup and combined relay authentication

When a background model cannot start, retain the complete synthetic backdrop
Expand Down