R13 visual remediation, authority recovery & business integration — Owner review

Authority recovery (R13)

Before R13 the repository had no CMK Android authority entry. R13 registers a governed candidate entry whose token table is generated from the shipping Kotlin tokens and verified on every build.

• Authority idCMK_ANDROID_VISUAL_AUTHORITY_R1
• StatusCANDIDATE_NOT_APPROVED · OWNER_APPROVAL=PENDING
• Token source_design-authority/projects/CMK_ANDROID/CMK_ANDROID_TOKEN_SOURCE_R1.json
• Binding checkgenerate-authority-token-source.py --check → AUTHORITY_TOKEN_SOURCE=MATCH
• Single source of truthevery previously-raw dark literal is now a named CmkPalette token; no Color(0x…) leaks outside the theme package
• Remaining blockerO-5 Owner visual source · V-2 asset pack · V-7 offline voice · P-2 emergency data

R13 native screenshots (real Emulator · 1080×2400)

Fresh R13 APK captures: four locales, light/dark, and the new Foundation Core integration state (real HTTP round-trip to the local fixture authority). Click to enlarge.

R11 → R12 → R13 对照

Left: R11 baseline. Middle: R12. Right: R13. R12 reference images are carried forward as the accepted baseline.

Business integration (R13)

Foundation Core identity/device/notification/location move from NOT_IMPLEMENTED to a labelled non-production MOCK (local fixture). Real HTTP round-trips, fail-closed parsers.

• Gateway routesGET /v1/foundation/identity · POST /v1/foundation/devices · GET /v1/foundation/notifications · POST /v1/foundation/location-consent
• Smoke evidenceFOUNDATION_FIXTURE_SMOKE=PASS total=10 (unauth 401 · unknown 404 · valid 200)
• Android parsersFoundationFixture.parse* → null on unknown source / missing field
• RemainingExplore/Grow sync, Safe report egress, DSAR server flow, LIVE Foundation Core — still NOT_IMPLEMENTED

Security hardening (R13)

• Cleartextdenied by default (<base-config cleartextTrafficPermitted=false>); only emulator loopback exempt
• ManifestallowBackup=false · usesCleartextTraffic=false
• Credential scanno plaintext key literal in the Android surface; authority check PASS
• P0 statusSECURITY_P0_CLOSED=NO — C-1..C-7 remain Owner-gated; no rotation/revocation performed

APK（无登录直下）

• 下载apk/app-debug.apk
• 版本0.9.0-r13 / versionCode 12
• applicationIdcom.mtfdx.kids.cmk.foundation
• SHA256110bc33cf9da2599f8f725705c41baecb12397a3e2e7b3b9bbbddb74c71f4c26
• 运行模式MOCK（mock gateway + local Foundation fixture；LIVE 未启用，liveCallCount=0）

范围与边界

• 部署目标VPS03（133.18.149.127）非生产；VPS01/VPS02 未访问、未部署
• 认证无登录、无 Basic Auth、无验证码；Header X-MTFDX-Owner-Preview: read-only
• 数据合成数据；无真实儿童资料；无明文密钥
• 门禁OWNER_UI_APPROVAL=PENDING · SECURITY_P0_CLOSED=NO · CLOSED_BETA_READY=NO · PRODUCTION_AUTHORIZED=NO
• SOS按住 1.5 秒交互已按冻结规格实现；官方联系方式未配置 → 不向外部发送任何请求