CPP Android mobile source index

Recorded artifact 1.2.0/386; full source commit 96ecefbf6292303ddb8c375ff1f9f149b1a63c50.
Application runtime source dc6604f3df6dbf21d3b88816c258298b0341b42c.
AAB SHA256 0c890e6dd25038d41bba86e9606554a67b4f6b0578a879ab5a916824225d9c39
Actual Google-signed APK SHA256 48f655fd11fcd27d658bf9a5d7f04dfc5768d0537cfab0aec976a75408dda2ee
All 82 native libraries, 6 DEX files, Hermes and 7 embedded notice/Billing payloads
match the recorded AAB. This establishes payload correspondence, not runtime,
purchase, consent or production publication. Every source-part URL was checked
over HTTPS for HTTP200, complete size and SHA256.

Extract this index ZIP, place supplied ZIP parts in parts/ and run:
  python3 REASSEMBLE-386.py --verify-only
Run without --verify-only to reconstruct the ten original files. Use
--download to fetch missing parts from the verified owned HTTPS URLs.
Existing mismatched output files are never overwritten. Each transport ZIP
contains one stored member named part; concatenate payloads in manifest order,
not ZIP containers. SHA256SUMS checks all source/notice/host originals.

Use the current Git source, then the mandatory same-path host overlays and
BUILD-RECONSTRUCTION.txt. The tracked debug keystore is deliberately excluded.
Original 373 component source/notices are reused unchanged. The unchanged
382/383 notice supplement remains a historical original; current mapping is
separately documented in NOTICE-SUPPLEMENT-SUCCESSION-386-387.json in the host
ZIP. Historical 57/44 counts are candidate flags, not confirmed text defects.
Remaining 48 without mapped JS are not proved absent from native/assets.
Full original texts and precise source/relink/attribution limits are recorded
in the supplied materials. No Apple or exhaustive licensing claim is made.

Original notice attribution supplement:
https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-android-382-383-notice-attribution-2026-10-29.zip
