CouchPotatoPlayer android-tv 1.2.0/374 — sources and notices

EXACT ARTIFACT AND SOURCE
Source commit: e601550fdf3d5834d4f5959ca30e643ae2c30752
Upload AAB SHA256: 07a6537b356eb52396f7a4b4a61e7fc2ce6cd966da8be15ed16c1465d5b27969
Hermes bundle SHA256: ce7eca1bd0e51488cd30566b1db6626076b4934f46971ee720a672af792ff352
Local QA APK SHA256: b48e254157ad12e94f027780739be6995d1a0ca53fff260f5e50064782320f79
AAB-derived LOCAL QA APK signed with the existing upload key. Not a Google Play app-signing-key APK and not a website download.
A matching Google-signed universal APK has NOT been verified here. This source
index is for the recorded AAB/localQA content and does not publish an APK,
announce website availability or claim a public store rollout.

REASSEMBLY (Python3 standard library; no third-party installation)
1. Extract the index ZIP into a new working directory.
2. Run: python3 REASSEMBLE-374.py --download
3. Ten verified original files are created under reassembled-374/.
Use --verify-only to verify without writing original files. Existing correct
originals are retained; conflicting originals are never overwritten. For offline
use, download the listed ZIP parts into parts/ and omit --download. The ZIPs are
transport containers: do not concatenate the ZIP files themselves. The helper
verifies each ZIP, reads its single stored part, reassembles the original bytes
in manifest order and checks every complete original SHA256.

PROVENANCE AND REUSE
The app source ZIP is a NEW git archive of the exact commit above. Historical373
Git source is not asserted to cover this app runtime. Unchanged native component
sources and notices retain their actual373 filenames/URLs/hashes, with explicit
reuse evidence in COMPONENTS-374.json. All20 shipped provider shared libraries,
10158 FFmpeg/Media3 source files,802 installed npm identities and751 supplied npm
notice files were checked. All7 embedded notice/Billing payloads match. Current
host/native integration materials and actual rebuilt-library hashes accompany
the source. Reuse does not claim rebuilt wrapper binaries are byte-identical.
No historical367/373 publication bytes are changed. Original app/CPPlayerKit
licenses remain controlling; publication grants no new rights to proprietary code.

LIMITS
This is not a complete all-dependency license audit or legal certification.
The inherited npm pack documents57 missing package-root notice mappings;44 are
in a conservative production graph which includes build/CLI tooling. Monorepo
attribution and exact APK runtime-shipment mapping remain unverified. There is
no Apple source/relink claim. Google-signature/download verification, working
TV Drive sync and real Store transactions are not established by these files.

ORIGINAL FILES AND DOWNLOAD PARTS

CouchPotatoPlayer-source-v1.2.0-374-e601550f.zip
Original bytes: 50489494
Original SHA256: 4ef4a18591ac8874ff2d68b633219836d0fc9a5dea51adb39bf7a5e2efcf4bdf
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-374-tv-couchpotatoplayer-source-v1.2.0-374-e601550f-4ef4a18591-p001of001.zip
ZIP bytes: 50489600
ZIP SHA256: aeedcc2e69b74e6ccd00e1c1cbb0f68ac2bd0115a384745f21bfa00064acfc0d

android-tv-374-host-build-materials.zip
Original bytes: 39296
Original SHA256: c8ab7c2abf1aa3a0c0559de004bf08a7e55ab648fa17f3e46b38e63a6062ab8c
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-374-tv-android-tv-374-host-build-materials-c8ab7c2abf-p001of001.zip
ZIP bytes: 39402
ZIP SHA256: 1ae872b0946c9302c140fdb27b235cd15998bec8586516b2a7647a9851af68ae

COMPONENTS-374.json
Original bytes: 22852
Original SHA256: 19fb3113c4600f196a5ead92a7ca8349eee2749444a7dc2cc0da54c1d14b3496
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-374-tv-components-374-19fb3113c4-p001of001.zip
ZIP bytes: 22958
ZIP SHA256: cf3b74c17a3c701a94cb1b1328e6502d705ee78da833b7ca9f11107da1306cc0

SOURCE-AND-RELINK-374.txt
Original bytes: 4475
Original SHA256: 3cdcc0dd70a6c45cc000a7db0dd166c784f7be5824b887383aeabbcab96ab425
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-374-tv-source-and-relink-374-3cdcc0dd70-p001of001.zip
ZIP bytes: 4581
ZIP SHA256: 3e2d95fb39c50469e72746d00d7f49bc00600d6bc4a688e49ac9c60508e16266

android-libmpv-lgpl-sources-373.zip
Original bytes: 89473307
Original SHA256: ffbd387508936dc3f1086d4dbaff93d9c823476f493297a85f5dcd269815ca39
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-374.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p001of002.zip
ZIP bytes: 62913642
ZIP SHA256: 51b607612fd0a1f06d1ec92a1c77a4478769653e6a4efd8a88124dc9669885c3
Part 2: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p002of002.zip
ZIP bytes: 26559877
ZIP SHA256: 28f71dfac242ea03fd9b0bfaf388118d8292e2da7e78ccdc5d0814e235d1d834

android-media3-ffmpeg-8.1.3-source-373.zip
Original bytes: 22131512
Original SHA256: d6b4126bf21abaea8387f64a45995c6670caef5f389572db70b2f7da77f46d6c
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-374.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-media3-ffmpeg-8.1.3-source-373-d6b4126bf2-p001of001.zip
ZIP bytes: 22131618
ZIP SHA256: 59c9d7d05eb769ad675af505504a729c39a46d9f7ea4aae94505e7b78a176a4d

pro-iap-notices-373.zip
Original bytes: 54959
Original SHA256: 0e5d1253a2d48bc589d84dc09b72f1b9481a44cc2c053420b246b1da8af90566
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-374.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-pro-iap-notices-373-0e5d1253a2-p001of001.zip
ZIP bytes: 55065
ZIP SHA256: 4134e8bc40bca37a6faac2b179e2d444a7eb20c3861978904ba56ea114243532

npm-notices-373.zip
Original bytes: 744825
Original SHA256: 8d94c76753306ab7bd136777b079ad437a94e3678db0b64b6e573d09d3ffd8e3
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-374.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-npm-notices-373-8d94c76753-p001of001.zip
ZIP bytes: 744931
ZIP SHA256: dcfe0c01a804df8d4bab8a4c9915c7b2350b76d39e5802258f8ebbcd70fad0e8

apk-embedded-notices-373.zip
Original bytes: 19461
Original SHA256: e5d2458c7e1db7b54efa1ad3c3ba8b759ba2806788feba02f2060bdf67ee43b0
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-374.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-apk-embedded-notices-373-e5d2458c7e-p001of001.zip
ZIP bytes: 19567
ZIP SHA256: 53423f018e63cfd3de647a71b0e915e6cb5b45f6a7854bdfca2ae9bf0cf7853e

SHA256SUMS-374.txt
Original bytes: 881
Original SHA256: c99f8f5eecab948b7574b549c6857df0ba00d8dd5b9fa2102462e81ea4519c19
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-374-tv-sha256sums-c99f8f5eec-p001of001.zip
ZIP bytes: 987
ZIP SHA256: 6fe04a19ce2e6194dbd6ccc58f4610e3e1d8a53cd82b561de92cd959a0dc580e