CouchPotatoPlayer android-mobile 1.2.0/375 — sources and notices

EXACT ARTIFACT AND SOURCE
Source commit: 35691635910e3cef185cc4b015dff411cd67cae6
Upload AAB SHA256: 84d2da25f6baa8fcdf6a768788e2bfffb8b6432a82e355b74dbb4c4d4d9b2bb1
Hermes bundle SHA256: 00c8afe820738f64a9f7159f2f19f0326a1024152719ffca2c205e17b426137c
Local QA APK SHA256: 54ebd2cd5f886dcb3c25a07ede30edca9751f64cbf49ba0152dfa4f97ada2c3e
AAB-derived LOCAL QA APK signed with the existing upload key. Not a Google Play app-signing-key APK and not a website download.
A matching Google-signed universal APK has NOT been verified here. This source
index is for the recorded AAB/localQA content and does not publish an APK,
announce website availability or claim a public store rollout.

REASSEMBLY (Python3 standard library; no third-party installation)
1. Extract the index ZIP into a new working directory.
2. Run: python3 REASSEMBLE-375.py --download
3. Ten verified original files are created under reassembled-375/.
Use --verify-only to verify without writing original files. Existing correct
originals are retained; conflicting originals are never overwritten. For offline
use, download the listed ZIP parts into parts/ and omit --download. The ZIPs are
transport containers: do not concatenate the ZIP files themselves. The helper
verifies each ZIP, reads its single stored part, reassembles the original bytes
in manifest order and checks every complete original SHA256.

PROVENANCE AND REUSE
The app source ZIP is a NEW git archive of the exact commit above. Historical373
Git source is not asserted to cover this app runtime. Unchanged native component
sources and notices retain their actual373 filenames/URLs/hashes, with explicit
reuse evidence in COMPONENTS-375.json. All20 shipped provider shared libraries,
10158 FFmpeg/Media3 source files,802 installed npm identities and751 supplied npm
notice files were checked. All7 embedded notice/Billing payloads match. Current
host/native integration materials and actual rebuilt-library hashes accompany
the source. Reuse does not claim rebuilt wrapper binaries are byte-identical.
No historical367/373 publication bytes are changed. Original app/CPPlayerKit
licenses remain controlling; publication grants no new rights to proprietary code.

LIMITS
This is not a complete all-dependency license audit or legal certification.
The inherited npm pack documents57 missing package-root notice mappings;44 are
in a conservative production graph which includes build/CLI tooling. Monorepo
attribution and exact APK runtime-shipment mapping remain unverified. There is
no Apple source/relink claim. Google-signature/download verification, working
TV Drive sync and real Store transactions are not established by these files.

ORIGINAL FILES AND DOWNLOAD PARTS

CouchPotatoPlayer-source-v1.2.0-375-35691635.zip
Original bytes: 50490917
Original SHA256: 1ee0fb0eca911175b966ed8f65eeb3d380325c577cb29dac2baa5202de81d50a
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-375-mobile-couchpotatoplayer-source-v1.2.0-375-35691635-1ee0fb0eca-p001of001.zip
ZIP bytes: 50491023
ZIP SHA256: 59334ce30a729f25ce8e596b37c4d0453fadab79798a3a7306f1428ef8d9703b

android-mobile-375-host-build-materials.zip
Original bytes: 39213
Original SHA256: 595c28ae223d10f6f6f17f3fdf9734a8e02a74a601361a32dfd0517618751b80
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-375-mobile-android-mobile-375-host-build-materials-595c28ae22-p001of001.zip
ZIP bytes: 39319
ZIP SHA256: 11e9eb34744ce09d6058cca8374e24d3acccb32b91b9656b12f6b9a7128c9847

COMPONENTS-375.json
Original bytes: 21582
Original SHA256: 8ca12de39b27d609e550690f520c0edf6b63640b95041e373a8bb43223cbb421
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-375-mobile-components-375-8ca12de39b-p001of001.zip
ZIP bytes: 21688
ZIP SHA256: 3720d86f7a62906eed79e064e460357b53cdb47e895b8e6ef514951375de30ca

SOURCE-AND-RELINK-375.txt
Original bytes: 4483
Original SHA256: 86bcbda6976086325833f11c97742a6b2164cb7b1339fe8f3291b4b8e126b12a
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-375-mobile-source-and-relink-375-86bcbda697-p001of001.zip
ZIP bytes: 4589
ZIP SHA256: a06850c3714eb14b7883cd7e816193aa74b562889d937d399bcd60dc8e3e54d7

android-libmpv-lgpl-sources-373.zip
Original bytes: 89473307
Original SHA256: ffbd387508936dc3f1086d4dbaff93d9c823476f493297a85f5dcd269815ca39
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-375.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p001of002.zip
ZIP bytes: 62913642
ZIP SHA256: 51b607612fd0a1f06d1ec92a1c77a4478769653e6a4efd8a88124dc9669885c3
Part 2: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p002of002.zip
ZIP bytes: 26559877
ZIP SHA256: 28f71dfac242ea03fd9b0bfaf388118d8292e2da7e78ccdc5d0814e235d1d834

android-media3-ffmpeg-8.1.3-source-373.zip
Original bytes: 22131512
Original SHA256: d6b4126bf21abaea8387f64a45995c6670caef5f389572db70b2f7da77f46d6c
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-375.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-media3-ffmpeg-8.1.3-source-373-d6b4126bf2-p001of001.zip
ZIP bytes: 22131618
ZIP SHA256: 59c9d7d05eb769ad675af505504a729c39a46d9f7ea4aae94505e7b78a176a4d

pro-iap-notices-373.zip
Original bytes: 54959
Original SHA256: 0e5d1253a2d48bc589d84dc09b72f1b9481a44cc2c053420b246b1da8af90566
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-375.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-pro-iap-notices-373-0e5d1253a2-p001of001.zip
ZIP bytes: 55065
ZIP SHA256: 4134e8bc40bca37a6faac2b179e2d444a7eb20c3861978904ba56ea114243532

npm-notices-373.zip
Original bytes: 744825
Original SHA256: 8d94c76753306ab7bd136777b079ad437a94e3678db0b64b6e573d09d3ffd8e3
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-375.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-npm-notices-373-8d94c76753-p001of001.zip
ZIP bytes: 744931
ZIP SHA256: dcfe0c01a804df8d4bab8a4c9915c7b2350b76d39e5802258f8ebbcd70fad0e8

apk-embedded-notices-373.zip
Original bytes: 19461
Original SHA256: e5d2458c7e1db7b54efa1ad3c3ba8b759ba2806788feba02f2060bdf67ee43b0
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-375.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-apk-embedded-notices-373-e5d2458c7e-p001of001.zip
ZIP bytes: 19567
ZIP SHA256: 53423f018e63cfd3de647a71b0e915e6cb5b45f6a7854bdfca2ae9bf0cf7853e

SHA256SUMS-375.txt
Original bytes: 885
Original SHA256: f488b6584f44a04606ea5939612a8ad33414e0aa702d0091194c88049a5d4a9b
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-375-mobile-sha256sums-f488b6584f-p001of001.zip
ZIP bytes: 991
ZIP SHA256: 638635d86b497aa5afc28c5de97029544fe0dfbbf488695e6675d39ec5646e50