CouchPotatoPlayer android-mobile 1.2.0/376 — sources and notices

EXACT ARTIFACT AND SOURCE
Source commit: bcbda86daf5f2fd1b0e1458b9aee66a9a75c0020
Upload AAB SHA256: 2d6ff64e6d4775403ab751011879ebfc154812bf9b472c5c732abf460d83220f
Hermes bundle SHA256: dcca0129085cc24f97137d091806e3221d82410bb54201623e54106a54f03d5b
Local QA APK SHA256: f8d3837db9b7c216391903bacfb525f3a174b19ff4baf71a132a7aeef30a4362
AAB-derived LOCAL QA APK signed with the existing upload key. Not a Google Play app-signing-key APK and not a website download.
A matching Google-signed universal APK has NOT been verified here. This source
index is for the recorded AAB/localQA content and does not publish an APK,
announce website availability or claim a public store rollout.

REASSEMBLY (Python3 standard library; no third-party installation)
1. Extract the index ZIP into a new working directory.
2. Run: python3 REASSEMBLE-376.py --download
3. Ten verified original files are created under reassembled-376/.
Use --verify-only to verify without writing original files. Existing correct
originals are retained; conflicting originals are never overwritten. For offline
use, download the listed ZIP parts into parts/ and omit --download. The ZIPs are
transport containers: do not concatenate the ZIP files themselves. The helper
verifies each ZIP, reads its single stored part, reassembles the original bytes
in manifest order and checks every complete original SHA256.

PROVENANCE AND REUSE
The app source ZIP is a NEW git archive of the exact commit above. Historical373
Git source is not asserted to cover this app runtime. Unchanged native component
sources and notices retain their actual373 filenames/URLs/hashes, with explicit
reuse evidence in COMPONENTS-376.json. All20 shipped provider shared libraries,
10158 FFmpeg/Media3 source files and all7 embedded notice/Billing payloads were
compared. The375 proof for802 installed npm identities and751 supplied notice
payloads is reused because lockfile/patch/all non-script package manifest fields
match375; only updates:export:android changed. No fresh installed-notice audit
is claimed. Current
host/native integration materials and actual rebuilt-library hashes accompany
the source. Reuse does not claim rebuilt wrapper binaries are byte-identical.
No historical367/373 publication bytes are changed. Original app/CPPlayerKit
licenses remain controlling; publication grants no new rights to proprietary code.

LIMITS
This is not a complete all-dependency license audit or legal certification.
The inherited npm pack documents57 missing package-root notice mappings;44 are
in a conservative production graph which includes build/CLI tooling. Monorepo
attribution and exact APK runtime-shipment mapping remain unverified. There is
no Apple source/relink claim. Google-signature/download verification, working
TV Drive sync and real Store transactions are not established by these files.
Google grant/encrypted sync product QA is separately evidenced; this source index
makes no runtime-success claim.

ORIGINAL FILES AND DOWNLOAD PARTS

CouchPotatoPlayer-source-v1.2.0-376-bcbda86d.zip
Original bytes: 50546468
Original SHA256: 6309eef0db190ff89c165bfdaae841bbe2dec023b1265d33b541ec79a219bf67
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-376-mobile-couchpotatoplayer-source-v1.2.0-376-bcbda86d-6309eef0db-p001of001.zip
ZIP bytes: 50546574
ZIP SHA256: e6a97dd5eec3b93256766e2f52356377916e46ee0d87d87531c77ec80562985b

android-mobile-376-host-build-materials.zip
Original bytes: 46597
Original SHA256: 73b98eff0f7cbda950bbfbb4c1889eceb2c89ad4433a84d7728cf32c1e7599a6
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-376-mobile-android-mobile-376-host-build-materials-73b98eff0f-p001of001.zip
ZIP bytes: 46703
ZIP SHA256: 583ee3a6d97199f0fbc8830d563296118bf008e6b344ccdc1c1b5c212718a9ef

COMPONENTS-376.json
Original bytes: 24391
Original SHA256: 0acdc4f3091b091078f92979c1643457440943a421a6f99f3fc0ca669003ea76
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-376-mobile-components-376-0acdc4f309-p001of001.zip
ZIP bytes: 24497
ZIP SHA256: bc761c45a865713c214cc771c52614e68078e2ca4fe18cd8c2a981c661dd022d

SOURCE-AND-RELINK-376.txt
Original bytes: 4719
Original SHA256: 365ba4ae84ea75486f74ad4d86980e9d3ca9022bcbf8494646fd6e9684323292
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-376-mobile-source-and-relink-376-365ba4ae84-p001of001.zip
ZIP bytes: 4825
ZIP SHA256: 3613350ad89a964b2dacd890d7a8c90218d278425d36695ed672eedb823b061a

android-libmpv-lgpl-sources-373.zip
Original bytes: 89473307
Original SHA256: ffbd387508936dc3f1086d4dbaff93d9c823476f493297a85f5dcd269815ca39
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-376.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p001of002.zip
ZIP bytes: 62913642
ZIP SHA256: 51b607612fd0a1f06d1ec92a1c77a4478769653e6a4efd8a88124dc9669885c3
Part 2: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p002of002.zip
ZIP bytes: 26559877
ZIP SHA256: 28f71dfac242ea03fd9b0bfaf388118d8292e2da7e78ccdc5d0814e235d1d834

android-media3-ffmpeg-8.1.3-source-373.zip
Original bytes: 22131512
Original SHA256: d6b4126bf21abaea8387f64a45995c6670caef5f389572db70b2f7da77f46d6c
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-376.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-media3-ffmpeg-8.1.3-source-373-d6b4126bf2-p001of001.zip
ZIP bytes: 22131618
ZIP SHA256: 59c9d7d05eb769ad675af505504a729c39a46d9f7ea4aae94505e7b78a176a4d

pro-iap-notices-373.zip
Original bytes: 54959
Original SHA256: 0e5d1253a2d48bc589d84dc09b72f1b9481a44cc2c053420b246b1da8af90566
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-376.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-pro-iap-notices-373-0e5d1253a2-p001of001.zip
ZIP bytes: 55065
ZIP SHA256: 4134e8bc40bca37a6faac2b179e2d444a7eb20c3861978904ba56ea114243532

npm-notices-373.zip
Original bytes: 744825
Original SHA256: 8d94c76753306ab7bd136777b079ad437a94e3678db0b64b6e573d09d3ffd8e3
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-376.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-npm-notices-373-8d94c76753-p001of001.zip
ZIP bytes: 744931
ZIP SHA256: dcfe0c01a804df8d4bab8a4c9915c7b2350b76d39e5802258f8ebbcd70fad0e8

apk-embedded-notices-373.zip
Original bytes: 19461
Original SHA256: e5d2458c7e1db7b54efa1ad3c3ba8b759ba2806788feba02f2060bdf67ee43b0
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-376.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-apk-embedded-notices-373-e5d2458c7e-p001of001.zip
ZIP bytes: 19567
ZIP SHA256: 53423f018e63cfd3de647a71b0e915e6cb5b45f6a7854bdfca2ae9bf0cf7853e

SHA256SUMS-376.txt
Original bytes: 885
Original SHA256: c3d47b9b5af5760d191e3289d810bc9364bc5786520f26423b9d373c62760466
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-376-mobile-sha256sums-c3d47b9b5a-p001of001.zip
ZIP bytes: 991
ZIP SHA256: 6488e160b06f68a5d8a90601026a99cb0102c7e715cb72e60d4d317cca89a78b