v1.0.0-alpha.6 — Arrival rules and trip updates (4059)

v1.0.0-alpha.6 — Arrival rules and trip updates (build 4059)

Experimental Android prerelease for school demonstrations and controlled testing in Calamba. This is not a production ride service or a completed pilot validation.

Changes

• Drivers: "Arrived at Pickup" and "Complete Trip" work only within 100 m of the pickup or drop-off point, by the phone's GPS. The screen shows how far away you are.
• Passengers: "My driver is here" lets the driver mark arrival when you meet away from the pickup pin. "Get off early" lets the driver end the trip before your drop-off point, wherever it is safe to stop; "Keep riding" takes it back. The fare stays as quoted.
• The trip map tells passengers how long ago the driver's location last updated, once it is more than 15 seconds old.
• If the driver's location stops updating near the destination, the passenger's phone can confirm arrival. Only the distance from the destination is kept, not the location.
• The driver's screen stays on from accepting a ride until the trip ends.
• An existing account asked to confirm its number again no longer sees "Step 4 of 4", and gets "Sign out" instead of "Cancel sign-up".
• The SOS hold label fits on small (320 px wide) screens.
• Server: the arrival rules are enforced by the server since 14 October 2026. Older builds do not have the passenger buttons, so they will be asked to update to 4059.

Installation

ARM64 Android APK, Android 7+. Install over the existing signed alpha to keep your account and app data; do not uninstall first. Version 1.0.0-alpha.6, app build 4059 / Android versionCode 6059.

Verification

• Source 473d2a3. Whole mobile suite passed (463 passed, 13 skipped); analysis clean. Database suite passed (939). Admin console suite passed (140 passed, 2 skipped).
• Existing release signing certificate verified; APK is not debuggable.
• The three database changes were applied to the hosted project on 14 October 2026 and read back.
• Build 4059 has not been installed on a phone yet.
• APK SHA-256: 6abfaab7a5c6820bc90e3e3cfcc6443198117d553e6494b8945063ba248c4fd1.

Known limits

• Not pilot ready and not fully audited.
• The new arrival rules are covered by automated tests but have not yet been tried on the road with two phones.
• If the passenger's phone is off or offline, the driver can end the trip only within 100 m of the drop-off point. At pickup, the driver goes to the pin or cancels.
• Some text messages did not arrive on 14 October 2026 although they were sent; this is being checked. A number on one mobile network still does not receive its code; use a Globe, TM, Smart or TNT number for now. Text verification is limited to the pilot's testers.
• Google gave no formal ruling on mixing its map and routes with another provider's place search. The risk is acknowledged and accepted for this experimental alpha.
• Official boundary, LGU/TODA, survey/field, SMS ownership and the remaining release gates stay open.
• The BJMP testing exception (admin-enrolled test participants) must be disabled before implementation.

v1.0.0-alpha.5 — Boundary, Profile and security-check update (4058)

Retired on 14 October 2026. This APK is no longer available. Download v1.0.0-alpha.6 (build 4059) instead.

v1.0.0-alpha.5 — Boundary, Profile and security-check update (build 4058)

Experimental Android prerelease for school demonstrations and controlled testing in Calamba. This is not a production ride service or a completed pilot validation. This single release replaces the earlier alpha.5 builds 4049, 4054, 4055, 4056 and 4057; the attached APK is the latest, build 4058.

Changes

• Calamba outline on the phone now matches the hosted OpenStreetMap outline, including upland Canlubang and refusal of places outside the city.
• Redesigned email-confirmation reminder on Profile, with dismiss and a resend countdown.
• A short security check at sign-in, sign-up, password reset and password change. It runs inside those screens and stays hidden unless a tap is needed; it no longer opens a centered dialog on a second login. CAPTCHA enforcement is controlled by the server.
• When a tap is wanted, a line above the box says what to do, in Filipino with English under it.
• With no connection, sign-in, sign-up and password reset say "No connection. Check your internet and try again."
• Fixes the administrator invite sign-in recovery, accurate security-check errors, and a screen-reader fix that leaves the closed check out of the accessibility tree.
• Verification codes come by text message (a server change of 13 October 2026). The verify screen no longer says the code may arrive by email. An account asked to confirm its number again is told to tap Send code; before, the screen said a code had been sent when none had.
• If nobody taps the security check, the app says so after about 45 seconds, not two minutes.
• Test teardown hangs fixed. No provider, fare, hosted database or eligibility change.

Installation

ARM64 Android APK, Android 7+. Install over the existing signed alpha to keep your account and app data; do not uninstall first. Version 1.0.0-alpha.5, app build 4058 / Android versionCode 6058. Minimum mobile build 4054.

Verification

• Source b3720e5. Whole mobile suite passed on the commit before the build-number change (430 passed, 13 skipped); analysis clean.
• Existing release signing certificate verified; APK is not debuggable.
• Build 4057 was checked on a Samsung A14 (Login screen only): no-connection message in about 5 seconds, security-check hint shown, wrong password refused, right password reached driver Home. Earlier builds were also checked on an A32.
• Build 4058 was installed over an older build on a Samsung A32 and opened still signed in. Its new verify screen and the 45-second wait have not been seen on a phone.
• Text-message codes were received and accepted on two mobile networks on 13 October 2026, using build 4057.
• APK SHA-256: 89f87a1280ed5fdae4825edecc5863f1ede0ef2c96ea8c2456fc6c653cc14ef8.

Known limits

• Not pilot ready and not fully audited.
• Numbers confirmed before 13 October 2026 were confirmed by email and are asked to confirm again by text. A number on one mobile network did not receive its code; use a Globe, TM, Smart or TNT number for now. Text verification is limited to the pilot's testers.
• The hint appears only when Cloudflare asks for a tap. If nobody taps, the app waits about 45 seconds before saying the check did not finish.
• Deleting a verified account from inside the app worked once with CAPTCHA on (13 October 2026); deletion through the website was tested earlier. Accepting an administrator invite has not been tested with CAPTCHA on.
• Sign-up, password reset and change-password screens were not checked on a phone with build 4057 or 4058.
• Google gave no formal ruling on mixing its map and routes with another provider's place search. The risk is acknowledged and accepted for this experimental alpha.
• Official boundary, LGU/TODA, survey/field, SMS ownership and the remaining release gates stay open.
• The BJMP testing exception (admin-enrolled test participants) must be disabled before implementation.

Older alpha APK assets remain retired.

v1.0.0-alpha.4 — Retired build 4047

Retired download. Superseded by alpha.5 build4049 with the corrected Calamba outline and approved Profile reminder. This release history is retained; its APK asset has been removed. Get the latest experimental APK at https://arangcada.app/download. Full pilot/security/compliance gates remain open.

v1.0.0-alpha.3 — Retired (4046)

v1.0.0-alpha.3 — School and team testing (build 4046)

Experimental Android prerelease for school demonstrations and controlled testing in Calamba. This is not a production ride service or a completed pilot validation.

Changes

• LocationIQ place search with visible attribution; Google Maps and Google Routes retained. Google Places search is not used in this build.
• Independent pin selection and MapTiler street labels when a place is missing from search.
• Improved driver rerouting request discipline, provider request guards and route/map pairing.
• Smaller ride panel with accessible Message/Call controls, distinct Cancel footer, and visible passenger choices and fare.
• Popular shortcuts use live search rather than old hardcoded coordinates; Canlubang Plaza removed.
• Saved Google place-content cleanup and request-age trip-location retention.
• Updated privacy disclosures, including LocationIQ cross-border processing.
• Nearest eligible driver matching across the Calamba service area without TODA dispatch filtering; existing 1–3 km search radius and fare rules retained.

Installation

ARM64 Android APK. Install over the existing release-signed app to retain data; do not uninstall first. Android versionCode 6046, app build 4046, version 1.0.0-alpha.3.

Verification

• APK source: c2f58ba. Built with SEARCH_PROVIDER=locationiq.
• Mobile analysis clean; full suite 399 passed / 13 skipped. Additional configured provider checks and targeted regression checks passed.
• Installed on Samsung A14 and A32 with account retention; search, attribution, Google route preview, fare/footer, service-area refusal and driver Home/GPS checked. These checks do not prove real dispatch or pickup readiness.
• Existing release signing certificate verified; APK is not debuggable.
• APK SHA-256: 909de25a54548ace5937265034c3b1bb300f9618f1355057a7e436c10c5d2b8f.
• Signing certificate SHA-256: 35757864d67928767c3a00b24222e194f1ee6e0877b92cc19d0295248ff3e9ff.

Known limits

• Google support replied on October 5, 2026 but declined to give a formal compliance ruling. Combining LocationIQ/MapTiler content with Google maps remains an unresolved interpretation risk, accepted for this experimental school/team alpha under the owner's delegated decision authority. This is not Google approval or confirmed provider-term compliance. The GitHub asset and website are publicly accessible even though the intended testers are the school/team group; this is not an access-controlled closed release.
• Search coverage and pins are not field-verified. Check the confirmation pin; manually choose a point for missing places.
• When Google Routes is unavailable, the Google map shows no route line; ORS is not automatically drawn on it. LocationIQ search failure permits manual pin selection rather than Google Places fallback.
• Verification codes currently arrive by email; phone ownership is not verified by real SMS.
• Real-driver eligibility, Calamba field dispatch/pickup/rerouting, pilot/survey checks and official service-area polygon provenance remain open. Test-driver flags remain in place.
• The broader security audit has unresolved findings. Two minor review items remain: duplicate fare narration for screen readers and unused routing code.
• Providers have shared usage quotas, so service availability during testing is limited.

Older alpha APK assets remain retired. Publication of this experimental build was requested by the owner for school testing on October 5, 2026.

v1.0.0-alpha.2 — Retired

RETIRED — APK download removed. This build is no longer offered for installation. The next alpha is under review; check https://arangcada.app/download for availability. Installed copies are not automatically removed. Release notes below are retained as historical records.

---

v1.0.0-alpha.2 — Calamba testing build 4038

For the team's controlled alpha testing in Calamba, not a production ride service.

Changes since alpha.1

• Google Places search and Google maps, with automatic MapTiler search and ORS routing fallbacks when the primary service is unavailable.
• Popular places use live search instead of old preset pins. Canlubang Plaza is removed from the preset list.
• Smaller matched-ride panel; Message and Call stay reachable, with a distinct Cancel footer.
• Initial route framing retries once after native map layout, without another route API call.
• Driver pickup routing advances on the device rather than requesting a new route on every GPS update; sustained off-route fixes trigger rerouting with a 60-second floor.
• Google search attribution stays visible above the keyboard. Saved Google places retain IDs only, refresh coordinates, and reject stale coordinates. Trip place retention is limited to 29 days from the request.
• Authentication/session recovery, driver enrollment checks, admin live updates, profile-photo lifetime, and an app update prompt include the prior audit fixes.
• Fares and provider defaults are unchanged. No quota increases, paid subscriptions, developer role, or new Services panel.

Installation

ARM64 Android APK. Install over the existing app to preserve its data; do not uninstall first. Download from https://arangcada.app/download.

Validation

Mobile analysis clean; full suite 384 passed / 12 skipped. Separate provider tests with synthetic keys and mocked HTTP: 10 passed. Website checks: 4 passed. Earlier database validation: 767 assertions passed; no new database changes in this build.

Release source: a3d7bfc. APK signature/hash and connected-phone results are recorded below after verification.

Known limits / test focus

• Real Calamba driver dispatch, pickup rerouting and driver survey still need field testing on this exact APK. Earlier two-phone acceptance passed on an older build; it is not proof for this version.
• Verification codes currently arrive by email during testing. They do not establish ownership of the entered phone number; real SMS cutover remains pending.
• If Google Place Details is unavailable after selecting a suggestion, search again through the fallback or choose a pin manually. Alternate providers have their own limits.
• Five Popular shortcuts are search queries, not independently accepted preset coordinates. Check each selected pin before booking.
• The broader release audit remains open, including platform/Auth/TLS settings, Google key restrictions, complete Google content-policy review and live SMS. This alpha does not certify production or pilot readiness.
  APK SHA-256: 0f9067b12bab26c817083996e637087436d62088011586308e1921142594c07a. Existing ArangCada signing certificate verified; release is not debuggable. Both A14 and A32 upgraded successfully to Android versionCode 6038 and retained signed-in accounts. Driver Home live GPS and Google map verified; Calamba field testing remains pending.

On build 4038, A32 verified: Canlubang Plaza absent, live Google search and Place Details selection, visible search credit, automatic local route framing, visible Google map logo, and outside-Calamba booking refusal. Matched-ride controls have widget coverage; no new live dispatch was created.

v1.0.0-alpha.1 — Retired

RETIRED — APK download removed. This build is no longer offered for installation. The next alpha is under review; check https://arangcada.app/download for availability. Installed copies are not automatically removed. Release notes below are retained as historical records.

---

First public Android alpha for test feedback. The APK is a universal Android build with version code 4034.

This build connects to the current test services. Account access, driver availability, and rides may be limited during testing. Wallet top-ups and digital payments are disabled; supported trips use cash.

Signed with the ArangCada release certificate (SHA-256: 35757864d67928767c3a00b24222e194f1ee6e0877b92cc19d0295248ff3e9ff). If you installed an earlier debug-signed build, uninstall it before installing this one.

APK SHA-256: 608598F7954DE16340DA5E3C9BAAFF80B3532073BB85B2A5FDC99E835E843924

Updated 29 Sep 2026: rebuilt with the refreshed ArangCada app icon (same version and certificate; installs over the earlier alpha).