VRKA Android 5.0.2

VRKA Android 5.0.2

5.0.2

• Fixed in-app application update detection and APK selection.
• Improved background application updates with persistent WorkManager downloads.
• Added retry handling for temporary network failures and connection interruptions.
• Improved APK staging, verification, and update-ready notification handling.
• Improved update installation and recovery behavior.

5.0

• Redesigned the interface with the Liquid Glass navigation system and horizontal swipe navigation.
• Added configurable concurrent downloads with bounded scheduling and independent cancellation/failure handling.
• Added Android Share Sheet support with robust shared-URL extraction and Download URL pre-filling.
• Added actual downloaded-resolution tracking and improved Queue/History media metadata.
• Added safer History management with record-only deletion, file deletion, multi-select, batch actions, and destructive-action safeguards.
• Improved download state persistence across process restarts and hardened terminal job-state handling.
• Restored and hardened Browser Fallback discovery and transfer handoff through GeckoView and yt-dlp.
• Improved Browser Fallback reliability by separating browser UI/session lifecycle from active transfers and removing blocking worker operations.
• Added validated custom yt-dlp argument templates with shell-free execution, safe staging/output handling, and fallback isolation.
• Improved Android yt-dlp compatibility, including handling of unsupported impersonation targets.
• Added optional, default-off H.264 Compatibility Mode using local FFmpeg conversion and post-conversion validation.
• Reworked subtitle handling with targeted language selection, rate-limit/failure isolation, container-aware embedding, and final subtitle-track verification.
• Improved YouTube subtitle handling for creator/manual captions and automatic-caption fallback.
• Upgraded GeckoView to 156.0.20260921121718 and improved browser-component/runtime reporting.
• Improved component updater reliability, installed-version detection, state transitions, cancellation, and channel switching.
• Hardened request/header handling, private browser-candidate state, diagnostics, output validation, and staged-file cleanup.
• Improved Settings descriptions and component/status presentation to reflect the final production architecture.

Known Limitations

• Browser Fallback downloads do not currently fetch subtitles.
• H.264 Compatibility Mode is optional and disabled by default.
• Browser Fallback remains dependent on site discovery and yt-dlp/site compatibility.

VRKA Android 5.0.1

VRKA Android 5.0.1

What's New

• Fixed in-app update detection and exact APK selection.
• Improved verification before handing downloaded updates to Android's installer.

VRKA Android 5.0

• Redesigned the interface with Liquid Glass navigation and swipe paging.
• Added configurable concurrent downloads and Android Share Sheet support.
• Improved Browser Fallback discovery and reliability.
• Added custom yt-dlp command templates and optional H.264 Compatibility Mode.
• Improved subtitles, download history, metadata, and job persistence.
• Updated GeckoView and browser components, with security and reliability improvements.

Known Limitations

• Browser Fallback downloads do not include subtitles.

VRKA Android 5.0

VRKA Android 5.0

Updates

• yt-dlp: Bundled runtime updated to 2026.08.19.
• Component Version Detection: Dynamic installed-version resolution reading active zipapp, runtime versionName(), and bundled raw resource without hardcoded fallbacks.
• Update Checks Hardening: Bounded network reads (64 KiB cap), 6-second socket connect/read timeouts, 8-second component deadline, and cooperative cancellation propagation. Single-flight batch updater with rapid-tap debounce and spam resilience.
• GeckoView Browser Fallback: Passive media discovery observing network requests and DOM media elements for anti-bot or client-side player challenges; standard yt-dlp transfer handoff with sanitized public URL and header validation.
• Liquid-Glass Navigation: Equal slot-based indicator geometry across all destinations (Queue, Download, History, Settings), layout-offset backdrop sampling, and AGSL lens transformation with 1.35x magnification, edge refraction, and chromatic dispersion.
• Custom yt-dlp Templates: Named argument templates with parameter validation against RFC 7230, rejecting shell hooks, file paths, credentials, and proxies.
• uBlock Origin: Bundled official signed WebExtension for browser request filtering.
• Component Cleanup: Retired Puemos component removed from active production UI, extension registration, and updater routes, with one-time migration cleanup.
• H.264 Compatibility Mode: Optional conversion mode with FFmpeg validation before publication.

Verification

• 348 unit tests passed across 33 test suites (0 failures, 0 skipped).
• Release lint completed with 0 errors and 0 fatal findings (67 non-fatal warnings, 1 hint).
• Production signing verified using APK Signature Scheme v2 with 4096-bit RSA key.
• Physical device validation completed and accepted by maintainer on OnePlus 11 (Android 16, arm64-v8a).

APK

• File: VRKA-Android-v5.0.apk
• Size: 155,334,093 bytes (~148.1 MB)
• SHA-256: D821B65BE0D054F3232E7A3BB051408BC0150EB2A66CDF5E7D3FC9170D8DA487
• Signing Certificate SHA-256: 9BEFDBF4FB00ACEDB72F866CE4016944C95EA99448E205768383B310CA11E1FA
• Package ID: com.mvrk.vrka
• Version: 5.0 (versionCode 50000)
• Native ABI: arm64-v8a
• Minimum / Target SDK: 26 / 36

VRKA Android 4.5.3

VRKA Android 4.5.3

Updates

• Updated yt-dlp to 2026.08.19.
• Updated uBlock Origin to 1.74.0.
• Updated Puemos to 5.5.0.
• Improved component update reliability.
• Prevented duplicate update operations from repeated button presses.
• Added persistent background update handling with WorkManager.
• Added the 24-hour automatic startup update check.
• Improved application update downloads.
• Improved runtime verification of installed WebExtensions.

Verification

• 237 unit tests passed.
• Release APK verified with the expected signing certificate.
• Verified on physical OnePlus 11 hardware running Android 16.

APK

File:

VRKA-Android-v4.5.3.apk

SHA-256:

8f7b76c060ebf38069817e18960cd1f8f5fcfbbd92b114877ae4431ca36610fc

Signing certificate SHA-256:

9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa

VRKA Android 4.5.2

VRKA Android 4.5.2 — yt-dlp Component Updater BouncyCastle Provider & R8 Compatibility Fix

VRKA Android 4.5.2 delivers a targeted cryptographic reliability fix for the native yt-dlp component updater, resolving an OpenPGP verification crash on minified release builds, adding comprehensive regression tests, and confirming in-place upgrade and live component updates on physical hardware.

Root Cause & Problem Description

On fresh installations of minified release builds, triggering a yt-dlp Engine update resulted in:
Update failed: exception on setup: java.security.NoSuchAlgorithmException: no such algorithm: S

Investigation revealed two interrelated factors:

1. R8 Minification Stripping / Obfuscation: Release builds enabled with R8 obfuscated and stripped internal BouncyCastle reflection and algorithm lookup tables because app/proguard-rules.pro lacked an explicit keep rule for org.bouncycastle.**.
2. Android Platform Security Provider Precedence: SecureComponentUpdater.ensureBouncyCastleProvider() relied on Security.getProvider("BC"). Because Android includes a stripped internal system provider named "BC" (com.android.org.bouncycastle), the application could route cryptographic operations through Android's incomplete system provider rather than the bundled full BouncyCastle library.

Key Changes & Fix

• BouncyCastle R8 Keep Rules: Added -keep class org.bouncycastle.** { *; }, -dontwarn org.bouncycastle.**, and -dontwarn javax.naming.** to app/proguard-rules.pro, preserving complete algorithm lookup mappings and cryptographic provider infrastructure under R8 shrinking and obfuscation.
• Explicit Bundled Provider Resolution: Updated SecureComponentUpdater to instantiate and cache a direct instance of org.bouncycastle.jce.provider.BouncyCastleProvider. This explicit provider instance is supplied directly to JcaPGPContentVerifierBuilderProvider().setProvider(provider) and JcaKeyFingerprintCalculator().setProvider(provider) during OpenPGP detached signature verification, eliminating reliance on platform "BC" lookup while preserving platform security provider ordering.
• Post-Update Execution Verification: Refined Step 5 post-update execution checks to verify the newly installed binary directly via subprocess execution (--version) and fallback to disk presence verification, preventing false rollback triggers on fresh installs where shared preferences have not yet initialized.
• Cryptographic Security Continuity: The full OpenPGP verification model is strictly preserved. Detached signatures (SHA2-256SUMS.sig) are validated against the pinned primary trust anchor (AC0CBBE6848D6A873464AF4E57CF65933B5A7581), SHA-256 checksums are verified before binary replacement, and transactional rollback protection remains fully intact.

Regression Testing & Test Results

• Automated Regression Suite:
  • SecureComponentUpdaterTest#test29_EnsureBouncyCastleProviderSuppliesRequiredAlgorithms: Verifies the bundled BouncyCastle provider exposes SHA-256, SHA-512, SHA256withRSA, and SHA512withRSA.
  • SecureComponentUpdaterTest#test30_VerifyManifestSignatureUsesBundledProviderDirectly: Verifies real PGP manifest and signature verification against the pinned public key using the explicit bundled provider.
• Total Test Results: 192 unit tests executed across 17 test suites with 0 failures, 0 errors, 0 skipped.

Physical Device Verification

• Target Hardware: OnePlus 11 5G (CPH2447, Android 16, serial 897f6ce5).
• In-Place Upgrade: Verified via adb install -r VRKA-Android-v4.5.2.apk with zero signature mismatch against canonical lineage.
• Live Component Update: Triggered live yt-dlp update on device. Logcat confirmed:
  • VRKA-SecureUpdater: Fetching and verifying manifest for yt-dlp/yt-dlp-nightly-builds@2026.08.30.232658...
  • VRKA-SecureUpdater: OpenPGP signature successfully verified against pinned primary key (AC0CBBE6848D6A873464AF4E57CF65933B5A7581)
  • VRKA-SecureUpdater: SHA-256 checksum verified successfully
  • VRKA-SecureUpdater: Executing post-update verification...
  • VRKA-SecureUpdater: yt-dlp successfully updated and verified: v2026.08.30.232658
  • Zero occurrence of NoSuchAlgorithmException: no such algorithm: S.

Release Artifacts & Checksums

• Package: VRKA-Android-v4.5.2.apk
• Size: 154,866,257 bytes
• SHA-256 Checksum: 468df24d3d0d123f386e8acdf1fcadda7e726950b387394024b418d5db575996
• Signing Certificate (SHA-256): 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa (Canonical Lineage)
• Signing Certificate (SHA-1): 7758980f74a503684bf1a187994e447823d19d7c

VRKA Android 4.5.1

VRKA Android 4.5.1 — Download Location UX, HTTP Header Propagation, Native Opus Alignment, and In-App Updater

VRKA Android 4.5.1 delivers a targeted release refining download destination management, end-to-end HTTP header transport verification, native Opus stream copy labeling, complete documentation alignment, and an integrated in-app application self-update mechanism.

Key Changes & Corrections

• Download Location UX Simplification:
  • Completely removed internal platform terminology ("MediaStore", "SAF", "remembered directory", "URI") across all user-facing interfaces.
  • Replaced technical storage labels with clear, user-focused "Download Location".
  • Implemented an application-owned modal prompt on first download attempt displaying the target destination (Downloads/VRKA), a [Choose Location] button, a Set as default and don't ask again option, and [Download] / [Cancel] actions.
  • Revamped Settings Storage section into a unified "Download Location" card showing the current destination with [Change] and [Reset] actions, accompanied by a two-way segmented selector ([Use selected] vs [Ask every time]).
  • Destinations are resolved at enqueue time so that queued items never prompt or stall.
• HTTP Header End-to-End Propagation:
  • Validated that Referer, Origin, and user-defined custom headers reliably reach network requests across direct extractor, direct stream, and HLS manifest + segment transport paths.
  • Backed by automated unit test suites (HttpHeaderE2ETest) and verified on physical hardware with live network captures (HttpHeaderDeviceTest).
• Opus Stream-Copy vs Transcode Clarification:
  • Updated audio option labels to "Opus (prefer native)" and added explicit helper documentation: "Prefer native Opus stream copy when available; transcode fallback if non-Opus source."
• Typography & Font Integrity:
  • Confirmed system font preference cleanly overrides monospace globally without residual layout clipping.
• Physical Device & Test Suite Verification:
  • 190 automated unit tests passing offline across 17 test suites.
  • Verified on OnePlus 11 5G (CPH2447, Android 16) with successful in-place upgrade, modal flow verification, live header inspection, native Opus direct stream copy extraction, and live updater verification.

In-App Application Update Mechanism

VRKA Android now features a native in-app application self-update mechanism, providing seamless upgrade notifications and installation directly within the application:

• GitHub Releases Integration: Periodically checks the official VRKA Android GitHub Releases repository (/repos/MaverickRox/VRKA-Android/releases/latest) for new application releases.
• 24-Hour Gating: Automatic startup update checks are rate-limited to execute at most once every 24 hours (86,400,000 ms), preventing unnecessary network traffic and API rate-limiting.
• Manual Check Bypass: A dedicated [Check for Updates] button in the Settings "About" section bypasses the 24-hour rate limit and triggers an immediate update check with informative feedback.
• Non-Blocking Startup: Startup update checks execute asynchronously on a background thread (Dispatchers.IO) and fail completely silently upon network timeouts, rate limits, or offline conditions, ensuring zero interruption to the application launch flow.
• Semantic Version Comparison: Evaluates versions using formal numeric segment comparison (SemanticVersion), ensuring proper ordering across multi-digit versions (e.g., 4.5.9 < 4.5.10, 4.9.0 < 5.0.0).
• Strict APK Asset Selection: Enforces the canonical VRKA naming pattern ^VRKA-Android-v\d+\.\d+\.\d+\.apk$ and selects the asset corresponding exactly to VRKA-Android-v$version.apk. Arbitrary APKs, non-matching asset names, and non-APK files are strictly rejected.
• Per-Hop Redirect Security: Validates all HTTP redirects explicitly (instanceFollowRedirects = false). Rejects insecure HTTP and protocol downgrades, validates hosts against approved GitHub release and asset hosts (api.github.com, github.com, objects.githubusercontent.com, release-assets.githubusercontent.com, raw.githubusercontent.com, *.githubusercontent.com), rejects arbitrary or look-alike hosts, and enforces a strict redirect limit (max 5 hops). Applied consistently to both GitHub API release querying and APK binary streaming.
• Secure FileProvider Installation: Downloads the release package into internal app cache (cacheDir/updates/) and safely invokes the Android PackageInstaller via FileProvider (com.mvrk.vrka.fileprovider) with temporary read URI permissions, validating canRequestPackageInstalls() on Android 8.0+.
• Independent Component Updater Separation: The application self-updater is strictly separate from the existing cryptographically authenticated yt-dlp native component updater (SecureComponentUpdater), which continues to operate independently with its own pinned OpenPGP verification.

Updater Verification

• Automated Tests: 14 dedicated unit tests in AppUpdateManagerTest (part of the 190-test offline suite) validating SemVer parsing, numeric comparison, draft/pre-release filtering, strict APK asset selection, HTTPS enforcement, HTTP downgrade rejection, arbitrary host rejection, and redirect resolution.
• Physical Hardware Verification: Verified on OnePlus 11 5G (CPH2447, Android 16, serial 897f6ce5). Clean startup, verified 24h gating log (VRKA-AppUpdater: Skipping background update check; within 24h gate), verified manual check reporting "VRKA is up to date", and verified seamless in-place package installation.

Release Artifacts & Checksums

• Package: VRKA-Android-v4.5.1.apk
• Size: 152,573,251 bytes
• SHA-256 Checksum: 5ad6eef20b5843cf726bad2f60993e7a98248aad171212a642bd95f4201ba594
• Signing Certificate (SHA-256): 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa (Canonical Lineage)
• Signing Certificate (SHA-1): 7758980f74a503684bf1a187994e447823d19d7c

VRKA Android 4.5

VRKA Android 4.5 — Audio Pipeline Overhaul, Custom HTTP Headers & Architectural Refinements

VRKA Android 4.5 introduces extensive enhancements to the media pipeline, custom HTTP header support with injection protection, multi-tier sensitive data redaction, flexible storage destination controls, and dynamic font customization.

Key Changes & Features

• Custom HTTP Headers & Injection Prevention: User-defined HTTP headers validated strictly against RFC 7230 token specifications. Illegal header characters and CRLF injection sequences (\r, \n) are strictly rejected. Case-insensitive deduplication and normalization ensure predictable header state.
• Dedicated Referer & Origin Headers: Dedicated input parameters for Referer and Origin take strict precedence over custom headers, allowing accurate media extraction on sites requiring strict header checks.
• Multi-Tier Sensitive Header Redaction: Two-pass recursive redaction automatically masks authorization tokens, cookies, session identifiers, and API keys ([REDACTED]) across system logs, diagnostic crash traces, on-device stores, and UI inspection cards.
• Audio Format Overhaul:
  • MP3: Selectable bitrates (128, 160, 192, 224, 256, 320 kbps), high-quality libmp3lame postprocessing, metadata tagging, and cover art embedding.
  • Opus: "Best Native Opus" prioritizing stream-copy remuxing without transcoding (bestaudio[acodec^=opus]/bestaudio/best).
  • WAV: Uncompressed 16-bit linear PCM (pcm_s16le, 48 kHz stereo) for lossless audio extraction, with automated omission of --embed-thumbnail to prevent yt-dlp postprocessing failure.
  • FLAC Deprecation: Permanently removed FLAC support with transparent legacy migration to Opus.
• Native Audio Stream Validation: Integrated AudioValidator leveraging native ffprobe to verify audio stream presence, codec matching, and format integrity prior to media publication.
• Dynamic Font Preference: User-selectable typography toggle between the signature monospace VRKA Font (Space Mono) and clean System Font (Roboto / device default), dynamically persisted in DataStore.
• Storage Access Framework (SAF) Save Location Modes: Configurable destination behavior supporting "Remember Location" (persisting user-selected folder via takePersistableUriPermission) and "Ask Every Time" (interactive document tree picker on enqueue).
• Comprehensive Verification: 171 automated unit tests passing offline across 15 test suites. Physically verified on OnePlus 11 5G (CPH2447, Android 16) with seamless in-place upgrade, UI responsiveness, and successful physical downloads across MP3, Opus, and WAV formats.

Release Artifacts & Checksums

• Package: VRKA-Android-v4.5.apk
• SHA-256 Checksum: e8b7074aac3001f1374656c87d30a86a31f9852b8158dd32d9a0b4bcbfd2ad8c
• Signing Certificate (SHA-256): 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa
• Signing Certificate (SHA-1): 7758980f74a503684bf1a187994e447823d19d7c

VRKA Android 4.0.3

VRKA Android 4.0.3 — Corrective Hardening Pass

VRKA Android 4.0.3 delivers critical cryptographic and filesystem hardening, comprehensive behavioral test expansion, and documentation corrections following an external security review.

Key Changes & Hardening

• OpenPGP Issuer-Fingerprint Verification: Enforced cryptographic OpenPGP issuer-fingerprint validation in SecureComponentUpdater. The detached signature verification routine now extracts and validates the issuer fingerprint subpacket against the pinned upstream trust anchor (AC0CBBE6848D6A873464AF4E57CF65933B5A7581), strictly rejecting signatures from untrusted subpackets or forged key IDs.
• Filesystem Transactional Replacement with Safe Fallback: Abstracted filesystem operations behind a clean FileOperations interface. Implemented robust handling for AtomicMoveNotSupportedException with safe file replacement, directory syncing (fsync), and transactional rollback on post-validation failure.
• Comprehensive Behavioral Test Suite: Replaced static/shallow checks with 32 deep behavioral tests in SecureComponentUpdaterTest (151 tests total across the project, all passing offline). Tests comprehensively verify multi-hop redirect chains, HTTP downgrade rejection, untrusted host rejection, redirect loop/depth limits, in-memory OpenPGP RSA key generation/signing, tampered signatures, issuer fingerprint mismatches, and atomic move fallback mechanics.
• Documentation & Certificate Accuracy: Corrected the release signer certificate SHA-1 fingerprint (7758980f74a503684bf1a187994e447823d19d7c) and aligned all architectural, security, and test documentation across README.md, SECURITY.md, SECURITY_REVIEW.md, TEST_RESULTS.md, and KNOWN_LIMITATIONS.md.
• In-Place Upgrade Verified: Verified seamless in-place upgrade on physical hardware (OnePlus 11 5G CPH2447, Android 14) with canonical signing lineage preserved (9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa).

Release Artifacts & Checksums

• Package: VRKA-Android-v4.0.3.apk
• SHA-256 Checksum: b447477cf4a0c9a4db473c1d5dc38381956c0092b75060d6000aed6a5edf2ffb
• Signing Certificate (SHA-256): 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa
• Signing Certificate (SHA-1): 7758980f74a503684bf1a187994e447823d19d7c

VRKA Android 4.0.2

VRKA Android 4.0.2 — Release Hardening Pass

VRKA Android 4.0.2 delivers comprehensive updater authenticity hardening, dependency security alignment, browser session isolation, and test suite expansion.

Key Changes & Security Hardening

• Cryptographically Authenticated Updates: Embedded upstream yt-dlp release trust anchor (AC0CBBE6848D6A873464AF4E57CF65933B5A7581) and integrated standard Bouncy Castle OpenPGP detached signature verification (SHA2-256SUMS.sig over SHA2-256SUMS). Updates are fetched strictly over HTTPS with validated GitHub release redirects, transactional staging, post-update execution validation, and automatic rollback on failure.
• Truthful Bundled Component Status: Updated component management semantics to reflect uBlock Origin (v1.74.0) and Puemos HLS Detection (v1.0.0) truthfully as immutable APK assets updated exclusively via application releases.
• Browser Session Storage Clearing: Added dedicated session and storage clearing for the GeckoView fallback runtime under Settings ("Browser Subsystems") utilizing exact StorageController.ClearFlags (COOKIES, DOM_STORAGES, AUTH_SESSIONS, SITE_DATA, ALL_CACHES) and clearing in-memory bridge candidates without touching application history or preferences.
• Dependency Vulnerability Alignment: Resolved Bouncy Castle bcprov-jdk18on:1.85.2 alongside bcpg-jdk18on:1.85 and audited all transitive runtime dependencies for security and R8 dead-code elimination.
• Deterministic Unit Test Expansion: Added 32 new offline unit tests (145 tests total, 0 failures) thoroughly validating cryptographic signature checking, tampered manifest rejection, checksum mismatches, redirect policies, rollback mechanics, and JobStore persistence and queue recovery.
• Canonical Signing Lineage: Signed using canonical release certificate 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa to guarantee seamless in-place updates.

Release Artifacts & Checksums

• Package: VRKA-Android-v4.0.2.apk
• SHA-256 Checksum: c8587dafb5ad262cb7e49449b7be16409642a5fd5f615584c1f0ca2bed42dc07
• Signing Fingerprint (SHA-256): 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa

VRKA Android 4.0.1 Hotfix

VRKA Android 4.0.1 is an immediate production hotfix addressing YouTube format/quality capping and introducing an on-device Diagnostics UI.

Key Changes & Fixes

1. YouTube Format & Bitrate Resolution:

   • Resolved an issue where YouTube downloads were capped at ~640×360 (format 18) regardless of source resolution (1080p, 4K, HDR, 60fps).
   • Removed aggressive --extractor-args "youtube:player_client=..." that caused SABR streaming fallback and stripped DASH manifests.
   • Restored proper video format selection via buildVideoFormat() (bestvideo+bestaudio/best) and resolution/fps sorting (-S res,fps), enabling full 1080p, 4K HDR 60fps, and high-framerate stream downloads.

2. On-Device Diagnostics UI:

   • Added a dedicated Diagnostics section in Settings to inspect detailed failure records for failed downloads.
   • Captures failure stage (Direct Extraction, Browser Fallback, Native Replay, Gecko Transport, Publishing), error category, error summary, and sanitized terminal log tail.
   • Strictly 100% on-device and private: automatically redacts authorization tokens, cookies, passwords, and sensitive query parameters; zero remote analytics or telemetry.
   • Includes one-tap "Copy Details" for bug reporting and "Clear All" for log management.

3. Cryptographic Signing Continuity:

   • Built and signed with the canonical v1.0 signing key (9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa).
   • Verified seamless in-place upgrade (INSTALL_FAILED_UPDATE_INCOMPATIBLE prevention) over v4.0.0.

Release Assets

• VRKA-Android-v4.0.1.apk: Official production signed release APK (arm64-v8a)
• SHA256SUMS: Cryptographic verification manifest

Checksums (SHA-256)

54e31189176819a84f194e8c15f3086ac3b84c6f835f251342f20421aaad0c88  VRKA-Android-v4.0.1.apk

Origin

• VRKA Desktop Application: https://github.com/MaverickRox/VRKA