ASYCUDA World — Republic of Iraq v4.0.5

ASYCUDA World — Republic of Iraq (v4.0.5 • versionCode 42)

Highlights & Multi-AI Security Audit Enhancements (v4.0.5)

1. Zero-PII Iraqi Law Click-Wrap Liability Waiver (Iraqi Civil Code Art. 259/2 & Law No. 78 of 2012 Art. 18/1):
   • Enforces a binding first-launch electronic Click-Wrap Terms & Conditions and Contractual Liability Waiver governed by Article 259(2) of the Iraqi Civil Code No. 40 of 1951 (المادة 259/2 من القانون المدني العراقي رقم 40 لسنة 1951) and Article 18(1) of the Iraqi Electronic Signature and Electronic Transactions Law No. 78 of 2012 (قانون التوقيع الإلكتروني والمعاملات الإلكترونية رقم 78 لسنة 2012).
   • Collects zero personal names, zero company names, and zero hardware device IDs (ANDROID_ID), and transmits zero consent receipts to any external server (accepted = true is stored strictly as a local boolean flag on the device; legacy PII fields are automatically purged on startup).
2. Enforced JVM Outbound Network Allowlist (SecurityManager.checkConnect) & Virtualized MOF RMI Support:
   • AsycudaBoot.createHardenedSecurityManager() and checkAllowedOutboundNetwork() enforce a strict outbound socket allowlist inside the embedded OpenJDK 8 runtime, permitting connections exclusively to localhost/127.0.0.1 (for the local Android IPC bridge) and asy.mof.gov.iq (including its internal ClientTransportLayer virtualized RMI endpoint 10.25.25.10) and throwing SecurityException for any other host or IP.
3. 7-Suite Direct CI Adversarial Security Verification & Private Bug Report Attachments:
   • scripts/SecurityVerificationTest.java compiles and invokes the production asycuda.AsycudaBoot class directly in GitHub Actions on every commit across 7 suites.
   • Voluntary bug report attachments/screenshots are strictly optional (with an explicit UI privacy warning) and remain private inside the developer-authenticated Sentry dashboard (never uploaded to public GitHub Issues).
4. Zero Pre-Bundled Government JARs, Android 14 (targetSdkVersion 34) & Zero Broad Storage Permissions:
   • Zero government JARs are bundled inside the APK; all 131 official ASYCUDA World JARs are downloaded directly from https://asy.mof.gov.iq/aw/AWIQWorld.jnlp on first launch and verified against UNCTAD/SOClass's pinned X.509 certificate (META-INF/SOCODE.RSA).

---

SHA-256 Checksums (sha256sum)

Release Asset	SHA-256 Digest
ASYCUDA_Iraq_v4.0.5.apk	130df3350a50bb011da9b2d74c3c4eb2d17bc1cd04ae9b69de3f0fefee8def44
asycuda-iraq.tar.xz	d7f724041d358c824af58c790c83ddf525f623450dd303995bcfbf48d8d81d52
runtime-arm64.tar.xz	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1

APK X.509 Signing Certificate (apksigner verify --print-certs)

• Signer DN: CN=Mohammed Ammar Hussein, OU=Logistics and Customs Software, O=ASYCUDA Iraq Open Source, L=Baghdad, ST=Baghdad, C=IQ
• SHA-256 Digest: d302d4d050fb986e4088dd3e684c90662d00da748dde8da3d4966baea02da023

v4.0.0 — Zero Bundled Government JARs, Android 14 (SDK 34) & Security Hardening

Warning

Superseded Release: This release (v4.0.0) has been superseded by v4.0.5. Please download ASYCUDA_Iraq_v4.0.5.apk or update via the in-app Update Center.

---

🇮🇶 ASYCUDA Iraq Android — v4.0.0 (VersionCode 41)

Official Release (v4.0.0) — Major Security, Architecture & Android 14 Compliance Upgrade.
Verified Package (iq.asycuda) in Google Android Developer Console (Public Certificate Verification Fingerprint SHA-256: d302d4d050fb986e4088dd3e684c90662d00da748dde8da3d4966baea02da023).

---

🛡️ What's New in v4.0.0

1. Zero Bundled Government JARs (First-Launch Official Portal Bootstrap)
   • asycuda-iraq.tar.xz has been reduced from 14.1 MB to 88 KB and contains 0 third-party or government JARs — only the open-source 00_boot.jar compatibility shim (SHA-256: 0c1ba0b0e72c597fe078fc27793faca54fd7296cbaeab2db761a302375ce0d80) compiled from java-bridge/AsycudaBoot.java and open-source Arabic/Kurdish fonts.
   • On first launch (or whenever the Iraqi General Authority of Customs publishes an update), AsycudaStandaloneManager.syncOfficialPortalJars() connects directly to the official government portal (https://asy.mof.gov.iq), parses the JNLP descriptors (aw/AWIQWorld.jnlp and its 26 JNLP component descriptors), and downloads all 131 signed UNCTAD client/*.jar libraries directly into the isolated Android app sandbox (files/asycuda-env/asycuda/client/).
2. Android 14 (targetSdkVersion 34) & Play Protect Compliance
   • Upgraded compileSdk and targetSdkVersion from 28 to 34 (Android 14).
   • Added explicit android:foregroundServiceType="specialUse" declaration for AsycudaKeepAliveService with ServiceCompat.startForeground compatibility.
   • Registered iq.asycuda and its private production signing certificate in the Google Android Developer Console.
3. Hardware-Backed Android Keystore AES-256-GCM Consent Receipt
   • Replaced cleartext SharedPreferences storage for the user's legal consent receipt (Name | Company | Receipt ID | Timestamp) with hardware-backed Android Keystore AES/GCM/NoPadding (256-bit key, 128-bit authentication tag).
4. Strict JVM Host Isolation for Telemetry & Self-Update
   • 00_boot.jar no longer inherits any iq.asycuda.* system properties. Sentry DSN and user metadata stay strictly inside the Android Dalvik/ART host process; the child UNCTAD OpenJDK JVM talks exclusively to asy.mof.gov.iq.
5. UNCTAD Swing Client Bug Fixes & Hardening
   • Fixed GitHub Issue #13 (R_Load_SadItmAdm / R_Load_HisWriteOff NPE): Added BenignNpeFilteringPrintStream and dismissBenignErrorInfoDialog in AsycudaBoot.java to suppress benign caught NullPointerException error popups when customs brokers click the Selectivity Administration tab without officer binder shortcuts.
   • Fixed GitHub Issue #12 (VisualFacetJTableSDS.updateComponent NPE on Language Switch): Wrapped VisualPage multi-linguistic listeners in GuardedMultiLinguisticList so DocProcSupport.guiHasBeenInit1 is cleared while facets rebuild during a runtime Arabic/Kurdish/English language change.
   • Fixed GitHub Issue #11 (Native Android File Picker Synchronization): Automatically mirrors user documents into ~/ASYCUDA_Workspace and opens the native Android system file picker (ACTION_OPEN_DOCUMENT) with automatic .xml extension enforcement on save/export.
   • Fixed GitHub Issue #8 (Login Dialog & Arabic RTL Enhancements): Centered responsive login window (480x360), password visibility toggle (👁), Caps-Lock warning indicator, and custom high-legibility AsycudaArabic font rendering.

---

🔐 Release Asset SHA-256 Checksums

File	Size	SHA-256 Digest
ASYCUDA_Iraq_v4.0.0.apk	44.4 MB	d36932653f446916d168bada469111f99c94da19f844184b1de9b377e2734861
asycuda-iraq.tar.xz	88 KB	a0ea2336d3917e1583e923bbb4dd64ae2a37504ed873027e968abdd5d58defd1
runtime-arm64.tar.xz	38.2 MB	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1
00_boot.jar (inside asycuda-iraq.tar.xz)	43 KB	0c1ba0b0e72c597fe078fc27793faca54fd7296cbaeab2db761a302375ce0d80

Verify after downloading:

sha256sum ASYCUDA_Iraq_v4.0.0.apk
# Expected: d36932653f446916d168bada469111f99c94da19f844184b1de9b377e2734861

v3.9.5 — Unified Encrypted Vault File Manager, Auto File Picker Bridge & Icon Toolbars

Warning

Superseded by v4.0.0: Please download ASYCUDA_Iraq_v4.0.0.apk from the v4.0.0 release, which removes all bundled third-party/government JARs (asycuda-iraq.tar.xz reduced from 14.1 MB to 88 KB), upgrades to Android 14 (targetSdkVersion 34), encrypts local consent receipts with Android Keystore AES-256-GCM, and fixes UNCTAD client NPEs (#12, #13).

---

ASYCUDA World — Republic of Iraq (v3.9.5 • versionCode 40)

What's New in v3.9.5

1. Full-Featured Encrypted Vault — File Manager (Folders, Copy, Move, Open, Share & Delete):
   • Unified all printed PDFs and imported files into the app's private encrypted Vault (/data/data/iq.asycuda/files/prints).
   • Added complete folder support: create subfolders, navigate into and out of folders, Copy and Move files and folders between locations (both per-row and via multi-select batch actions), and Open, Share, or Delete files.
   • Strictly prevented folders from being selected for Share (the Share button is hidden whenever any folder is selected).
2. Automatic File Picker Bridge (100% Zero Modification to Official Government JARs):
   • Jails ASYCUDA's Java file chooser (JFileChooser / FileDialog) strictly to the encrypted Vault (/data/data/iq.asycuda/files/prints) via VaultRestrictedFileSystemView so it cannot browse parent system directories while allowing subfolder navigation inside the Vault.
   • Zero custom Swing buttons are injected into government dialogs: when ASYCUDA opens its file chooser, the app automatically prompts you on Android (showFilePickerBridgePromptModal) to either Import a new file from your phone into the Vault (Intent.ACTION_OPEN_DOCUMENT) or Use a file already in your Vault.
3. Upload Staging Protection (soems*ems & isFileAlreadyInVault):
   • Fixed an issue where clicking the Upload button inside ASYCUDA's attached documents window (so.ems) caused the background watcher to treat the temporary upload staging file (soems*ems) as a newly exported PDF.
4. Apple-Style Icon Toolbar Navigation Across All App Windows:
   • Replaced text toolbar/footer navigation buttons across all modals (Control Center sub-windows, Vault File Manager, Update Center, Issue Reporter, What's New, Create Folder, and Legal Receipt Preview) with clean Apple-style top-bar icon buttons (createIconButton) to save screen space on both compact phones and tablets.

---

Cryptographic Verification (SHA-256 Checksums)

Release Asset	SHA-256 Digest
ASYCUDA_Iraq_v3.9.5.apk	5b1c868faac9974e1dd7929060f9f55db620b46f85b181c9201aa1e147eaeb1f
asycuda-iraq.tar.xz	e06fa907965721479fb540f74faddbf87f9c6a7bfb2bd5daa1a1802f81381f30
runtime-arm64.tar.xz	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1

• APK Signer X.509 Certificate SHA-256: d302d4d050fb986e4088dd3e684c90662d00da748dde8da3d4966baea02da023
• Open-Source Java Bridge Documentation: java-bridge/README.md
• Security & Privacy Policy: SECURITY.md

v3.9.0 — Zero Storage Permissions, Encrypted App Vault & Previewable Legal Receipt

ASYCUDA World — Republic of Iraq (v3.9.0 • versionCode 39)

Highlights

1. Zero Broad Storage or Accessibility Permissions (AndroidManifest.xml):
   • Completely removed MANAGE_EXTERNAL_STORAGE, READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, ACCESS_WIFI_STATE, CHANGE_WIFI_STATE, and BIND_ACCESSIBILITY_SERVICE.
   • Added an "Import from Phone / استيراد ملف من الهاتف" middleman button directly inside ASYCUDA's Java JFileChooser dialog that opens Android's native zero-permission file picker (Intent.ACTION_OPEN_DOCUMENT) and imports the selected file into the private workspace (/data/data/iq.asycuda/files/workspace).
2. Encrypted Private App Vault for Printed PDFs & Customs Declarations:
   • All printed PDFs and exported customs documents are now saved exclusively inside /data/data/iq.asycuda/files/prints so no other app on the phone can access your confidential customs declarations.
   • Manage documents directly from the Files & Prints window using Open, Share, and Delete, plus a new ! Encrypted Storage Protection info badge in English, Arabic, and Kurdish.
3. Previewable Legal Consent Receipt & Dual Mandatory Consent:
   • Added a "🔍 Preview Sentry Receipt Before Sending (See Exact 8 Fields)" button inside the first-launch Terms & Conditions modal (showTermsAndConditionsModal) so users can inspect the exact 8-field JSON receipt before accepting.
   • Added two mandatory consent checkboxes (1. Terms & Conditions / Liability Waiver, 2. Privacy Policy & Mandatory Sentry Receipt Registration).
4. Private Update Cache & Automatic APK Cleanup:
   • In-app APK updates now download into /data/data/iq.asycuda/cache/updates/ (verified via SHA-256 and X.509 certificate pinning) and are automatically deleted on app startup once the update completes.
5. Automated Adversarial Security Suite & CycloneDX SBOM:
   • Added scripts/SecurityVerificationTest.java (executed on every commit in GitHub Actions) and sbom.cdx.json.

Official Asset Checksums (SHA-256)

Asset	SHA-256
ASYCUDA_Iraq_v3.9.0.apk	8c154a8eb9f18d8d612b4732439ce3a3ccd3c7eae8c1456bffe222fa03b28b25
asycuda-iraq.tar.xz	cf2e959e90d6d109a1dd12b970f385af5c194a0b3e6b27740846baa640f129b4
runtime-arm64.tar.xz	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1

v3.8.0 — Security, Transparency & Reliability Update (Recommended)

ASYCUDA World — Republic of Iraq (v3.8.0 / versionCode 38)

Security Hardening & Open-Source Audit Release

• Pinned UNCTAD/SOClass Publisher Signature & Hostname Allowlist for Government JARs:
  • resolveTrustedMofJarUrl() and openMofConnection() enforce https only, hostname asy.mof.gov.iq only, path /aw/*.jar only, and disable HTTP redirects (setInstanceFollowRedirects(false)).
  • verifyDownloadedJarIntegrity() requires META-INF/SOCODE.RSA and META-INF/SOCODE.SF, verifies the X.509 signer certificate matches the pinned UNCTAD/StrategyObject certificate (SHA-256: 5614dc62a20653686934a216439c8c779cd84d58ccbc37e85dda33433f9e972d), drains all entries through JarVerifier, and confirms every non-META-INF/ file entry in the archive is signed by that exact certificate.
• Full X.509 TLS Certificate & Hostname Verification: Enforces standard PKIX X.509 trust verification (AndroidCAStore + Sectigo Root R46 + ZeroSSL RSA DV SSL CA 2) and RFC 2818 hostname verification for https://asy.mof.gov.iq.
• 100% Open-Source Java Bridge (java-bridge/): Complete source code and reproducible build script (./java-bridge/build-bridge.sh) for 00_bootpatch.jar, jars/00_boot.jar, and jars/00_jnlp.jar.
• Authenticated Localhost IPC Bridge (127.0.0.1:47891): Per-session random UUID token (AUTH|<token>|), canonical path validation, and subprocess execution blocking (checkExec() throws SecurityException).
• Cryptographically Verified In-App APK Updates: Verifies both SHA-256 digest and Android X.509 APK signing certificate (d302d4d050fb986e4088dd3e684c90662d00da748dde8da3d4966baea02da023) prior to installation, with a scrollable Update Center modal and automatic background MOF download coordination.
• In-Memory Redacted Diagnostics: Voluntary bug reports are assembled strictly in RAM (ByteArrayOutputStream), scrubbed of credentials/PII/tokens across all Sentry fields, and never written to disk as .zip files.

Published Release Assets & SHA-256 Checksums

Asset	SHA-256 Checksum
ASYCUDA_Iraq_v3.8.0.apk	3b141d5c17f4a52502d5037cdd87ac9bf44241db632b6c53cef84f27b9d79829
asycuda-iraq.tar.xz	ca3a5b787c4d0ba94fa533b00ebb0ce1bb845ceb96d6f1968fb360dfc7d0c7fe
runtime-arm64.tar.xz	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1

v3.7.0 — [NOT RECOMMENDED - Security Superseded by v3.8.0]

Caution

⚠️ NOT RECOMMENDED (SECURITY WISE) — SUPERSEDED BY v3.8.0
This older release does not include the v3.8.0 security hardening (verified X.509 TLS certificate chain, cryptographic SHA-256 + APK signature update checks, authenticated localhost IPC bridge, and open-source java-bridge/ verification). Please upgrade to v3.8.0+ immediately.

ASYCUDA World — Republic of Iraq (v3.7.0)

Android client for the Iraqi General Commission of Customs (ASYCUDA World — https://asy.mof.gov.iq).

What's New in v3.7.0 (Upgrades from v3.6.0)

• Redesigned Dark Control Center & Unified Settings: Replaced the old light menus and separate X11 preferences screen with a unified dark interface that brings all display, touch, and keyboard settings into one place.
• Unified Update Center (App + MOF Packages): In v3.6.0, the update check only verified Ministry of Finance JAR files. In v3.7.0, Check for Updates checks both GitHub for new app releases (with direct in-app download and installation) and https://asy.mof.gov.iq/aw/AWIQWorld.jnlp in a single window.
• Live-Preview Sliders for Window Scale & Shortcut Bar Opacity: Replaced fixed scale percentages with smooth sliders for Window Scale (60%–200%) and Function & Arrow Keys Opacity (15%–100%). Dragging either slider temporarily hides the menu so you can see the changes live on the ASYCUDA workspace.
• Auto-Show Keyboard & Shortcut Bar Toggles: Added direct ON / OFF toggles in the Control Center to control whether the on-screen keyboard pops up automatically when tapping text fields, and to show or hide the Function & Arrow Keys bar.
• Double-Press Back to Exit: Set the Android Back button to require two quick presses to exit the app by default (preventing accidental closures while working on declarations), alongside a dedicated Exit Application button in the Control Center.
• Printed PDFs File Manager (Delete & Multi-Select): Upgraded Printed PDFs & Exported Files (Download/Asycuda_Prints) with single-file delete and a multi-select mode (Select) to share or delete multiple PDF files at once.
• In-App Issue Reporting: Added Report an Issue / Send Feedback to submit bug descriptions, screenshots, and diagnostic logs directly from the Control Center without needing an external account.
• Faster Cache & Socket Handling: Moved ASYCUDA local caches (~/.asycuda) to internal flash storage and increased socket buffer sizes for smoother form and tariff loading.
• First-Launch Terms & Conditions: Added a first-launch Terms & Conditions and Liability Disclaimer screen with user and company registration.

---

🇮🇶 الجديد في الإصدار v3.7.0 (مقارنة بالإصدار v3.6.0)

• تصميم داكن جديد وتوحيد الإعدادات: استبدال القوائم الفاتحة القديمة وشاشة إعدادات X11 المنفصلة بلوحة تحكم موحدة بالوضع الداكن تجمع كافة إعدادات الشاشة واللمس ولوحة المفاتيح في مكان واحد.
• مركز التحديثات الموحد (التطبيق + ملفات الوزارة): فحص وتحديث إصدار التطبيق مباشرة من GitHub بالتزامن مع فحص وتحديث ملفات نظام أسيكودا من خادم وزارة المالية (asy.mof.gov.iq) في نافذة واحدة.
• شريط تمرير بمعاينة حية لحجم الشاشة وشفافية الاختصارات: استبدال النسب الثابتة بشريط تمرير مرن لكل من حجم نافذة النظام (60%–200%) وشفافية شريط المفاتيح الإضافية (15%–100%)، حيث تختفي القائمة مؤقتاً أثناء السحب لرؤية التغييرات مباشرة على شاشة النظام.
• التحكم بالظهور التلقائي للوحة المفاتيح وشريط الاختصارات: إضافة أزرار تشغيل وإيقاف (تشغيل / إيقاف) مباشرة في لوحة التحكم للتحكم بالظهور التلقائي للوحة المفاتيح عند النقر على الحقول، وإظهار أو إخفاء شريط المفاتيح الإضافية.
• الضغط مرتين على زر الرجوع للخروج: ضبط زر الرجوع في أندرويد افتراضياً على الضغط مرتين للخروج النهائي لمنع الإغلاق غير المقصود أثناء العمل، بالإضافة إلى زر إغلاق التطبيق داخل لوحة التحكم.
• إدارة ملفات PDF المطبوعة (الحذف والتحديد المتعدد): تطوير نافذة ملفات PDF المطبوعة في مجلد Download/Asycuda_Prints بإضافة خيار الحذف الفردي وميزة التحديد المتعدد لمشاركة أو حذف عدة ملفات دفعة واحدة.
• الإبلاغ عن المشاكل من داخل التطبيق: إمكانية إرسال البلاغات الفنية والملاحظات مع لقطة شاشة وسجلات الفحص مباشرة من داخل التطبيق دون الحاجة لحساب خارجي.
• الشروط والأحكام عند التشغيل الأول: إضافة نافذة الموافقة على الشروط والأحكام وإخلاء المسؤولية عند التشغيل الأول مع تسجيل اسم المستخدم والشركة أو مكتب التخليص الكمركي.

---

نوێکارییەکانی وەشانی v3.7.0 (بەراورد بە وەشانی v3.6.0)

• دیزاینی تاریکی نوێ و یەکخستنی ڕێکخستنەکان: گۆڕینی لیستە کۆنەکان و شاشەی ڕێکخستنی X11 بە ناوەندێکی کۆنترۆڵی یەکگرتوو کە هەموو ڕێکخستنەکانی شاشە و تەختەکلیل لە یەک شوێندا کۆدەکاتەوە.
• ناوەندی نوێکردنەوەی یەکگرتوو (بەرنامە + پەڕگەکانی وەزارەت): پشکنین و داگرتنی وەشانی نوێی بەرنامەکە و هاوکاتکردنی پەڕگەکانی سیستەم لەگەڵ سێرڤەری وەزارەتی دارایی (asy.mof.gov.iq) لە یەک پەنجەرەدا.
• پیشاندانی زیندوو بۆ قەبارەی شاشە و ڕووناکی شریتی دوگمەکان: دانانی شریتی ڕێکخستن بۆ قەبارەی پەنجەرە (60%–200%) و ڕووناکی شریتی دوگمەکان (15%–100%) کە لە کاتی ڕاکێشاندا لیستەکە بە شێوەیەکی کاتی دیارنامێنێت بۆ بینینی گۆڕانکارییەکان ڕاستەوخۆ.
• کۆنترۆڵی دەرکەوتنی خۆکارانەی تەختەکلیل و شریتی دوگمەکان: زیادکردنی دوگمەی کاراکردن و ناچالاککردن (چالاک / ناچالاک) بۆ تەختەکلیل و شریتی دوگمەکانی فرمان و ئاڕاستەکان.
• دووجار داگرتنی دوگمەی گەڕانەوە بۆ دەرچوون: دانانی دووجار داگرتنی دوگمەی گەڕانەوەی مۆبایل بۆ دەرچوون لە بەرنامەکە بۆ ڕێگریکردن لە داخستنی هەڵە لە کاتی کارکردندا.
• بەڕێوەبردنی پەڕگە چاپکراوەکانی PDF (سڕینەوە و دیاریکردنی چەندین پەڕگە): زیادکردنی تایبەتمەندی سڕینەوەی تاک و دیاریکردنی چەندین پەڕگە پێکەوە بۆ هاوبەشکردن یان سڕینەوە لە فۆڵدەری Download/Asycuda_Prints.
• ناردنی ڕاپۆرتی کێشەکان لەناو بەرنامەکەوە: توانای ناردنی ڕاپۆرتی کێشەی تەکنیکی لەگەڵ وێنەی شاشە و تۆماری هەڵەکان ڕاستەوخۆ لەناو بەرنامەکەوە.
• مەرج و ڕێساکان لە کاتی دەستپێکردن: زیادکردنی پەنجەرەی مەرج و ڕێساکان و بەرپرسیارێتی یاسایی لەگەڵ تۆمارکردنی ناوی بەکارهێنەر و کۆمپانیا یان نووسینگەی گومرگی.

---

Downloads & SHA-256

File	Description	SHA-256
ASYCUDA_Iraq_v3.7.0.apk	Android APK (93 MB) — Install this on your phone or tablet	5538e2248f1f5143c9e4ffa813f62494163981967e8ac48f7414449418ddb08b
asycuda-iraq.tar.xz	Client JAR package archive (for building from source)	9ee69d92799d8ff6b0d8bba1b4403b3b29a0690815282b9e177c502b1d0b69e2
runtime-arm64.tar.xz	OpenJDK + X11 ARM64 runtime archive (for building from source)	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1

v3.6.0 — [NOT RECOMMENDED - Security Superseded by v3.8.0]

Caution

⚠️ NOT RECOMMENDED (SECURITY WISE) — SUPERSEDED BY v3.8.0
This older release does not include the v3.8.0 security hardening (verified X.509 TLS certificate chain, cryptographic SHA-256 + APK signature update checks, authenticated localhost IPC bridge, and open-source java-bridge/ verification). Please upgrade to v3.8.0+ immediately.

ASYCUDA World — Republic of Iraq (v3.6.0)

Android client for the Iraqi General Commission of Customs (ASYCUDA World — https://asy.mof.gov.iq).

What's New in v3.6.0

• Multi-Language Support: Added full interface and settings localization for English, Arabic (العربية), and Kurdish (کوردی) with automatic RTL layout support.
• Language Switcher: Quickly switch languages from the Control Center header, the App Language tile, or inside Display & Input Settings.
• Automatic MOF Sync: Startup and manual verification against https://asy.mof.gov.iq/aw/AWIQWorld.jnlp.
• Direct PDF Printing: Saves printed declarations and receipts directly as PDF files in Download/Asycuda_Prints.
• Background Keep-Alive: Maintains your active customs session when switching between apps.

---

🇮🇶 الجديد في الإصدار v3.6.0 (العربية)

• دعم اللغات (العربية، الكردية، الإنجليزية): إضافة دعم كامل للغة العربية والكردية والإنجليزية في لوحة التحكم وجميع إعدادات التطبيق.
• تحديث تلقائي من خادم وزارة المالية: فحص ومزامنة ملفات النظام مع خادم الهيئة العامة للكمارك (asy.mof.gov.iq).
• طباعة وحفظ ملفات PDF: طباعة التصاريح والوصلات الكمركية مباشرة بصيغة PDF ومشاركتها من داخل التطبيق.

---

نوێکارییەکانی وەشانی v3.6.0 (کوردی)

• پاڵپشتی زمانەکان (کوردی، عەرەبی، ئینگلیزی): زیادکردنی پاڵپشتی تەواو بۆ زمانی کوردی و عەرەبی و ئینگلیزی لە ناوەندی کۆنترۆڵ و ڕێکخستنەکانی بەرنامەکەدا.
• نوێکردنەوەی خۆکارانە: هاوکاتکردنی پەڕگەکانی سیستەم لەگەڵ سێرڤەری فەرمی وەزارەتی دارایی (asy.mof.gov.iq).
• چاپکردنی ڕاستەوخۆی PDF: چاپکردن و هاوبەشکردنی بەڵگەنامە گومرگییەکان بە شێوەی PDF.

---

Downloads & SHA-256

File	Description	SHA-256
ASYCUDA_Iraq_v3.6.0.apk	Android APK (90 MB) — Install this on your phone or tablet	991f751abdfeb0aa4c579cabbdd7ad4c7306749177ec0757126cd0c4da6fe2e8
asycuda-iraq.tar.xz	Client JAR package archive (for building from source)	a9a68d87032bccec775e923f592b72dc6300abda6158b93aadcf1a9075ce972c
runtime-arm64.tar.xz	OpenJDK + X11 ARM64 runtime archive (for building from source)	f3dc78325792ea764e82d108b54dfc6fe4d6d9fd752bafc83bb780403286b9c1