Add com.tranzmate (Moovit) 1789 (5.195.0.1789) map - #64
Merged
Conversation
Second published map for Moovit, generated from the SAME hardened signature set as the 1785 map (bound via generated_from.signatures_rev) — the multi-version hardening the anchors were designed for. Stability across the 5.194->5.195 minor bump: all 192 signatures resolve on 1789 with no failures or ambiguities. 173 obfuscated names were unchanged; 19 rotated and every anchor tracked the rename (e.g. UserAccountManager juf->zuf, PaymentAccountManager iva->qva, BaseServerRequest pac->yac, all seven MicroMobility* classes). One R8 token was even reassigned across versions (1785 `pwf`=UserNotificationsManager, 1789 `pwf`=FavoritesManager), which a static obfuscated-name map would get silently wrong — the string-literal anchors re-resolve each class to its true identity. The source-of-truth signatures + research live in the 1785 PR (#63); this PR adds only the resolved 1789 artifact. Validates against schema + tier-1 semantics. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mrv3ZSTZjDcBEYU2XFno9i
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Second published map for Moovit (
com.tranzmate), at version_code 1789 (versionName 5.195.0.1789) — generated from the same hardened signature set as the 1785 map (bound viagenerated_from.signatures_rev). This is the multi-version hardening the anchors were designed for (mirroring hownet.daylioships252+267from one signature set).maps/com.tranzmate/1789.json—schema_version: 5, 192 classes (41 with method mappings).Stability across the 5.194 → 5.195 minor bump
Ran the committed signatures against the new APK: all 192 resolve, zero failures, zero ambiguities.
Examples the anchors followed correctly:
UserAccountManagerjuf→zuf,PaymentAccountManageriva→qva,BaseServerRequestpac→yac, and all sevenMicroMobility*classes.A token was even reassigned across versions: on 1785
pwf=UserNotificationsManager; on 1789pwf=FavoritesManager(andUserNotificationsManagermoved todxf). A static obfuscated-name map would now be silently wrong aboutpwf— but because the signatures anchor on rotation-stable string literals, each class re-resolves to its true identity (verified in the 1789 smali directly).Scope & provenance
The source-of-truth
signatures/com.tranzmate/signatures.yamland theresearch/notes live in the 1785 PR (#63); this PR adds only the resolved 1789 artifact. Provenance is bound viagenerated_from.signatures_rev(the signatures commit) rather than asources[].configpath, so the map is self-contained and validates onmasterindependently of #63's merge order.Validation
check-jsonschema).maps/<app>/<version_code>.jsonlayout + filename↔version_code.🤖 Generated with Claude Code
https://claude.ai/code/session_01Mrv3ZSTZjDcBEYU2XFno9i
Generated by Claude Code