v0.4.156

Fixed — Zalo installs whose base APK container differs from the one a symbol profile was mapped from were rejected outright, disabling every feature while the symbol schema still reported valid. Google Play serves per-device bundle variants and re-stamps its signing block per download, so one Zalo release has several base APK hashes over identical code. Compatibility now matches on exact versionCode plus the Zalo signing certificate, with the container hash recorded as evidence.

Fixed — Adding an on-demand Zalo feature split, or reinstalling Zalo, no longer disarms features until a background re-check runs.

Added — On a Zalo version with no bundled profile, the module records which anchor families resolve, without hooking anything.

Privacy — Self-check detail and error text are excluded from diagnostic reports.

Known limits — Verified on one device. The multi-container path is covered by tests, not yet by hardware. The signed symbol catalog is still keyed by base APK hash, so symbol-only compatibility updates cannot yet reach installs with a different container; those rely on bundled profiles, which currently cover Zalo 26.06.02, 26.07.01 and 26.08.01.

APK SHA-256 c2ecdf315cc153e1c4f3c21b8cea5b3367f917f3cbca719ff3bd76f39a3fee45

Zalo Patch v0.4.151 (vC155)

Initial public release of Zalo Patch.

Requirements

• Rooted Android device
• LSPosed with Zalo selected in the module scope
• Zalo 26.08.01 (versionCode 260801903)

Highlights

• Navigation, inbox, chat, and Me-screen cleanup
• Promotional notification filtering and local notification history
• Analytics and advertising-service suppression
• One-to-one call audio recording
• Signed exact-artifact compatibility catalog with bundled offline fallback
• English and Vietnamese settings UI

Verification

• Unit-tested with the deterministic JVM suite
• Static-verified against the signed release APK
• Instrumented with 50 release-certificate-signed Android tests
• Device-smoke-tested on Xiaomi 23127PN0CG, Android 16, Zalo 26.08.01
• Device-verified for exact installed APK bytes and certificate, settings preservation, catalog/schema health, and 42 expected self-check rows with no failed or stale state

Known Limitations

• Compatibility is exact-version only. Other Zalo builds fail soft until a matching signed catalog entry or bundled map exists.
• The full visible-behavior matrix is incomplete. Call recording variants, reaction-row removal, Me cleanup, promo cancellation, ads/Zinstant behavior, backup/restore, diagnostic reporting, and remote-only hook activation do not all have current named device proof.
• Remote catalog fetch, signature validation, cache write, and bundled shadow selection are device-verified; remote-only hooks inside Zalo are not device-verified.
• Independent backup/restore proof for the release signing key was not completed before this release. Loss of that key would prevent updates over this APK.

Privacy

• Diagnostic reports upload only after explicit user review and action.
• Notification history stays in local app storage until exported or cleared.
• Call recordings are stored on the device.

Integrity

• APK SHA-256: bc41a8394e8bd4b33b0579033f1ce57ffc97c940267730eb5b96e66e3cc8fd70
• Signing certificate SHA-256: 96a4240fa44a63a4a71738b2851064b97a2f500e07d42a26a190a783bbad65a9
• Release build source: 15a3a5e74eba44d5743c64e2f54bff94a0c02825
• Test-only follow-up: 906488c5b32b4ef5cdf9a917dbe287637e5e5a15