v0.6.0

v0.6.0 — Detection signals v2: 2026 sideload-lure campaigns

Detection coverage grows from 10 to 13 signals, targeting the 2026 India scam campaigns
(wedding-invite / e-challan / bill-update / KYC APKs spread over WhatsApp/Telegram) — all fully
offline, all sideload-gated.

Added

• LURE_LABEL (30 pts): a sideloaded app named like a scam bait file — "Wedding
  Invitation", "E-Challan", "Mahavitaran Bill Update", "India Post…", "KYC Update". A real
  invitation, bill, or challan is a document, never an app.
• INSTALL_PACKAGES_REQUESTED (25 pts): the app asks for permission to install other apps —
  the two-stage dropper tell used by SpyMax-style wedding-invite droppers and SecuriDropper-class
  loaders to dodge Android 13+ Restricted Settings.
• ACCESSIBILITY_DECLARED (15 pts): the manifest declares an accessibility service that
  hasn't been turned on yet — an early warning before the victim is walked into enabling it.
• A fresh wedding-invite APK sideloaded from WhatsApp, with nothing granted yet, now scores
  CRITICAL (110 points) at install time — the background watchdog can warn mid-scam, before
  the victim taps "Allow" on anything.
• 16 new unit tests (131 total), mirrored English/Hindi explanation strings, and
  docs/03-detection-rules.md rewritten for all 13 signals.

Live-tested on the Android emulator in both English and Hindi — verdict, reasons, and ranking all
confirmed correct with zero crashes.

See the changelog
for full detail.

Saavdhan works fully offline — it never declares the INTERNET permission and never connects to
any external service. Verified in this release's merged manifest.