v1.0.3 - say when the owner notice applies

The switch that shows the phone's owner a calm notice now says when to turn it on: on for someone who tends to tap links, off for someone who panics easily. Until now it explained what it did but not when to use it.

Nothing in the detection layer changed, so the measured figures are unchanged: 90.3% smishing caught and 1.9% false alarms on the held-out half of the corpus.

Two APKs

qaygisiz-1.0.3-demo.apk — install this one if you just want to see the detector work. Paste a message, press Check, and it shows the verdict, the score and which rules fired. It cannot read SMS and cannot warn anyone, and its home screen says so. It installs without a security block.

qaygisiz-1.0.3.apk — the real app. Google Play Protect refuses to install it: it hard-blocks sideloaded apps that request SMS permissions, and reading SMS is the whole point of this one. The dialog has no "install anyway" button. The README explains how to install it anyway if you want to.

The difference between the two builds is one file, app/src/demo/AndroidManifest.xml, which removes the RECEIVE_SMS permission and the two SMS receivers. Both are built from this commit and signed with the same key.

SHA-256

qaygisiz-1.0.3.apk       b2520d27832188d4a46add87c32f919be91f7f6b02299f364207d723fbcbe9f6
qaygisiz-1.0.3-demo.apk  6a83264bd994591e42b4c75a166e027c46eb27d2e7d76dd831fbc08b10a8674e

Rebuilt 19 October 2026. Both APKs were rebuilt. The previous binaries had build-time credentials compiled into them. Those keys were revoked, and these builds were made from an empty Secrets.kt. The signing certificate is unchanged, so an existing install can still update. The checksums above are the new ones.

v1.0.2 - launcher icon

The app now has its own launcher icon: a Q letter-mark in the accent colour, on the dark background the app already uses, replacing the default Android template icon. The notification icon uses the same mark.

Nothing in the detection layer changed, so the measured figures are unchanged: 90.3% smishing caught and 1.9% false alarms on the held-out half of the corpus.

SHA-256 of qaygisiz-1.0.2.apk
73693abf82fc945df159c2e39f8c855f3500173c289a13d1928395fbbb01655e

Withdrawn 19 October 2026. The APK for this release was removed: it had build-time credentials compiled into it. Those keys were revoked. The current clean build is in v1.0.3.

v1.0.1

Fixes two bugs found in testing.

The Telegram warning could be lost when the language model was slow. A broadcast receiver only has about ten seconds, and the explanation call could use all of it, so the family member got nothing. The explanation now has a hard deadline and the warning is sent with or without it.

The owner-notice switch did not take effect until Save was pressed, so turning it on silently did nothing.

Also adds a home screen, with the setup moved behind a gear icon.

Detection is unchanged, so the numbers in MEASUREMENT.md still hold.

Withdrawn 19 October 2026. The APK for this release was removed: it had build-time credentials compiled into it. Those keys were revoked. The current clean build is in v1.0.3.

Qaygisiz v1.0.0

First signed release. Install the APK, open the app, enter a Telegram bot token and chat ID, grant the SMS permission. Scoring happens on the device; only flagged messages are sent anywhere.

Withdrawn 19 October 2026. The APK for this release was removed: it had build-time credentials compiled into it. Those keys were revoked. The current clean build is in v1.0.3.