SPORE v0.5.0

• S-031 Any sound in the room could saturate a CPU core indefinitely.
  Demod::push rescanned its whole retained buffer every call, so work grew with
  the buffer rather than with the new samples — 13 ms per 100 ms push at 1 s
  buffered, 94 ms at 6 s, and the buffer caps at 175 s, about 27x real time. No key
  or protocol participation needed; on Android it runs in a foreground service off
  the mic. A scan cursor makes it flat at 1.5 ms. Found by the discovery audit and
  measured before and after.
• The visual design language is implemented, not just written. VISUALDESIGN.md
  described an appearance no surface had: site/style.css still carried the old
  green-and-blue palette and Android an inline Compose scheme. Both now consume the
  same tokens, with prefers-reduced-motion honoured and no webfont anywhere (the
  standalone must make zero network requests). The spec gains an
  implementation-status table so it can never again claim more than the code does.

---

⬇ spore-android.apk
— a permanent link that always serves the newest stable release.

This number versions the distribution, not the protocol. The SPORE v1
wire format and the crate's API shape are frozen and unaffected by it.

Before you rely on it: no radio bridge has been verified against real
hardware (every 🧪 in
BRIDGES.md),
and the Still open section of
SECURITY_FINDINGS.md lists
what is known and unfixed. Builds are debug-signed until a release keystore
is configured, so Android will warn about an unknown developer.
SHA-256 6c3a7ba86636c990df6b09a93c1ab88e3ee2980c0ca7508be6b969f08f7cedcc