# Riff 1.1.0 — release and verification status

<!-- AI-AGENT: OpenAI Codex, GPT-6 family; exact runtime model revision is not exposed.
AI-INTENT: Delivery and evidence are separate from normative authority. A FINAL designation does
not close acceptance that has not been performed. Follow the registered scoped owners. -->

The user authorized the 1.1.0 FINAL release, merging `1.1.0-rc` into `main` and updating HU.
[Scoped requirements](/Riff/1-1-0) define the behavior. The source merge incorporates RC checkpoint
`b95f0b347ca99dc1c22b678e2aa88f7ff7f9f61f`; [the live handoff](/Riff/LATEST/worklog) records the
resulting merge commit after completion.

## Delivered artifact

Signed **1.1.0 FINAL**, versionCode **18**, source edition **2026-10-29**:

- APK: `releases/261029-1.1.0-final/riff-1.1.0-261029.apk`
- SHA-256: `57913779ff630a3dbb908c579bb5c45f2ff8b68ea5e350a54d1b9417fc51c861`
- Certificate SHA-256: `8f1dce0e9f5ae50fbead23ddb3d60182f9af4b3a584481eeee1f3df5c499e67d`
- Package: `link.roadio.riff`; JNI: `arm64-v8a` only; FINAL has no RC overlay.

HU was updated with `adb install -r`, without uninstall or data reset. The installed APK bytes match
the signed artifact. Player and Indexer start; Albums, Artists and Genres open and return to Main.
Captured startup logs have no new fatal exception or ANR. The phone retains the previous RC APK;
this release task changes HU only. The website now distributes the same signed 1.1.0 FINAL APK.

## Public website delivery — 29 October 2026

[roadio.link](https://roadio.link/) publishes the matching APK, a source archive and a
one-root-commit Git snapshot. Public product/build inputs match the accepted release commit;
documentation and website tooling are refreshed separately. Exact source identifiers and archive
checksums are in the [public source manifest](https://roadio.link/downloads/snapshot.json); the
[APK manifest](https://roadio.link/downloads/apk-release.json) identifies the unchanged signed
binary.

English/Russian copy, FAQ and TL;DR cover the new state/history, queue and catalog behavior. The
upgrade note explicitly describes the absence of 1.0.x data import. Fourteen native 1280 × 800 HU
screenshots cover seven screens in Day/Night, including bank-card calibration. The original Auto
theme and paused playback context were restored after capture.

The isolated source export passes `:app:verifyDistributionRelease` (112 executed tasks). Browser
checks cover language switching, a narrow viewport, the image dialog and native MathML equations.
Local links/anchors, immutable prior assets and publication hashes are checked. No Cloudflare API,
purge, configuration or cache-setting change is performed. Edge freshness remains independent of the
origin update. Evidence lives under `status/website-1.1.0-261029` on baldr.

## Implementation

Indexer owns separate profile/history FlatBuffers and durable receipts. Internal entities use
XXH3-64; Media.ID alone has nullable low-word domain disambiguation. Volume UUID/checksum remains
its explicit exception. External configuration is merged once from admitted `.riff/ui_config.json`
files. No migration or compatibility reader is added; current-format Internal ↔ SD relocation
remains supported.

Cuetree format 12 publishes scalar nonmedia references, ready catalog projections and per-ALBM
fragment folders. Player uses mapped views, compact shared profile facts and prepared collection
keys/order. Base MEDIA remains available for binding/artwork without an extra Full file UI item.
Book speed follows current content. Scan cadence and metadata naming policies are unchanged.

## Release verification

Root JVM/configuration tests, Kotlin checks, debug/release lint, independent Cuetree and Cuegrain
checks, Python release-tooling tests and distribution verification pass. The accepted test reports
contain no failures/errors/skips; unchanged Gradle tasks may reuse validated outputs. Eleven focused
Android regression cases pass on HU in the disposable app package. Nine additional SAF provisioner
checks pass in the disposable Indexer fixture, including failure rollback. Signature, alignment,
version, native ABI and installed-byte identity are checked independently.

The resolved Maven graph contains 352 coordinates, all covered by the 15 October review; the next
complete monthly security review is due 15 November. No dependency version or vendored source is
changed in this release. Full evidence, commands and bounded verification scope live under
`status/release-1.1.0-261029` on the canonical dev box.

## Remaining acceptance

[Open work](/Riff/LATEST/open-decisions) retains whole-library/cardinality and physical power-cut
checks, representative audible-media validation, known baseline phone UI failures and supported-host
acceptance. Launch/navigation smoke and local fixture tests do not establish full vehicle-host or
complete-library performance conformance.