# Riff 0.1.5-rc — committed A-Z release

Dated committed-source release evidence. [Current delivery](/Riff/LATEST/tldr) identifies current
phone/HU bytes. This older website edition is superseded by the
[current committed release](/Riff/LATEST/rc-0-1-6-delivery-261014).

The user accepted the working A-Z correction and requested one version increment, commit, merge,
push, a new APK on phone/HU and website code/APK publication. **0.1.5-rc**, versionCode **8**, **RC
261014** was installed on both devices and published on the origin website at this delivery.

## Committed source and validation

Implementation commit **1d8eecd4ae48680b6854e7141445ab7bc15eb155** contains the reviewed 31-file
scope: one RGB adjustment layer, file-only default 32 and shared validation, final-group breadcrumb
navigation with the keypad open or closed, associated tests, version/date and current scoped
documentation. The branch codex/az-adjustment-layer was merged into main as
**5cf0886bf3330ed6a141eb96cfa535a05fb15541**, then pushed to origin/main. No history rewrite or tag
was performed. The signed artifact was built only afterward from that exact clean main commit/tree.

Fresh verification passes **28 configuration + 297 Player JVM cases**, five release-tooling cases,
**39 HU Android cases** and **eight focused phone Android cases**. Kotlin/checks, Android lint,
instrumented assembly, distribution/model/alignment and persistent-certificate checks pass. Device
coverage includes complete DAY/NIGHT rows, default 32/file override 16, all RGB byte values and
zero/disabled bypass, input/gaps, independent filters and final-plate return with open/closed
search. No new media/indexing/performance or vehicle-host claim is made.

## Signed APK and installations

APK SHA-256: **59c749b3e6cdd119872776bde61d6b52fb914f347c4f210e2f120ccb5ba45717**. Persistent
certificate SHA-256: **8f1dce0e9f5ae50fbead23ddb3d60182f9af4b3a584481eeee1f3df5c499e67d**. Model
SHA-256 remains **8819c2b3723d448dc63e92c12135a57eab00a3f867697439e4eb327bc6f32813**. Exact signed
artifact: releases/261014-rc-0.1.5/riff-0.1.5-rc-261014.apk.

Both pulled installed APKs match. VersionCode 8, 0.1.5-rc, RC 261014, signing identity, UID,
first-install time and exact persisted URI permissions are verified; both launch and remain alive
without bounded startup FATAL EXCEPTION. No uninstall, data clear, manual reset or persisted-format
change occurred. HU Player backup succeeds privately; a complete private phone backup is unavailable
to unprivileged ADB and is not claimed. After catalog readiness, both working apps pass the real
Albums/GHI/close/final-tap return; phone explicitly passes its automatic-close branch.

## Website code and APK

[APK](https://roadio.link/downloads/riff-0.1.5-rc-261014-59c749b3e6cd.apk) and
[matching source archive](https://roadio.link/downloads/riff-source-0.1.5-rc-261014-a0f16bcedf98.tar.gz)
are published with [APK metadata](https://roadio.link/downloads/apk-release.json),
[source metadata](https://roadio.link/downloads/snapshot.json) and
[checksums](https://roadio.link/downloads/SHA256SUMS). The read-only
[Git endpoint](https://roadio.link/repo/riff.git/) contains a clean public cut:
**862427fea090c48a6852d314b501ff10efe759ea**, one root commit, tree
**6f26c3adba9eb3f5e18333af3f3cae6edf9871a6** and **1299** curated files from release commit
5cf0886bf3330ed6a141eb96cfa535a05fb15541. The APK, archive, Git tree and metadata agree on
0.1.5-rc/RC 261014. Canonical development history is retained; public source excludes signing state,
private evidence, generated builds and original Git history. Current source dependencies, schemas,
assets, tests, generators and notices remain.

All **1369 origin files** and cache headers match exact staged bytes; a real origin Git clone has
one commit and the exact source inventory. Homepage/downloads, source browser, bilingual script,
metadata and complete sitemap are updated. Existing RU/EN articles, screenshot edition labels and
content-named assets/downloads/Git packs are preserved; private rollback copies remain. Initial
staging inherited a private extraction umask; publication was corrected by re-extracting the
verified archive with its declared readable permissions. Full HTTP verification passed afterward.

Origin is current and both new content-named downloads are exact. 11/17 selected ordinary public
responses match; cached older routes: index.html, source/index.html, downloads/apk-release.json,
downloads/snapshot.json, downloads/SHA256SUMS, sitemap.xml. Manual Cloudflare clearing remains with
the user, as previously agreed. Public Git latest-tree verification remains pending while its
mutable refs are cached.

## Evidence

Commands, staged scope/patch, Git IDs, tests, signed build, installs, working-device UI captures,
site/source inventories, rollback material, HTTP checks and clone evidence remain under
status/rc-0.1.5-261014/. Final documentation-only Git follow-up is recorded separately in worklog.