halkyon/tool/release/train-android-certificate.sha256

# The SHA-256 of the certificate that signs Halkyon Train's Android releases (key alias
# halkyon-train), as keytool prints it. tool/release.dart releases no APK signed otherwise.
38:BD:ED:BA:9B:8D:3F:2B:77:DE:20:E1:4F:65:9E:0B:BE:66:7A:07:6C:0F:56:05:8E:80:95:B2:B4:11:8A:6D
build(train): Train is released as Learn is, with a key of its own, beside it in the F-Droid repository (ADR 0030, D58) apps/train/release.dart configures the release tool for Train's APK on train.halkyon.eu; its release builds sign with its own key when the tool hands it over. Its F-Droid listing declares NonFreeDep for Polar's SDK and NonFreeNet; the repository's script copies each app's icon. The key's certificate is pinned once the key is made. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me> 2026-10-30 16:40:12 +01:00			`# The SHA-256 of the certificate that signs Halkyon Train's Android releases (key alias`
			`# halkyon-train), as keytool prints it. tool/release.dart releases no APK signed otherwise.`
build: releases fetch their signing keys from Proton Pass into memory, never onto the disk tool/with_signing_keys.sh downloads the app's Android keystore and the F-Droid index's from the vault Infra · Signing into a folder under $XDG_RUNTIME_DIR, runs tool/release.dart with their paths, and removes the folder however the run ends. The passwords are asked for as ever. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me> 2026-10-30 16:54:57 +01:00			`38:BD:ED:BA:9B:8D:3F:2B:77:DE:20:E1:4F:65:9E:0B:BE:66:7A:07:6C:0F:56:05:8E:80:95:B2:B4:11:8A:6D`