Skip to content

[Gate H] Final publisher identity, privacy URL, listings and regulatory approval #34

Open

Description

@guo6x

Objective

Gate H PENDING / STORE_NOT_APPROVED — updated 2026-10-25. Finish actual publisher, policy, final artifact and channel compliance evidence; drafts are not approvals.

Details

Current source/materials are maintained in PR29 compliance documents. PR42 has merged static/privacy and separate Domestic Accessibility consent protections. PR39 is CLOSED/unmerged, not an open dependency.

The owner authorized public support email 15015091629@163.com; delivery has not been tested. Legal issuer, store accounts and a stable no-login HTTPS privacy policy URL remain unconfirmed. Repository PRIVACY.md is a product explanation, not an already hosted final policy.

Checklist

  • Confirm actual legal issuer, regions/channels, ownership and licensing rights.
  • Verify support email send/receive; host reviewed final policy with true issuer/contact, then verify public URL.
  • Match final Play/Domestic binaries, manifests, SDK/runtime inventories and scenario/UID network evidence; static scans are not runtime proof ([Gate H] Verify per-UID runtime traffic on an authorized emulator #40).
  • Complete Play Data Safety, specialUse FGS declaration/genuine feature video, listing, content rating/target audience and platform review.
  • Capture final channel screenshots/icons without fabricated product or user data.
  • Determine applicable Domestic filing/copyright/issuer qualifications through official current channel requirements; obtain actual evidence where needed.
  • Recheck Domestic prominent Accessibility disclosure/affirmative consent and Play exclusion in the final artifact.

Dependencies / notes

Domestic account and qualification guide is ready for owner decision, not proof of registration, payment, filing or submission. No external application is authorized by this issue. Fixed 24-hour acceptance is removed, without changing F/G/H/I evidence boundaries. No private identity documents, device data or signing keys in public issues.

Activity

  1. guo6x commented on Oct 12, 2026

    @guo6x
    OwnerAuthor

    2026-10-12 Gate H no-phone evidence update: Security/dev dependency PR #37 was squash-merged (master SHA 695b11f0), with 0 full npm audit findings. Privacy/static-network + store-notice work was re-integrated into PR #39 from that patched main, removing external Google Fonts, adding source scanning including Capacitor server.url via TS AST, and generating Play/Domestic Android runtime SDK inventory records in provenance. Final PR39 SHA 6423930d... CI 38236493460 PASS. PR39 remains UNMERGED because latest attempted Codex independent review hit a usage limit and the previous reviewed commit had findings since fixed. Superseded/conflicting PR38 closed unmerged. This is not Gate H PASS: valid publisher identity, support email, hosted final policy URL, APP filing applicability/evidence, true final artifact network capture, Play/Data safety console decisions, store assets/video, platform review/approval remain unverified or owner-required. No phone, signing secrets, or store credentials used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions