wtclaude c1d99f943a docs(android): note explicit network security config for cleartext posture ...

Record that the app's HTTPS-only-in-release / HTTP-in-debug rule (ServerUrl,
allowInsecureHttp = BuildConfig.DEBUG) is backed at the platform socket layer
by an explicit network security config: main/release forbids all cleartext, a
debug override re-permits cleartext to loopback only. Matches the fix in
RunicGateway/Android-app (fix/manifest-cleartext-traffic).

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-20 23:39:40 -05:00

..

APP_LINKS.md

docs(android): spec Android App Links (assetlinks.json + build-time host)

2026-07-20 18:37:04 -05:00

PLAN.md

docs(android): note explicit network security config for cleartext posture

2026-07-20 23:39:40 -05:00

theme-plan.md

docs(android): summarize website frontend theme for Android client

2026-07-19 22:41:45 -05:00