Architecture

How we designed things that are actually running.

Written for the person who will notice if we are wrong. Each piece names the constraints, the trade-off we took, and what it cost us — and most end with something you can go and check for yourself.

Shipped and running

The internet permission we never wrote, and how it got into our app anyway

PDF Toolkit runs its OCR on the phone. Our manifest asked for one permission; the release we dumped had six, including INTERNET, added by a library four levels down. What manifest merging does, and the one line that took it back out.

Check it yourself: bundletool dump manifest --bundle=app-release.aab

Read it