Resources
CalfSec is Android app hardening (shell, optional Dex2C/VMP, evidence ZIP) with invite-only cloud jobs. Not MLPS/等保 certified, not MASA certified, not Cloud GA.
AAB, lazy, Uni, certificates.
Bind App signing cert, not upload key.
Before/after + blank-screen boundaries.
Gap vs Guardsquare / Promon / DoveRunner.
What we will and will not claim.
Indie / Studio pack defaults.