Pass exact argv to Linux apksigner

[awatchar]

Root cause

Release run 31730892695 proved the signed APK and Bash signature/identity checks pass, then the strengthened PowerShell test failed because the extensionless Linux launcher received one reparsed Arguments string. The adversarial .bat fixture also checked ComSpec before rejecting an unsafe percent path.

Fix

• use ProcessStartInfo.ArgumentList for exact argv on .NET Core/Linux
• retain the reviewed quoted Arguments fallback for Windows PowerShell 5.1
• reject unsafe .bat paths before platform/ComSpec availability
• run the full updater suite against the real Linux debug APK/apksigner in ordinary PR and main CI, deriving exact expected identity from aapt

Local verification

• Windows PowerShell 5.1 updater suite with real debug APK/apksigner.bat: 33/33 passed
• AST parsing and git diff --check: passed
• third failed release run publicly audited at [Feature]: Finalize one-shot provisioning bundle and publish the next GitHub Release #6 (comment); no Release/assets exist

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
minimum	Ignored		Aug 13, 2026 6:56pm