[nugglebug87]

Preserves the bundled playable game while preparing com.lilopia.game for Google Play: API 36, version 1.0.0/code 2, no debug release-signing fallback, blocked external WebView resources/navigation, disabled backups/transfers, and native Google Play Billing 8 integration with a server verification service. Android rejects simulated/development/saved entitlement flags and hides development controls.

Only Dream Mansion, Beach Vacation and City Life are enabled in the native catalog. Ad removal remains unavailable because the game has no ads. The default candidate deliberately disables payments until rebuilt with a real deployed HTTPS verifier. Play Console setup, products/API access, final privacy/support details, upload-key signing and license-tester transactions remain release gates; this is not a monetized production release.

Validation: Android bundleRelease/lintRelease succeeded, with 0 lint errors and 4 disclosed warnings. Bundletool 1.18.2 structural validation passed. Manifest confirms com.lilopia.game, code 2/name 1.0.0, min API 24/target 36, and only INTERNET, ACCESS_NETWORK_STATE and BILLING permissions. The release AAB is unsigned. No native shared libraries are packaged. The Java unit-test task has no sources and is not represented as native test coverage.

21 Node rule/security tests passed; 24 original browser interaction checks passed with no errors; Android UI contract testing passed for forged entitlement rejection, premium travel, hiding development controls and disabled unconfigured payments. Server dependency audit found 0 vulnerabilities. Signing helper successfully signed and verified a separate copy with a disposable test key; the delivered candidate has no test signature. No physical Android device or real Google Play checkout/token verification was available.

PLAY-RELEASE.md contains account-specific Console steps, exact product IDs/prices, signing instructions and billing test matrix. VALIDATION.md records evidence and limits. PRIVACY-POLICY-DRAFT.md remains explicitly incomplete pending public contact and actual hosting/data-retention choices. Existing GitHub Pages game was inspected but not redeployed.

October 29 CI refresh

The updated source passed Android release CI on commit 60fd046e3ac7cc9c02bb76cdaebc715918d993a6: 22 Node tests, 35 browser gameplay checks including zoom, screen/save checks, Android UI contract, and bundleRelease lintRelease testReleaseUnitTest all passed. The unsigned candidate AAB and lint report are available from workflow run #40926743738. The AAB remains unsigned; purchases remain disabled pending a deployed HTTPS verifier. No Play-distributed device test or real checkout is claimed.