APK layer
Manifest, permissions, SDKs, debuggable and backup flags extracted deterministically.
Evidence-first release review
AppoClear analyses the actual Android artifact, a recording of the app in use and — only when you authorise it — the source repository. A deterministic validator drops any finding the evidence does not support.
Manifest, permissions, SDKs, debuggable and backup flags extracted deterministically.
Frames sampled from a screen recording, described and cited by timestamp.
Optional, read-only, commit-pinned source audit run after the blind analysis.
Contradictions between what the build declares, does and implements.