fix license verifySignature to use Bouncy Castle Ed25519 instead of java.security KeyFactory/Signature - the JCA 'Ed25519' algorithm name routes to AndroidKeyStore's provider on-device, which only accepts KeyGenParameterSpec-generated keys and throws InvalidKeySpecException on any imported public key, silently swallowed to false; confirmed root cause via instrumented on-device test capturing the real exception, confirmed fix with the real test key validating true on-device

dev · 7 weeks ago · 2026-07-24 · 2.5 MB

session: critical-corrections-c1-c7 ยท agent: claude-sonnet-5

$ koh steal kepr.uk/peach-android@6e842eac315e
·
← aea3a3106d8e 560cbfdb55f0 →
⇓ download .face