v1.0.0-TITAN-r2: Vanguard Market + Universal Desktop + Mesa Turnip + Zero Trust + Foundry

v1.1.0-TITAN Release Notes

Release date: 2026-07-18
Git tag: v1.1.0-TITAN-r2
APK size: 101 MB
Build evidence:

• testDebugUnitTest — 1855 tests, 0 failures, 0 errors, 2 skipped
• assembleDebug — green
• assembleAndroidTest — green (8 new instrumented tests)
• 0 lint errors, 0 warnings

---

What's new

This release closes the 7-phase pending list (Phases 59–65 of the
universal runtime) and ships the foundation of the Elysium Automotive
Foundry (Phase 0 + Phase F1). 118 commits since the previous TITAN
release.

Vanguard Market (Phase 59)

The platform's signed distribution channel. A typed, signed,
content-addressed index of every item the platform can install.

• 12 MarketListingType values (DISTRO, APP, WINE_PROFILE, CONTAINER,
  TOOLCHAIN, IDE, SERVER, PROJECT_TEMPLATE, GAME_CONFIG, PLUGIN,
  AUTOMATION, AI_AGENT)
• MarketSigning (HMAC-SHA-256, Ed25519 in Phase 2)
• MarketCatalog interface + InMemoryMarketCatalog impl
• MarketSearch with case-insensitive substring match + type filter +
  bounded result sets
• 32 unit tests

Elysium Vanguard Linux distro (Phase 60)

The first listing in the catalog. The platform's own Linux distribution
(Debian-based + runtime + market client + security stack bundled).

• MarketPublisher + LocalMarketPublisher (signs drafts + pushes to catalog)
• MarketInstaller + LocalMarketInstaller (download + verify signature
  • verify content hash + write to disk)
• ElysiumVanguardDistroListing (the first listing, v1.0.0-TITAN)
• 12 round-trip tests (publish + install + verify)

Universal Desktop Shell (Phase 61)

The Compose-based window manager + dock for Market-installed apps.

• DesktopSessionState + DesktopWindow + WindowState (NORMAL / MINIMIZED / MAXIMIZED)
• DockItem + DockItemKind (PINNED_APP / RUNNING_WINDOW)
• DesktopShellViewModel enforcing 4 invariants:
  1. Focused window is always on top
  2. zOrder is monotonically increasing
  3. MAXIMIZED window's bounds = desktop bounds
  4. Closing a window removes the corresponding dock item
• DesktopShellScreen placeholder composable
• 19 unit tests

Mesa Turnip Vulkan ICD (Phase 62)

The JVM-side integration with Mesa Turnip, the open-source Vulkan driver
for Qualcomm Adreno GPUs.

• GPUVendor (8 values: Adreno, Mali, PowerVR, Intel, AMD, NVIDIA, Apple, Unknown)
• VulkanApiVersion (VK_1_0..VK_1_4 + UNKNOWN)
• VulkanCapability (API version + driver name + supported extensions)
• VulkanICD interface + TurnipICD (the Mesa Turnip wrapper) + 7 stubs
• VulkanICDFactory (selects the right ICD for the GPU)
• Build instructions for compiling Mesa Turnip for Android (in class docstring)
• 28 unit tests

Security Zero Trust completion (Phase 63)

Closes the Zero Trust gaps. Trust nothing, verify everything.

• DeviceIntegrity (rooted + debugger + signature check)
• DeviceIntegrityChecker (Hilt-injected, runs the 3 checks)
• SecurityAudit (append-only log of every security event)
• SecretStore (typed access to app-level secrets, every read/write audited)
• 4 SecretType values: MARKET_SIGNING_KEY, CLOUD_API_KEY, OAUTH_REFRESH_TOKEN, VAULT_PASSPHRASE
• 22 unit tests
• 1 test-discovered bug found + fixed (SecretStore.put tried to record audit
  event with blank subjectId before validating — fix: validate first, audit second)

Instrumented tests on real device (Phase 64)

Expands the androidTest/ coverage to the new features. 8 new tests
that run on a real Android device or emulator:

• MarketInstallInstrumentedTest (2 tests) — the publish + install flow on
  the app's private file system
• DesktopShellInstrumentedTest (2 tests) — the Compose UI for the
  Universal Desktop Shell
• SecurityInstrumentedTest (4 tests) — the DeviceIntegrityChecker on a
  real Android device
• 1 test-discovered bug found + fixed: D8 dexer rejects space characters
  in class names — fix: underscore-separated test names

Multiple distros (Phase 65)

Expands the catalog with 8 community distros:

#	Name	Family	Size
1	Ubuntu 24.04 LTS	Debian	1.8 GB
2	Fedora 41	RPM	1.6 GB
3	Arch Linux (Rolling)	Source	900 MB
4	openSUSE Tumbleweed	RPM	1.4 GB
5	Debian 12 (Bookworm)	Debian	1.5 GB
6	Alpine Linux 3.20	Source (musl)	250 MB
7	Void Linux (Rolling)	Source (musl)	700 MB
8	NixOS 24.05	Declarative	1.7 GB

Combined catalog: 1 platform + 8 community = 9 listings.

• 13 unit tests
• 2 test-discovered bugs found + fixed:
  1. Object init order — val ALL referenced vals not yet initialized
  2. "rolling" search count was 3, not 2 (Void has "(Rolling)" in name)

Elysium Automotive Foundry (Phase 0 + Phase F1)

The platform's new automotive engineering platform (per the master
prompt's mission: "transformar el proyecto existente en Elysium
Automotive Foundry").

• Phase 0 — 6 signed docs in docs/foundry/:
  • current-state-audit.md (28 KB) — the Elysium Vanguard baseline audit
  • target-architecture.md (16 KB) — the C4 L1/L2/L3 target
  • domain-ownership.md (40 KB) — every aggregate + owner + cross-skill contract
  • implementation-roadmap.md (31 KB) — 8 phases with 11 gates
  • risk-register.md (37 KB) — 47 risks in 6 categories
  • dependency-map.md (30 KB) — 44 cross-skill edges + 15 external deps
• Phase F1 first vertical slice — the "vehicle project → immutable
  traceable digital twin" integration test
• Phase F1 increments 2-3 — 3 new aggregates (VehicleProgram,
  Contributor, EngineeringArtifact) + optimistic concurrency strategy
• Phase F1 increment 4 — the audit trail (signed, append-only,
  content-addressed)
• 118 Foundry unit tests
• 24 ADRs registered (ADR-0001..ADR-0026)

---

Test-discovered regressions (all fixed in this release)

Per the project's "test-discovered regressions are good news" rule:

1. Phase 60 — Integration test asserted provenanceContentHash (derived)
   when it should have asserted provenanceSubjectId (the compilation's
   content hash). Fixed.
2. Phase 63 — SecretStore.put tried to record audit event with blank
   subjectId, which threw from the event's init block before returning
   the typed error. Fixed: validate first, audit second.
3. Phase 64 — D8 dexer rejects space characters in class names.
   Backtick-quoted test names with spaces translated to inner classes
   with spaces, which D8 rejects. Fixed: underscore-separated test names.
4. Phase 65 (a) — Object init order: val ALL referenced individual
   vals that weren't initialized yet. Fixed: declare individual vals
   first, ALL last.
5. Phase 65 (b) — Search count: "rolling" matches 3 distros, not 2
   (Void's name is "Void Linux (Rolling)"). Fixed: assert 3 + comment.

---

Build commands

# Build the APK.
./gradlew assembleDebug

# Run the JVM unit tests.
./gradlew testDebugUnitTest

# Build the instrumented test APK.
./gradlew assembleAndroidTest

# Run the instrumented tests on a real device.
./gradlew connectedAndroidTest

---

Architecture decisions (ADRs) applied

• ADR-0001 — Money is BigDecimal, never Double/Float
• ADR-0002 — VehicleRepresentationLevel transitions are append-only + signed
• ADR-0003 — AI_INFERRED cannot silently become VERIFIED
• ADR-0004 — RoyaltyContract must be ACTIVE before a Settlement
• ADR-0005 — Elysium 5% royalty is a configurable RoyaltyRule
• ADR-0006 — Vehicle definitions are append-only
• ADR-0020 — Modular monolith (no microservices without ADR)
• ADR-0021 — Android runtime is not vehicle domain; Foundry in
  :foundry:core:* namespaces
• ADR-0022 — Backend deferred to Phase 2
• ADR-0023 — Multi-module split deferred to Phase 7
• ADR-0024 — 1380 EV unit tests + 19 core/ + 26 features/ + 20 EV
  ADRs preserved
• R-T-3 — No secrets in the application package
• R-DI-1 — AI_INFERRED cannot silently become VERIFIED without a
  signed counter-signature
• R-CO-2 — Optimistic concurrency control (every aggregate has a
  version: Long)

---

Next steps

• Phase 2 (Foundry) — Room DB persistence + Hilt module (closes G1)
• Phase 2 (Foundry) — DSL parser + 18-step compiler pipeline
• Phase 3 (Foundry) — 3D pipeline + digital twin
• Phase 4 (Foundry) — AI council (multi-agent deliberation)
• Phase 5 (Foundry) — Commercial foundation (RoyaltyContract +
  License + double-entry ledger)
• Phase 6 (Foundry) — Marketplace + supplier network
• Phase 7 (Foundry) — Production hardening + multi-module split
• Phase 7+ (EV runtime) — Native Mesa Turnip build + asymmetric
  signing (Ed25519 / ML-DSA-65)

---

"The platform is one step closer to
the master vision. The Market is the
signed distribution channel. The
desktop shell is the user's window
into the apps. The Mesa Turnip ICD
is the open-source graphics driver.
The Zero Trust is the discipline. The
Foundry is the next platform. The
pending list is done. What comes next
is the next roadmap."

v1.0.0-TITAN — Phases 10.4–10.8: RUNTIME fix + Word + Sheet + Dashboard + Live color customization

v1.0.0-TITAN — Phases 10.4–10.8

RUNTIME fix + Elysium Word + Elysium Sheet + Dashboard visual refresh

• live color customization (Phase 10.8). This is the
  "office + real Linux PTY + customizable identity" drop.

Phase 10.4 — RUNTIME Direct-Exec launcher (real PTY, no probe one-shot)

The actual bug: the previous JailedDistroLauncher ran a one-shot
probe and died, so every distro reported "no PTY". The
NativeProotLauncher was wired but libproot.so wasn't bundled.

Fix: new DirectExecDistroLauncher finds the real shell of the
rootfs and exec's it with PATH / LD_LIBRARY_PATH pointing at the
rootfs. Debian / Ubuntu / Alpine / Arch now give a real interactive
PTY — apt update && apt install htop works end-to-end.

Phase 10.5 — Elysium Word (full Word clone)

• Character formatting (font, size, color, bold/italic/underline/
  strikethrough, super/sub, small-caps, all-caps).
• Paragraph formatting (alignment, line spacing, space before/after,
  indent, tab stops).
• Blocks (paragraph, headings H1–H6, lists with nesting, page breaks,
  horizontal rules, block quotes, code blocks).
• .elysium.word (JSON) and .docx (OOXML) — opens clean in Word,
  LibreOffice, Google Docs.
• 8 presets, two-row toolbar, live format panel.

Phase 10.6 — Elysium Sheet (full Excel clone)

• Real formula engine: lexer + recursive-descent parser + pure JVM
  evaluator. 32 functions (SUM, AVERAGE, MIN, MAX, COUNT, COUNTA,
  IF, AND, OR, NOT, VLOOKUP, ROUND, ABS, LEN, LEFT, RIGHT, MID, TRIM,
  UPPER, LOWER, PROPER, CONCATENATE, NOW, TODAY, PI, SQRT, POWER,
  MOD, IFERROR, ISBLANK, ISNUMBER, ISTEXT).
• Errors (#DIV/0!, #VALUE!, etc.) propagate through arithmetic.
• Cell formatting (font, color, fill, borders, 9 number formats,
  alignment, indent).
• Multi-sheet with tabs, frozen panes.
• .elysium.sheet (JSON) and .xlsx (OOXML).

Phase 10.7 — Dashboard visual

• Quick Action Ribbon (WORD / SHEET / RUNTIME tiles above the grid).
• WORD (cyan) and SHEET (magenta) portal tiles.
• Tiles pulse their accent color via infiniteTransition; whole
  ribbon wrapped in pulsingNeonBorder.

Phase 10.8 — Live color customization (NEW)

On-the-fly palette editing. The user changes the core accent colors
of the system, picks from 5 visual styles per slot, saves / loads
named palettes, and sees M3 widgets react immediately.

• 5 slots: PRIMARY, SECONDARY, TERTIARY, QUATERNARY, ACCENT.
• 5 styles: NEON, PHOSPHORESCENT, METALLIC, COMBINED, DIFFUSED.
• 8 built-in presets: TITAN (Default), OLED BLACK, PHOSPHOR
  GREEN, CYBER MAGENTA, GOLD METALLIC, INFRARED, HOLOGRAPHIC,
  MIDNIGHT NEON.
• Color picker: 2D saturation/value pad + hue slider + live
  preview + hex readout. Pure-JVM HSV math.
• Persistence: SharedPreferences-backed JSON. The current
  palette and the user's saved palettes survive app restart.
• Live application: ElysiumTheme reads from PaletteManager's
  StateFlow. M3 widgets (Button, TextField, Switch, …) reflect
  the new color scheme on the next frame after a slot edit.

Open the customization screen via the new dashboard COLORS tile
(neon yellow).

Numbers

• Tests: 696 → 831 (+135 net across all 10.x phases)
• 0 failures, 0 errors, 0 new warnings
• APK debug: 169 MB, BUILD SUCCESSFUL
• 11 new production files, 5 new test files, 5 changelogs
  (10.4 through 10.8)
• 1 real RUNTIME bug diagnosed and fixed (10.4)
• 1 dashboard portal tile (10.8) + 1 navigation route

./gradlew testDebugUnitTest → 831 green.
./gradlew assembleDebug → BUILD SUCCESSFUL.

Asset

• app-debug.apk — debug build, 169 MB. Install with
  adb install -r app-debug.apk (you may need to uninstall any
  earlier debug build first because of the signing key).

v1.0.0 INITIAL RELEASE: Elysium Vanguard

Professional tactical File Manager for Android, engineered with high-end phosphorescent UI and ultra-performance metrics. Features include Sovereign Storage Central, Matrix Rain backgrounds, and Neural Scan search.