The APK also lands in an F-Droid repository on packages.arasaka.software, linked from the download page with Obtainium

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T9uhaCTSycTh1r8At679Pz

CLAUDE.md

@@ -173,6 +173,19 @@ The Android release key: alias `meweb`, certificate SHA-256
   `arasaka_repository_known`, or installed copies are treated as edited by hand and left alone. The package owns
   `/usr/share/arasaka-repository/meweb`, the marker that keeps the repository configured while any Arasaka package
   is installed. The signing key's only copies are that secret and the owner's Nextcloud backup.
+- **The APK reaches an F-Droid repository on packages.arasaka.software from the same job** (31 Oct 2026), after the
+  release is published, so the repository can lag the release page but never lead it. `.gitea/scripts/fdroid.sh`
+  installs fdroidserver into `tools/fdroid` (cached like the JDK) with uv from `setup.json` and the hash-locked
+  `packaging/fdroid/requirements.txt`, because the box has no `ensurepip` and the apt package would bring 242 others.
+  It refuses any repository key but `42C47659…BD0374` (org secrets `FDROID_KEYSTORE_B64` and `FDROID_KEYSTORE_PASS`;
+  the only other copy is the owner's Nextcloud, `Backups/arasaka-fdroid-repo-key/`), builds a new snapshot in
+  `/var/www/packages.arasaka.software/.fdroid/` from the live one (the APKs as hard links, so `rm` then `cp` as above;
+  the metadata, `apkcache.json` and the previous `index-v2.json`, which is where fdroidserver reads each APK's first
+  date), adds this version, keeps the newest three, runs `fdroid update`, deletes `repo/status/` (it names the
+  build machine's paths and `/etc/issue.net`), swaps the `fdroid/repo` link and checks the live signature. Never
+  regenerate the key: everyone who added the repository trusts only its fingerprint. `packaging/fdroid/` holds the
+  repository's settings, its icon (the Arasaka emblem) and the app's listing in English and Italian; the download
+  page links to it and to Obtainium (`Endpoints.FDroid`, source `FDroidRepo`).
 - **The server cannot ping**: `NoNewPrivileges` drops `ping`'s file capability and `ping_group_range` is closed, so
   the trace back to a caller uses `tracepath` (UDP, unprivileged) and keeps only public hops outside `Probe:Refuse`,
   so the box's own network never reaches an app.