From 92e6ee8d7030ddb98cdbd093ab7456b539695918 Mon Sep 17 00:00:00 2001
From: SimpleTest <simpletestxxx@gmail.com>
Date: Wed, 26 Aug 2026 01:05:12 +0300
Subject: [PATCH] Record Play-delivered Android FCM replay

---
 docs/verification.md | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/docs/verification.md b/docs/verification.md
index 9053162..374ef81 100644
--- a/docs/verification.md
+++ b/docs/verification.md
@@ -3905,3 +3905,38 @@ promoted.
   `output/production-full-e2e/production-e2e-20260826-final`. No email was sent,
   no real-user status or role was changed, and no test, Caddy, Play, or public
   Git mutation was performed.
+
+# 2026-08-26 Play-delivered Android FCM and tap replay
+
+- The connected physical phone reported package `org.whoneedhelp.mobile`
+  version `0.1.3 (4)` installed by `com.android.vending`. The strict Play
+  verification script accepted its signing identity against the supplied Play
+  App Signing identity set, confirmed the verified `whoneedhelp.com` App Link
+  resolves to `MainActivity`, and confirmed the browser Google callback is not
+  claimed by Android.
+- The guarded production FCM plan selected the active Android device
+  `9d1a4f89-03cb-459c-b071-a56a977290d8` and scoped the mutation to one durable
+  notification plus one Android FCM job. It excluded email, Web Push, frozen
+  test, shared Caddy and public Git.
+- Run `20260825215906-e6b183b36d2f` produced one system notification on channel
+  `who_need_help_updates` with title `Support request updated` and privacy-safe
+  body `Open Who Need Help to review the latest update.` Android reported one
+  enqueued and one posted application notification. The notification was also
+  observed in the expanded system shade.
+- Tapping the notification resumed
+  `org.whoneedhelp.mobile/.MainActivity` and rendered the in-app Notifications
+  inbox containing the matching unread item. Provider verification then
+  recorded `android_fcm_provider_delivery_verified=true`, a completed job on
+  attempt 1, and an active target device.
+- Exact cleanup deleted one run-scoped job and one run-scoped notification,
+  removed the local smoke state, and left no active notification with the run
+  title or body. The two screenshots and UI hierarchy are retained under
+  ignored local path `output/android-device/`; their SHA-256 values are
+  `67ebd29bfc94a11eceebb09dbdd66dff2fd1ba6b7388e2983a7efab5e3a1b2e9`,
+  `02abdaa8345ef5feb563282366c067384a208330d89fe4dfb4804647f357d758`,
+  and `4e848e44ccd4f5b8c4ed39d90b033dae34e0efacee68a81c8e023087b5f2cb8c`.
+- Final read-only inspection found production healthy on image
+  `who-need-help:production-305bdebdd191`, frozen test healthy on
+  `who-need-help:test-cf7bacdf61ff`, shared Caddy healthy on
+  `who-need-help:caddy-production-a7412c65b51a`, and public Git main unchanged
+  at `921e04b3608007675e22e7e26e0beb3975dbba58`.