[isomorphisms]

Reconcile the existing Google Identity Services receiver with current IB, keeping LongView as launcher and isolating explicit ib://google-drive-authorize consent/code delivery in DriveAuthorizationActivity. Preserve the local loopback credential-writer boundary; unknown/duplicate URI fields, overlapping requests and incomplete scope grants are refused. Readonly is default; readonly + drive.file supports application-owned archives/copies.

Canonical package org.isomorphisms.ib.webview, nondecreasing versionCode 8, one stable signer lane. No native payload or arm64 port. Without an explicitly supplied stable keystore the candidate is unsigned rather than generating another debug identity. The public CI key is an inspectable test identity, not a live OAuth signer.

Exact head 0b0a7be build, unit tests, lint and signer verification pass in https://github.com/isomorphisms/ib/actions/runs/37502503346 . Inspectable artifact https://github.com/isomorphisms/ib/actions/runs/37502503346/artifacts/11430990547 includes APK, actual aapt metadata and hash. APK SHA-256 451a1fa2543e46bb1c7c6675fe7443d81947846f8ceab4af8065b48328150aa8. Inspected package metadata confirms minSdk 26, target/compile 36, LongView launcher and no native-code entry; minSdk fits retained C67 Android 14/API 34. Replacement-install emulator evidence is separate from build and physical acceptance.

External live gates: one approved stable private IB signer, installed-package identity check, Google Android client with exact package/signing SHA-1, matching Web client for server-code exchange, enabled Drive API/consent/test-user configuration; C67 Play Services/account state, physical installation/consent/code return, durable refresh state and an actual authorized Drive request. Do not register public/shared or runner-local test keys for live OAuth, fork the package, or uninstall to hide signer mismatches. Physical C67 authorization NOT_RUN.

Cat Food #117 owns artifact/target admission. Source SDK compatibility and hosted build do not qualify C67. Details: docs/drive-authorization-c67.md.

Parked on retained branch — 2026-10-06

Work is incomplete and preserved, not abandoned or accepted. This integration request is closed under the user's active-queue cleanup policy; every original requirement, evidence boundary, issue and follower obligation above remains in force.

• Retained branch: feature/android-drive-authorization in isomorphisms/ib.
• Preserved head: 0b0a7bed15cb668a00ba11147618e3d353d58f1b.
• Intended base: main at 10fa7bbe93ff9ffa1ba7b9f62e0dd8f6c10a86bc; stack refs are unchanged.
• Remaining boundary: Approved stable private signing identity, Google OAuth registration and physical C67 consent/Drive request remain external gates.
• Resume by continuing the retained branch and reopening this same PR after resolving that boundary and refreshing exact-head/base scope, required checks and receipts. Dependencies may continue to use its preserved ref. No replacement PR is needed.

Closing this PR grants no runtime, deployment, live-source, signing, device or paid-execution acceptance. No branch is deleted and no issue or follower is closed.

[isomorphisms]

BLOCKED — one live successor retained for the independent Drive authorization adapter: this PR at e8164d9. Hosted Android run 35755114882 is successful compilation/package/static-boundary evidence. It cannot prove live OAuth. The remaining boundary is a stable private signer registered by SHA-1 for org.isomorphisms.ib.webview and the matching Web OAuth client, followed by a real explicitly initiated authorization/code return to the local listener. Longview's provider-neutral authorization references do not implement this adapter. No code/token may enter history, journal, clipboard, intent extras or ordinary durable state. No duplicate successor or live authorization is attempted.