0.8.0 source candidate, August 14
Build: :app:assembleYc — successful
Package target: com.mostrami
Version target: 0.8.0 (21)
Signing state: unsigned / not distributed
v0.8.0 is an unreleased AI-integrity source candidate, not an installable release. Its source includes Gemini 3.6 grounded generation, deterministic citation validation, claim-level source mappings, LiteRT-LM 0.16, on-device-only private speech recognition and SHA-256-attested Gemma and Piper downloads. Local pack retrieval now uses weighted BM25 with a refusal threshold and an automated IT/EN evaluation gate. The status below separates what is verified in code, what is ready for internal device QA, and what still depends on external setup before the invite-only closed beta. There is currently no signed or distributable v0.8.0 APK. Controlled access starts only after signing, cloud canary and exact-device qualification; it is not a public Google Play launch.
The 0.8.0 YC artifact compiled successfully on August 14 but is unsigned. The signed v0.7.0 private-beta APK remains the current and only distributable build.
Build: :app:assembleYc — successful
Package target: com.mostrami
Version target: 0.8.0 (21)
Signing state: unsigned / not distributed
Public artifact: site/apk/MOSTRAmi-0.7.0-yc-release-latest.apk
Original build timestamp: 2026-08-09 21:47:57
SHA256: 485387a1bd6e4c66fea89bf5e72b6b1f0e356697c0c595a37130c0d85fe49acb
Size: 308 MiB
Version: 0.7.0 (20)
Signature Scheme v2 / 16 KB: verified
Distribution: the only signed APK currently available to authorised private testers; also retained as the rollback artifact for future v0.8 qualification.
Download current signed v0.7.0 private-beta APKFilter by status. Partial or blocked features should be framed as internal beta scope, not public launch scope.
v0.8.0 replaces the previous pseudo-MoA path with a structured grounded generator, deterministic citation validation and a separate semantic/safety verifier. Android carries verified claim-to-source mappings into chat. Local retrieval uses BM25, and model/voice downloads are tied to immutable revisions, exact sizes and SHA-256 digests. The release still needs signing, cloud canary and physical-device qualification.
What: bottom nav reordered with Scan as the central hero; Home→Discover, History→Diary; a "Explore" hub; the engine choice no longer asked at first run (it lives in Profile).
Why: the old UI was mode-first (keyboard/voice/live before intent). Modern museum apps are visit-first.
Benefit: the scan→curator-voice wedge is the obvious action; faster comprehension, less in-gallery cognitive load.
What: Clio onboarding now starts through Gemini Live with transcriptions disabled for the welcome path, a short opening prompt, and no immediate TTS handoff on the name step.
Why: the first spoken greeting could stall for 5-10s and feel like the app had frozen.
Benefit: faster first voice response, fewer audio handoffs, and a calmer first-run setup.
New MOSTRAmi banner normalized for Play Store and site, new Play 512 icon, and Android raster/adaptive launcher for all densities.
Compact onboarding and new interactive guide with routes, feature catalog, QA checklist, and operations glossary of the installed build.
Instant shutter Freeze UX with artwork screening. Diagnostic HUD overlay dashboard (pipeline state, active engine, RAM, and connectivity) and safe scanning with 30s/35s timeout and native JNI deadlock resolution.
ML Kit pipeline for reading captions, parsing metadata, and passing context to the artwork analysis flow.
Contract-First architecture with InterpretationContract. The cloud text path uses one structured Gemini 3.6 generator, deterministic citation validation and a separate semantic/safety verifier. Android renders verified claim-level citations and each assistant message preserves its own contract task, grounding label and provenance.
Local download of Gemma 4 model variants is enabled and manageable directly in both Standard and Expert profiles. Local analyze/chat paths can now receive the rendered agent prompt containing the contract task and retrieved evidence.
Automatic vocal playback (Auto-Narration) of chatbot responses, with automatic cleaning of metadata tags and fluid interruption handling.
Native Clio Live Cloud targets the correct Firebase Google AI native-audio model, exposes continuous listening, voice response and barge-in, and is now available as a floating assistant across the main app surfaces. Live and TTS are mutually exclusive, local voice options stay hidden outside local/expert context, onboarding uses the Live path instead of legacy TTS, and chat releases active resources when the user returns home. Uses Firebase @PublicPreviewAPI, which could change before GA.
Kids (under 14, engaging tone with emojis) and Senior (high readability, strictly without emoticons) profiles covered by current product tests.
Italian and English UI coverage is stable. FR/DE/ES resources now include safe English fallbacks to keep lint clean while reviewed translations remain pending.
Photo saving disabled by default, Firebase diagnostics controlled by user consent, and AI disclosures clearly visible.
Local history, GDPR JSON export, scan deletion, and consent resets linked directly to user flows.
Multi-turn chat now includes an interactive artwork context panel grounded on the captured frame: pinch-to-zoom, tap a visible detail or detected point of interest, circle-select an area, and pass that crop into follow-up analysis. The June 28 pass gives more room to the artwork, moves reset and circle actions into compact icon controls, and renders Clio narration as readable rich text instead of raw markdown. AI disclosure, in-app reporting, and centralized free-tier limits remain active.
Italy-only catalog with Uffizi, Brera, Museo Egizio, Gallerie dell'Accademia, MANN, Capodimonte, and MAXXI. The screen now prioritizes official maps, optional distance, directions, and route choice without exposing distracting or unimplemented controls.
Each museum can expose curated experience packs with duration, audience, artworks, route steps, included assets, and a Clio opening line. Loading a pack creates an active visit, fills the wishlist, and sends the visitor directly to Camera to begin scanning. Packs are client templates in the current build; the signed production broker remains a launch gate.
Wear OS module with audio bridge service and remote controls. Real audio playback on smartwatch implemented but not yet validated on physical hardware.
The Scholar surface now reads as a premium dossier: guided process, source pack, critique, citation cards, note and share actions, and stronger hierarchy. Commercial positioning still needs billing and content QA before public sale.
The login button no longer fails silently, but real login requires a configured Web Client ID in Firebase.
PRO screen remains stable without offers, but Play Console products, RevenueCat offerings, and purchase QA are external.
Firebase Functions code passes syntax checks and preserves structured errors, but the production EU deployment, server-side App Check, rate limiting, and operational logging still need live verification.
Keystore uploads, CI secrets, public legal pages, final Data Safety, and internal Play Store track testing are required before production.
Real-time WebSocket synchronization of screens, centralized AI profile steering (Kids/Senior/Standard), and log-RSSI based BLE proximity warnings (>15m) with haptic vibration.
Art wishlist turns into riddles to solve by exploring rooms. Unlock works by scanning them, passing AI multiple-choice quizzes, and collecting digital stickers.
Complete post-visit redesign into a historical memories scrapbook. Vertical timeline with voice notes (.aac), customizable photos inserted via camera, XP statistics, and a Polaroid postcard generator.
Technical scaffolding for the cloud proxy workflow. Deep links and response simulations are implemented, but no real backend, no active Business APIs, and audio placeholders. Engineering has no fixed date and remains outside the closed-beta release path.
These points do not depend solely on Android code and must be closed before public release.
Deployment, server-side Firebase App Check verification, auth verification, rate limiting, and cost controls.
Configure Web Client ID to make Sign In with Google operational on test devices.
Play Console products, RevenueCat offerings, restore, cancel, refund, and internal purchase QA testing.
Keystore upload, CI secrets, signed AAB for Play Console, and staged rollout.
Replace the built-in demo broker and client-side route templates with a production Vector/FTS broker, signed museum packs, and reviewed critic packages.
Pixel, Samsung mid-range, low-memory devices, TalkBack, large text, contrast, audio, and museum scanning checks.