cosmic-mobile

public
Latest change a8ee2eaae0bd8aa979db3219390e3b2d7a5b98e6 - Add core app pages and touch phone keypad by AkurAI Build
# Task: Core Apps OTA

- **Epic:** none
- **Status:** active
- **Updated:** 2026-09-06

## What
Deliver Phone, Contacts, Calendar and Messages MVP with visibly simulated cellular actions, plus authenticated app OTA and rollback.

## Notes
- Partial source only: src/core_apps.rs stores local records atomically; main.rs has four launcher pages. Not independent apps, not deployed or visually verified.
- cargo test and release build pass; tests/core_apps.rs covers invalid date/name, leap date, record reload and simulated message status. Python tests pass. Existing dead-code warnings remain.
- Live tablet QEMU confirmed network_disabled=true and snapshot=true. Existing bridge has no install/reload channel. Do not restart disposable VM before preserving current data and display settings.
- OTA not implemented. User authorized emulator networking and EC2 buios.olibuijr.com update origin with public AkurAI Build repository. Permission resolved; guest state preservation, network-enabled launcher deployment and trust-root provisioning remain. PCI hotplug failed and was rolled back. Never represent host scp as guest OTA. No signing private keys created.
- Recovery: current guests untouched. Source changes remain uncommitted amid inherited unrelated work.

## Steps
- [x] Add local record model and initial four app pages; compile/test.
- [ ] Complete distinct app UI and per-app state/lifecycle; phone dial pad and useful calendar view.
- [ ] Secure package/update design using native package support where possible; pinned trust root, signature and version checks, staged activation, app data outside packages, rollback.
- [ ] Preserve guest state, provision network and trusted update source, deploy.
- [ ] Exercise all four apps through headed UI on both guests, show screenshots.
- [ ] Prove real OTA download, tamper rejection, interrupted-update recovery and rollback without data loss.