19 lines
816 B
Markdown
19 lines
816 B
Markdown
# ADR 0003: Privileged install track
|
|
|
|
## Decision
|
|
|
|
Ordinary sideloading will not make NTP Check a privileged app. The main app remains a normal diagnostic app. A future separate privileged/root build track may be designed, but it must not be mixed into the default release.
|
|
|
|
## Notes
|
|
|
|
A privileged Android app generally has to be installed on a privileged partition such as `/system/priv-app/...` and allowed through `privapp-permissions` XML. On many devices, clock-setting APIs may also require platform signing or ROM control. Root/Magisk or a custom ROM can make this possible, but it is device-specific and not appropriate for v1.
|
|
|
|
## Consequence
|
|
|
|
Default release behavior is:
|
|
|
|
- measure NTP offset
|
|
- warn when local time appears wrong
|
|
- open Android Date & Time settings
|
|
- never silently attempt clock changes
|