refactor: rename MG4Control to EVProfile and split release channels

Rename the app and its package (com.mg4.control -> com.evsuite.profile)
as part of the suite-wide move away from the vehicle-specific MG4 prefix,
and point the vendored library at the consolidated EVHardware.

Release channels replace the historical distribution flavors: stable is
offline and manually updated, unstable is a co-installable rolling
pre-release carrying the updater and the network permission. Updater code
and its tests now live only in the unstable source sets, so stable builds
cannot ship them.

VehicleWriteGateTest follows EVHardware's hardened gate: the caller
threshold and the park rescue are gone, so the test now covers standstill,
movement and unreadable speed through decide(speed) alone.

Note for release notes: the application ID changes, so an existing install
is not upgraded in place. The new build installs alongside the old one and
does not inherit its profiles or permissions.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: malys

.github/CONTRIBUTING.md

@@ -1,6 +1,6 @@
 # Contributing
 
-Thank you for your interest in contributing to MG4Control! This guide explains how to report issues, suggest features, and submit code contributions—with optional support from Claude AI to improve your submissions.
+Thank you for your interest in contributing to EVProfile! This guide explains how to report issues, suggest features, and submit code contributions—with optional support from Claude AI to improve your submissions.
 
 ## Table of Contents
 
@@ -49,7 +49,7 @@ Claude AI can help you:
 
 1. **Start a conversation** with Claude:
    ```
-   I need to report a bug in MG4Control. Help me write a clear issue report.
+   I need to report a bug in EVProfile. Help me write a clear issue report.
    
    [Paste your reproduction steps, error messages, and environment details]
    ```
@@ -94,7 +94,7 @@ Claude can help you:
 
 1. **Start a conversation** with Claude:
    ```
-   I want to suggest a new feature for MG4Control to [describe problem].
+   I want to suggest a new feature for EVProfile to [describe problem].
    
    [Provide your initial idea, use case, and any constraints]
    

.github/FUNDING.yml

@@ -10,6 +10,6 @@ liberapay: # Replace with a single Liberapay username
 issuehunt: # Replace with a single IssueHunt username
 lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
 polar: # Replace with a single Polar username
-buy_me_a_coffee: slideen
+buy_me_a_coffee:
 thanks_dev: # Replace with a single thanks.dev username
-custom: ['https://www.paypal.com/paypalme/pfauquembergue']
+custom: []

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -61,7 +61,7 @@ body:
       label: "Steps to Reproduce"
       description: "Exact steps to reproduce the bug"
       placeholder: |
-        1. Open MG4Control
+        1. Open EVProfile
         2. Set vehicle speed to 50 km/h
         3. Tap "Drive Profile" → "Sport Mode"
         4. Observe crash

.github/ISSUE_TEMPLATE/config.yml

@@ -3,6 +3,6 @@ contact_links:
   - name: Security vulnerability
     url: ../../security/advisories/new
     about: Report privately, never in a public issue.
-  - name: MG4Hardware (the shared vehicle-access library)
-    url: https://github.com/malys/MG4Hardware
+  - name: EVHardware (the shared vehicle-access library)
+    url: https://github.com/malys/EVHardware
     about: Signal IDs, CarPropertyManager access and vendor-service plumbing belong there.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -12,7 +12,7 @@ body:
 
         Have an idea to make this project better? We'd love to hear it!
 
-        **Before requesting:** Please check if a similar feature has been requested in [Discussions](https://github.com/malys/MG4Control/discussions).
+        **Before requesting:** Please check if a similar feature has been requested in [Discussions](https://github.com/malys/EVProfile/discussions).
 
   - type: checkboxes
     id: checks

.github/ISSUE_TEMPLATE/security.yml

@@ -82,7 +82,7 @@ body:
     attributes:
       label: "Affected Projects & Versions"
       description: "Which projects and versions are affected?"
-      placeholder: "MG4Control < 1.2.0 (all builds), MG4Hardware < 0.5.0"
+      placeholder: "EVProfile < 1.2.0 (all builds), EVHardware < 0.5.0"
     validations:
       required: true
 

.github/security/check-channel-isolation.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "$0")/../.." && pwd)"
+stable_manifest="$(find "$root/app/build/intermediates" -path '*stableDebug*' -name AndroidManifest.xml | head -1)"
+unstable_manifest="$(find "$root/app/build/intermediates" -path '*unstableDebug*' -name AndroidManifest.xml | head -1)"
+
+if [ -z "$stable_manifest" ] || [ -z "$unstable_manifest" ]; then
+  echo "::error::Merged channel manifests were not generated."
+  exit 1
+fi
+
+for permission in android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.INSTALL_PACKAGES; do
+  if grep -q "$permission" "$stable_manifest"; then
+    echo "::error file=$stable_manifest::Stable must not declare $permission"
+    exit 1
+  fi
+done
+
+for permission in android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE; do
+  if ! grep -q "$permission" "$unstable_manifest"; then
+    echo "::error file=$unstable_manifest::Unstable must declare $permission"
+    exit 1
+  fi
+done
+
+if [ -d "$root/app/src/main/java/com/evsuite/profile/update" ]; then
+  echo "::error::Updater implementation leaked into the common source set."
+  exit 1
+fi
+
+echo "Channel isolation OK: stable offline/manual, unstable network/OTA."

.github/security/permission-allowlist.txt

@@ -1,4 +1,4 @@
-# Allowed permissions for MG4Control.
+# Allowed permissions for EVProfile.
 # Any uses-permission in a manifest NOT listed here FAILS the CI.
 # Why: the app runs on a moving vehicle — any new permission
 # (especially network or vehicle-write) must be reviewed and added here explicitly.
@@ -22,12 +22,11 @@ android.car.permission.CONTROL_CAR_CLIMATE
 # Exigée de l'émetteur du broadcast hardkey, en protectionLevel="signature" (T-902) :
 # seule une app signée avec la clé plateforme peut l'obtenir. Elle restreint un accès,
 # elle n'en accorde pas.
-com.mg4.control.permission.RECEIVE_HARDKEY
+com.evsuite.profile.permission.RECEIVE_HARDKEY
 # External control API: signature-level permission protecting ProfileControlService.
 # protectionLevel="signature" → réservée aux apps signées avec la clé plateforme.
-# Déclarée ET demandée par MG4Control : demandée pour pouvoir émettre le broadcast.
-com.mg4.control.permission.CONTROL_PROFILES
-# --- network / auto-update (online variant only) ---
+# Déclarée ET demandée par EVProfile : demandée pour pouvoir émettre le broadcast.
+com.evsuite.profile.permission.CONTROL_PROFILES
+# --- network / OTA (unstable channel only; the merged-manifest gate proves stable lacks it) ---
 android.permission.INTERNET
 android.permission.ACCESS_NETWORK_STATE
-android.permission.INSTALL_PACKAGES

.github/workflows/release.yml

@@ -1,27 +1,26 @@
 name: Release
 
-# Build both variants (online + offline) and publish them in the same Release.
-# Users choose which APK to install from the GitHub Releases page.
+# Stable channel: tagged, offline, and installed manually. workflow_dispatch validates and
+# uploads an artifact but deliberately does not publish a GitHub Release.
 on:
   push:
-    tags:
-      - "v*"
+    tags: ["v*"]
   workflow_dispatch:
 
 permissions:
   contents: write
 
 jobs:
   build:
+    name: Build stable offline APK
     runs-on: ubuntu-latest
     env:
-      MG4_KEYSTORE_BASE64: ${{ secrets.MG4_KEYSTORE_BASE64 }}
+      EV_KEYSTORE_BASE64: ${{ secrets.EV_KEYSTORE_BASE64 }}
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
           fetch-depth: 0
-          ref: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || 'main' }}
 
       - name: Verify release commit belongs to main
         if: startsWith(github.ref, 'refs/tags/')
@@ -33,67 +32,55 @@ jobs:
           }
 
       - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: "17"
+        with: { distribution: temurin, java-version: "17" }
+      - uses: gradle/actions/setup-gradle@v4
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+      - name: Require platform keystore
+        run: |
+          if [ -z "$EV_KEYSTORE_BASE64" ]; then
+            echo "::error::EV_KEYSTORE_BASE64 is required; refusing to publish an unsigned vehicle APK."
+            exit 1
+          fi
 
       - name: Decode platform keystore
-        if: ${{ env.MG4_KEYSTORE_BASE64 != '' }}
         run: |
-          # Tolerate newlines/spaces in the secret; printf avoids a stray trailing newline.
-          printf '%s' "$MG4_KEYSTORE_BASE64" | tr -d '[:space:]' | base64 -d > "$RUNNER_TEMP/platform.keystore"
-          # Validation: a PKCS12/JKS keystore starts with 0x30 (DER SEQUENCE). Otherwise the secret is corrupt.
+          printf '%s' "$EV_KEYSTORE_BASE64" | tr -d '[:space:]' | base64 -d > "$RUNNER_TEMP/platform.keystore"
           if [ "$(head -c1 "$RUNNER_TEMP/platform.keystore" | od -An -tx1 | tr -d ' ')" != "30" ]; then
-            echo "::error::MG4_KEYSTORE_BASE64 is invalid. Recreate the secret with: base64 -w0 platform.keystore"
+            echo "::error::EV_KEYSTORE_BASE64 is invalid."
             exit 1
           fi
-          echo "MG4_KEYSTORE=$RUNNER_TEMP/platform.keystore" >> "$GITHUB_ENV"
+          echo "EV_KEYSTORE=$RUNNER_TEMP/platform.keystore" >> "$GITHUB_ENV"
 
-      - name: Build online + offline release APKs
+      - name: Verify and build stable
         env:
-          MG4_KEYSTORE_PASSWORD: ${{ secrets.MG4_KEYSTORE_PASSWORD }}
-          MG4_KEY_ALIAS: ${{ secrets.MG4_KEY_ALIAS }}
-          MG4_KEY_PASSWORD: ${{ secrets.MG4_KEY_PASSWORD }}
+          EV_KEYSTORE_PASSWORD: ${{ secrets.EV_KEYSTORE_PASSWORD }}
+          EV_KEY_ALIAS: ${{ secrets.EV_KEY_ALIAS }}
+          EV_KEY_PASSWORD: ${{ secrets.EV_KEY_PASSWORD }}
         run: |
           chmod +x gradlew
-          ./gradlew assembleOnlineRelease assembleOfflineRelease --no-daemon
+          bash .github/security/check-permissions.sh
+          ./gradlew testStableDebugUnitTest lintStableDebug processStableDebugMainManifest assembleStableRelease --no-daemon
+          ./gradlew processUnstableDebugMainManifest --no-daemon
+          bash .github/security/check-channel-isolation.sh
 
-      - name: Collect APKs
+      - name: Collect stable APK
         run: |
           mkdir -p dist
-          # AGP 9 emits app-<flavor>-release.apk; rename to the published convention.
-          for f in $(find app/build/outputs/apk -name "app-*-release.apk"); do
-            flavor=$(basename "$f" | sed -E 's/app-(.*)-release.apk/\1/')
-            ver=$(grep -oE 'versionName = "[^"]+"' app/build.gradle.kts | head -1 | sed -E 's/.*"([^"]+)"/\1/')
-            cp "$f" "dist/MG4Control-${flavor}-${ver}.apk"
-          done
+          ver=$(grep -oE 'versionName = "[^"]+"' app/build.gradle.kts | head -1 | sed -E 's/.*"([^"]+)"/\1/')
+          find app/build/outputs/apk -name "app-stable-release.apk" -exec cp {} "dist/EVProfile-stable-${ver}.apk" \;
           ls -la dist/
 
-      - name: Upload APKs as workflow artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: mg4control-apks
-          path: dist/*.apk
+      - uses: actions/upload-artifact@v4
+        with: { name: evprofile-stable-apk, path: "dist/*.apk" }
 
-      - name: Publish to GitHub Release
+      - name: Publish stable GitHub Release
+        if: startsWith(github.ref, 'refs/tags/')
         uses: softprops/action-gh-release@v2
         with:
-          # Tag push -> stable release on the tag. Manual run -> prerelease "ci-<run>".
-          tag_name: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || format('ci-{0}', github.run_number) }}
-          name: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || format('CI build {0}', github.run_number) }}
-          prerelease: ${{ !startsWith(github.ref, 'refs/tags/') }}
+          tag_name: ${{ github.ref_name }}
+          name: ${{ github.ref_name }}
+          prerelease: false
           files: dist/*.apk
           body: |
-            ## MG4Control ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || format('ci-{0}', github.run_number) }}
-
-            Two variants are provided — **pick one**:
-
-            | Variant | File | Network | Auto-update | Target |
-            |---|---|---|---|---|
-            | **Online** | `MG4Control-online-*.apk` | yes | yes | standard use |
-            | **Offline** 🔒 | `MG4Control-offline-*.apk` | none (network perms removed) | no | hardened on-vehicle deployment |
-
-            > The offline APK has a distinct applicationId (`com.mg4.control.offline`) and can coexist with the online one.
+            Stable/offline EVProfile release. This APK contains no updater implementation
+            and declares no network permission. Installation and updates are manual.

.github/workflows/security.yml

@@ -20,8 +20,15 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
+      - uses: actions/setup-java@v4
+        with: { distribution: temurin, java-version: "17" }
+      - uses: gradle/actions/setup-gradle@v4
       - name: Check manifest permissions
-        run: bash .github/security/check-permissions.sh
+        run: |
+          bash .github/security/check-permissions.sh
+          chmod +x gradlew
+          ./gradlew processStableDebugMainManifest processUnstableDebugMainManifest --no-daemon
+          bash .github/security/check-channel-isolation.sh
 
   secrets:
     name: Secret scan (blocking)
@@ -73,7 +80,7 @@ jobs:
         if: always()
         run: |
           {
-            echo "# MG4Control security report"
+            echo "# EVProfile security report"
             echo "_$(date -u)_"
             echo
             echo "## mobsfscan"
@@ -106,7 +113,7 @@ jobs:
         if: ${{ env.NVD_API_KEY != '' }}
         uses: dependency-check/Dependency-Check_Action@main
         with:
-          project: MG4Control
+          project: EVProfile
           path: "."
           format: "SARIF"
           args: --nvdApiKey ${{ env.NVD_API_KEY }}