)]}'
{
  "commit": "a712c9468e47fba7280200f5d7f31f543b597fb4",
  "tree": "d27aedc000088e2fbacb7e272c358085e88c6ed8",
  "parents": [
    "e19b2b745a3fdf6d74d0f03f936406cce3e5286d"
  ],
  "author": {
    "name": "Himanshu Arora",
    "email": "hmarora@google.com",
    "time": "Tue Mar 10 22:19:40 2026 +0000"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Apr 09 14:00:08 2026 -0700"
  },
  "message": "Use signature-based trust for package name overrides\n\nShift the trust model for EXTRA_PACKAGE_NAME overrides from installation status (FLAG_SYSTEM) to cryptographic signatures. Only packages signed with core system certificates are now\npermitted to override the calling package name.\n\nBug: 424853397\nBug: 397217317\nFlag: EXEMPT Bugfix\nTest: manual\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:ee963723e2af613e66a05eb3a0dca64f0d6d787f\nMerged-In: I0c337720e42f6492573d261ae66fa88c511cd99e\nChange-Id: I0c337720e42f6492573d261ae66fa88c511cd99e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9f328be6995add615c932b2f17240a3fbf43596e",
      "old_mode": 33188,
      "old_path": "src/com/android/documentsui/base/Shared.java",
      "new_id": "f691229ab4487307f2f26b20c8186d5c612f72ea",
      "new_mode": 33188,
      "new_path": "src/com/android/documentsui/base/Shared.java"
    }
  ]
}