Comprehensive Combinations Matrix
TkushPatch is engineered to accommodate diverse runtime environments, processor instruction sets, institutional compliance baselines, and network topologies.
This document details all supported operational combinations and system behaviors across the platform.
1. Operating Systems and CPU Architectures Matrix
The differential compiler compiles and validates patches across each target architecture without compromise:
| Target OS | CPU Architecture | Release Format | Diff Engine | Support Status | Operational Notes |
|---|---|---|---|---|---|
| Android | arm64-v8a (64-bit) | APK / AAB | compressed binary diff | ✅ Production | Standard architecture for modern Android smartphones (90%+ of fleet). |
| Android | armeabi-v7a (32-bit) | APK / AAB | compressed binary diff | ✅ Production | Essential for emerging markets and low-end hardware fleets. |
| Android | x86_64 | APK | compressed binary diff | 🧪 Dev / Test | Used for local development emulators and automated CI test runners. |
| iOS | arm64 | IPA / Archive | compressed binary diff | ✅ Production | Supports physical iPhone and iPad hardware on iOS 12+. |
| iOS Simulator | arm64 / x86_64 | Runner.app | Interpreted | 🧪 Dev / Test | Local testing support on Apple Silicon and Intel macOS hosts. |
2. Deployment Tracks and Release Mechanics Matrix
| Track | Target Audience | Security Policies | Typical Strategy | Promotion Mechanics |
|---|---|---|---|---|
dev | Internal Dev Team | Solo Mode or Fast-track | Immediate download, any network | Direct upload via CLI (--track=dev) |
staging | QA and Acceptance Teams | Guarded by QA Device Whitelist (allowedClientIds) | Forced or silent, Wi-Fi or Cellular | Direct CLI (--track=staging) or promote from dev |
stable | Public Production Fleet | Store Review Shield + Mandatory Four-Eyes | Progressive Canary (10% $\rightarrow$ 100%) + Geo-filters | 1-Click zero-recompile promotion from staging |
Custom Track (e.g. vip) | Pilot Users, Field Branches | Configured per organizational rules | Cellular or Wi-Fi targeted | 1-Click promotion or direct publication |
3. Governance Policies and Four-Eyes Dual-Control Matrix
| Governance Policy | Member Headcount | Maker-Checker Gate | Cryptographic Signing Key | Generated Audit Footprint |
|---|---|---|---|---|
| Solo Tenant (Startups) | 1 user | Derogation (Self-approval allowed) | Environment RSA Key | Event logged as PATCH_APPROVED_SOLO_OVERRIDE |
| Standard Enterprise | $\ge 2$ members | Strictly enforced (author != approver) | Isolated Environment Key | Certified PATCH_APPROVED event with distinct Checker ID |
| Hardened Banking | Any headcount | Mandatory CISO sign-off + 2FA OTP Challenge | Dedicated HSM / secure signing service RSA-4096 | Full audit trail + Certified regulatory PDF package |
4. Network Update Policies and Rollout Strategy Matrix
| Strategy | Network Trigger | User Experience | Recommended Context |
|---|---|---|---|
| Silent Background | Any available network (Cellular or Wi-Fi) | Invisible: background download, applied on subsequent cold boot. | Non-breaking visual tweaks, copy changes, minor fixes. |
| Wi-Fi Only | Unmetered Wi-Fi connection required | Download pauses while device is on 3G/4G/5G cellular data. | Conserving mobile data plans for asset-heavy patches. |
| Forced (Blocking Modal) | Any available connection | Full-screen blocking dialog preventing app use until restarted. | Critical zero-day vulnerability, breaking API change, financial math bugs. |
| Geo-Targeting | Filtered by ISO country code (e.g. CM, CI) | Patch is served solely to verified IP / SIM origins. | Region-specific regulatory pilots or staged territorial rollouts. |
| Progressive Canary | Fleet percentage ratio (0% to 100%) | Only a deterministic random subset of devices receives the patch. | Load testing and production crash-rate validation. |
5. Field-Validated Production Combinations
| ID | System & ABI | Track | Governance | Network Strategy | Operational Outcome |
|---|---|---|---|---|---|
| C1 | Android arm64-v8a | stable | Strict Four-Eyes | Canary 10% + CM/CI Filter | High-assurance progressive deployment for mobile banking. |
| C2 | Android armeabi-v7a | stable | Strict Four-Eyes | Wi-Fi Only | Bandwidth conservation on entry-level Android handsets. |
| C3 | iOS arm64 | staging | Maker-Checker | QA Device Whitelist | Secured internal acceptance testing on QA iPhones before prod. |
| C4 | Android + iOS | dev | Solo Mode | Silent | Rapid iteration and automated regression testing in CI pipelines. |
| C5 | Android + iOS | stable | Hardened Four-Eyes | Forced + Armed Kill-Switch | Zero-day critical emergency patch deployed across entire fleet. |