lint.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--
  Lint severity policy.

  Baseline policy (see scripts/check-lint-baseline.sh): app/lint-baseline.xml records
  pre-existing findings so the gate is green today; it may only SHRINK over time.
  New lint errors must be FIXED, never added to the baseline. The guard job fails if
  the baseline issue count grows versus main.

  The security-relevant ids below are deliberately NOT ignored:
    - TrustAllX509TrustManager: for a privacy/proxy app an all-trusting
      X509TrustManager in APP code (not the proxied tunnel) is a real MITM vector.
      App code has none today (grep: no X509TrustManager/checkServerTrusted), so it
      is promoted to `error` to fail-fast if one is ever introduced. Must never regress.
    - RestrictedApi: kept visible at `warning` so misuse of @RestrictedApi internals
      (which can break across library versions) is surfaced, not hidden.
  The remaining ignores are intentional cosmetic/i18n noise suppression.
-->
<lint>
    <issue id="UnusedAttribute" severity="ignore" />
    <issue id="UnknownNullness" severity="ignore" />
    <issue id="DiscouragedPrivateApi" severity="ignore" />
    <issue id="Typos" severity="ignore" />
    <issue id="RtlSymmetry" severity="ignore" />
    <issue id="ContentDescription" severity="ignore" />
    <issue id="UnusedResources" severity="ignore" />
    <issue id="VectorRaster" severity="ignore" />
    <issue id="PrivateResource" severity="ignore" />

    <issue id="Untranslatable" severity="ignore" />
    <issue id="PluralsCandidate" severity="ignore" />
    <issue id="TypographyQuotes" severity="ignore" />
    <issue id="DuplicateStrings" severity="ignore" />
    <issue id="ImpliedQuantity" severity="ignore" />
    <issue id="MissingQuantity" severity="ignore" />

    <issue id="SelectableText" severity="ignore" />
    <issue id="InsecureBaseConfiguration" severity="ignore" />
    <issue id="NotifyDataSetChanged" severity="ignore" />
    <issue id="UselessParent" severity="ignore" />
    <issue id="SyntheticAccessor" severity="ignore" />
    <issue id="UselessLeaf" severity="ignore" />
    <issue id="UnusedIds" severity="ignore" />
    <issue id="ConvertToWebp" severity="ignore" />
    <issue id="SetTextI18n" severity="ignore" />
    <issue id="HardcodedText" severity="ignore" />
    <issue id="RtlHardcoded" severity="ignore" />
    <issue id="MissingTranslation" severity="ignore" />
    <issue id="ExtraTranslation" severity="ignore" />
    <issue id="RestrictedApi" severity="warning" />

    <issue id="InvalidPackage" severity="ignore" />
    <issue id="TrustAllX509TrustManager" severity="error" />
</lint>