Propose host verification for native activity navigation

.github/workflows/native-activity.yml

@@ -0,0 +1,56 @@
+name: Native activity verification contract
+on:
+  push:
+    branches: [native-activity-verification]
+  pull_request:
+    paths:
+      - 'crates/shell/src/native_activity.rs'
+      - 'tools/check_native_activity.py'
+      - '.github/workflows/native-activity.yml'
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  contract:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-24.04, windows-2025]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - run: rustup toolchain install 1.98.0 --profile minimal
+      - name: Test exact production verification contract
+        env:
+          RUSTUP_TOOLCHAIN: 1.98.0
+        run: python tools/check_native_activity.py
+      - uses: actions/upload-artifact@v4
+        with:
+          name: native-activity-contract-${{ matrix.os }}
+          path: target/native-activity/result.json
+          if-no-files-found: error
+  shell-packagings:
+    runs-on: macos-14
+    timeout-minutes: 90
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Prepare official pinned framework sources
+        run: python3 tools/setup.py
+      - uses: Swatinem/rust-cache@v2
+      - name: Check desktop and Home against the same verification module
+        run: |
+          cargo check --locked -p octosense
+          cargo check --locked -p octosense --features mobile-apps
+          cargo check --locked -p octosense-home --features mobile-apps
+          cargo test --locked -p octosense-shell --features mobile-apps native_activity

README.md

@@ -8,6 +8,8 @@ English | [简体中文](README.zh-CN.md)
 
 [Capabilities and execution boundaries](docs/capabilities.md) explains declaration-only APIs, consent, accounts and app isolation.
 
+[Native activity open proposal](docs/adr/0015-native-activity-open.md) describes the proposed SDK verification seam; production routing is not connected.
+
 **Desktop download:** [OctoSense 0.1.0-rc.2](https://github.com/OctoSense-org/OctoSense/releases/tag/desktop-v0.1.0-rc.2) supports the current App Hub catalog, GitHub-attested app releases and the public host APIs declared by SDK 1.10.0. Choose the asset for your operating system and architecture; the release notes record prerequisites, signing status and platform validation. This desktop release does not update Android Home.
 
 Run the [live Mail → card → Calendar demo](docs/demos/mail-calendar/README.md) with your own mailbox: pinned source, selective policy, fictional test inputs, human draft edits and Calendar navigation.

README.zh-CN.md

@@ -8,6 +8,8 @@
 
 [能力声明与执行边界](docs/capabilities.zh-CN.md)说明声明式 API、用户同意、账户和应用隔离。
 
+[原生活动打开提案](docs/adr/0015-native-activity-open.zh-CN.md)说明拟议的 SDK 核验接口；生产路由尚未接线。
+
 **桌面版下载**：[OctoSense 0.1.0-rc.2](https://github.com/OctoSense-org/OctoSense/releases/tag/desktop-v0.1.0-rc.2) 支持当前的 App Hub 签名目录、带 GitHub 证明的应用 Release 及 SDK 1.10.0 声明的公开宿主 API。请选择与操作系统和架构对应的文件；运行前置条件、签名状态和各平台验收范围见发行说明。此桌面版本不会更新 Android Home。
 
 用自己的邮箱[复现真实邮件 → 卡片 → Calendar 演示](docs/demos/mail-calendar/README.zh-CN.md)：固定源码版本、重要邮件策略、虚构测试输入、人工修改草稿和日历跳转。

crates/shell/src/lib.rs

@@ -57,6 +57,7 @@ pub mod kernel_port;
 pub mod layout;
 pub mod octosense;
 pub mod module_host;
+pub mod native_activity;
 #[cfg(test)]
 mod module_close_tests;
 #[cfg(test)]