Android Canary Adds App Lock, Bubbles

🔑 Enhanced Key Takeaways

• •The native App Lock in Build 2603 is built upon the 'Private Space' architecture introduced in Android 15, allowing apps to be fully suspended and their notifications hidden until biometrically authenticated.
• •The updated Bubbles implementation leverages the 'Freeform Window' APIs, enabling any application with a resizable activity to be pinned as a floating overlay, moving beyond the previous restriction to messaging-only apps.
• •Build 2603 introduces a 'Kernel-level Privacy Guard' that prevents memory scraping of locked applications, a security measure designed to protect sensitive data even if the system's user-space is compromised.

🛠️ Technical Deep Dive

• •Integration with the IdentityManager system service allows for granular re-authentication policies, such as 'Lock on App Exit' or 'Lock after Timeout'.
• •Bubbles now utilize the WindowManager's shell transition handlers to allow seamless hand-off between full-screen, split-screen, and floating bubble states.
• •The App Lock feature utilizes File-Based Encryption (FBE) keys that are evicted from memory when the app is locked, requiring a TEE (Trusted Execution Environment) call to restore access.
• •Implementation of AppLockManager API allows developers to opt-out of locking for specific non-sensitive activities within a protected app.

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline