AgentStack
SKILL verified MIT Self-run

Shipping And Launch

skill-guillemroca-agent-skills-android-shipping-and-launch · by GuillemRoca

>-

No reviews yet
0 installs
3 views
0.0% view→install

Install

$ agentstack add skill-guillemroca-agent-skills-android-shipping-and-launch

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Shipping And Launch? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Shipping and Launch

Overview

"Ship with confidence. Deploy safely, with monitoring, rollback plan ready." Shipping isn't just uploading an AAB — it's verifying that everything is production-ready, staging the rollout, monitoring for issues, and having a rollback plan if things go wrong.

When to Use

  • Before any release to Play Store (internal, alpha, beta, production)
  • Before any release via Firebase App Distribution
  • When promoting from one release track to another
  • After a hotfix that needs expedited release

Skip when: Not releasing (local development only).

Core Process

Step 1: Pre-Launch Checklist

  1. Code Quality:
# All tests pass
./gradlew test
./gradlew connectedAndroidTest

# Build succeeds
./gradlew bundleRelease

# No lint errors
./gradlew lint

# Formatting is consistent
./gradlew spotlessCheck

# Static analysis passes
./gradlew detekt
  1. Manual code checks:
  • [ ] No TODO or FIXME without issue references
  • [ ] No Log.d() or Log.v() calls in production code (use ProGuard to strip)
  • [ ] No hardcoded strings in UI (use stringResource)
  • [ ] No BuildConfig.DEBUG-gated features shipping to production
  • [ ] Feature flags for incomplete features are OFF
  1. Security (see security-and-hardening):
  • [ ] No secrets in source code
  • [ ] Network Security Config enforces HTTPS
  • [ ] Certificate pinning configured
  • [ ] ProGuard/R8 enabled for release build
  • [ ] android:debuggable not set in release manifest
  • [ ] Dependency vulnerability scan clean
  1. Performance (see performance-optimization):
  • [ ] Android Vitals targets met (startup = 48dp
  • [ ] Color contrast meets standards
  • [ ] Content descriptions on all meaningful elements
  1. Infrastructure:
  • [ ] Signing configuration correct (release keystore)
  • [ ] Environment-specific configs correct (API URLs, feature flags)
  • [ ] Crashlytics/error monitoring configured
  • [ ] Firebase Performance Monitoring enabled
  • [ ] Analytics events verified
  1. Documentation:
  • [ ] Release notes written
  • [ ] Play Store listing updated (screenshots, description)
  • [ ] ADRs written for significant changes
  • [ ] Internal changelog updated

Step 2: Staged Rollout

  1. Rollout progression:
Internal Testing (Play Store internal track)
  → Verified by team
    ↓
Closed Alpha (Play Store alpha track)
  → Verified by internal testers + QA
    ↓
Open Beta (Play Store beta track)
  → Verified by beta users (wider audience)
    ↓
Production (staged rollout)
  → 1% → 5% → 25% → 50% → 100%
  1. Staged rollout with Play Store:
Day 0: Release to 1% of users
  → Monitor Crashlytics, ANR rate, user feedback
Day 1: If clean → expand to 5%
  → Check Play Console Android Vitals
Day 3: If clean → expand to 25%
  → Review user reviews and ratings
Day 5: If clean → expand to 50%
Day 7: If clean → expand to 100%
  1. Decision thresholds:

| Metric | Action | |--------|--------| | Crash rate > 2x previous version | Halt rollout, investigate | | ANR rate > 0.47% | Halt rollout, investigate | | Negative reviews spike > 2x | Halt rollout, investigate | | Error rate > 0.1% new errors | Investigate, consider halt | | Startup time regression > 20% | Investigate, consider halt |

Step 3: Feature Flag Management

  1. Feature flag lifecycle:
Created (disabled) → Enabled (internal) → Canary (5%) →
Expanded (25%) → Full (100%) → Removed (cleanup)
  1. Before shipping:
  • Verify all feature flags are in expected state
  • Remove flags for fully-rolled-out features (tech debt)
  • Document flag state in release notes

Step 4: Rollback Plan

  1. Always have a rollback strategy:
## Rollback Plan

### Option 1: Halt Staged Rollout
- In Play Console → Release → Production → Halt rollout
- Users who haven't updated keep the old version
- Already-updated users keep the new version (no downgrade)

### Option 2: Emergency Hotfix
- Create `hotfix/1.2.1` branch from `release/1.2.0`
- Apply minimal fix
- Fast-track through CI → Internal → Production (100%)

### Option 3: Feature Flag Kill Switch
- Disable the problematic feature via Firebase Remote Config
- Users get the update but broken feature is hidden
- Fastest response time (no new build needed)

Step 5: Post-Launch Monitoring

  1. First 24 hours after launch:
  • [ ] Crashlytics — new crash types?
  • [ ] ANR rate — within threshold?
  • [ ] Firebase Performance — startup time, network latency?
  • [ ] Play Console — user reviews, ratings?
  • [ ] Error monitoring — new error patterns?
  • [ ] Critical user flows — working end-to-end?
  1. First 7 days:
  • [ ] Android Vitals in Play Console — all green?
  • [ ] Staged rollout expanded on schedule?
  • [ ] Feature flag cleanup scheduled?
  • [ ] Retro/post-mortem if issues occurred

Step 6: Play Store Requirements

  1. Play Store checklist:
  • [ ] Target SDK meets Play Store requirements (the latest stable API level — new apps and updates must target API 36+ from Aug 31, 2026; check the current deadline at developer.android.com/google/play/requirements/target-sdk)
  • [ ] 16 KB page-size compliance verified if the app ships native libraries (required since Nov 2025 for apps targeting Android 15+; needs NDK r28+ / AGP 8.5.1+)
  • [ ] Edge-to-edge rendering verified (enforced for apps targeting Android 15+; no statusBarColor/navigationBarColor reliance)
  • [ ] Privacy policy URL set
  • [ ] Data safety form completed
  • [ ] Content rating questionnaire completed
  • [ ] App signing by Google Play enabled
  • [ ] AAB format (not APK) for new apps
  • [ ] Deobfuscation mapping file uploaded (R8/ProGuard)
  • [ ] Release notes in all supported languages

Common Rationalizations

| Shortcut | Why It Fails | |----------|-------------| | "We'll skip staged rollout, the tests pass" | Tests don't catch device-specific bugs, carrier issues, or user-facing performance. | | "Rollback plan isn't needed, it's a small change" | Small changes can have outsized impact. A 1-line change can cause a crash. | | "We'll monitor tomorrow" | The first few hours are critical. Issues compound overnight. | | "Let's ship 100% — we're confident" | Confidence without staged rollout is hope, not engineering. |

Red Flags

  • No staged rollout (0% to 100% in one step)
  • No rollback plan documented
  • No monitoring configured before launch
  • Log.d calls in release builds
  • Hardcoded debug URLs shipping to production
  • Feature flags in unknown state
  • No Play Store compliance check
  • Missing deobfuscation mapping file upload
  • Launching on Friday (no monitoring over weekend)

Verification

  • [ ] Pre-launch checklist complete (quality, security, performance, accessibility)
  • [ ] Release build signed with production keystore
  • [ ] Staged rollout plan defined
  • [ ] Rollback strategy documented
  • [ ] Monitoring configured (Crashlytics, Performance, Analytics)
  • [ ] Play Store requirements met
  • [ ] Release notes written
  • [ ] Team aware of launch timeline
  • [ ] Post-launch monitoring plan in place

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.