Do not describe Salli as production-ready until all applicable gates are closed.

Engineering

  • Complete Flutter suite, analysis, formatting, parser report, and release startup check pass.
  • SQLCipher opens on real Android and iOS hardware.
  • Backup, restore, and delete-all pass atomic and partial-file-failure cases.
  • Release builds contain no debug validation tools or test sender shortcuts.
  • Crash/log review contains no financial plaintext.

SMS evidence

  • 90+ consented, redacted, reviewed real samples across the P0 matrix.
  • Positive fixtures and nearby OTP/promo/decline/pending negatives.
  • No false-positive transaction in the release candidate.
  • Sender and format coverage claims match actual validated evidence.
  • Google Play restricted-SMS permission approval is complete.

Language and accessibility

  • Native Sinhala review.
  • Native Tamil review.
  • Complex-script layout on representative devices.
  • Large-text, TalkBack, VoiceOver, contrast, and touch-target review.
  • Final trilingual public privacy policy.
  • Sri Lankan practitioner review.
  • Data Protection Impact Assessment.
  • Play prominent disclosure and Data Safety form.
  • App Store privacy nutrition label.
  • Breach and support processes.

Store and device operations

  • Publisher accounts and signing ownership.
  • App listings, screenshots, support URL, privacy URL.
  • Physical-iPhone validation.
  • Low-end and old-OS Android matrix.
  • Permission denial/revocation, background, reboot, and upgrade scenarios.

Documentation and support

  • salli-docs.prabhavalabs.com deployed with TLS and canonical URL.
  • Every shipped screen represented in the directory.
  • Installation/distribution instructions updated from beta to store links.
  • Known limitations and bank coverage current.
  • Private security reporting and user-support channels operational.
Phase-complete local implementation is not equivalent to release readiness. Store approval, real bank evidence, native-language review, legal work, and publisher operations remain external gates.