Install

Two ways.

Chrome Install, or download a launcher for this machine. Same origin. Keys stay here.

Chrome

Install from the browser.

Mirror

Download Windows app.

A launcher. Opens a Chrome or Edge app window. Pin it to the taskbar.

Also for other machines:

Publisher seal

RSA-2048. SHA-256 of the certificate.

Windows .exe and Android .apk are signed with this self-issued code-signing certificate. CN=Aethelos Command, O=Aethelos, OU=Sovereign Command, C=US. Compare this fingerprint before you trust a copy.

04:33:A2:01:75:C5:17:E3:01:5A:C7:C5:48:E8:47:D2:AF:66:CF:4A:7A:AD:5A:28:17:6B:C3:8A:34:69:DB:BB

Play Store and desktop kit

Google Play is a Trusted Web Activity around this same URL — not a second WebView. Paste the Play signing SHA-256, then host the generated file at /.well-known/assetlinks.json.

Privacy Guard on an always-on node stays the hub. This does not replace Termux bundles and does not crawl other machines.