# Pororoca OTA

> Signed over-the-air native UI documents for SwiftUI and Jetpack Compose. Native code keeps control of state, actions, billing, authentication, navigation, and data access.

Production: https://pororoca-ota.fly.dev
Dashboard: https://pororoca-ota.fly.dev/dashboard

## Documentation

- Start here: https://pororoca-ota.fly.dev/docs
- Publisher and CI: https://pororoca-ota.fly.dev/docs/publisher
- SwiftUI integration: https://pororoca-ota.fly.dev/docs/swiftui
- Jetpack Compose integration: https://pororoca-ota.fly.dev/docs/compose
- MCP setup: https://pororoca-ota.fly.dev/docs/mcp
- Production operations: https://pororoca-ota.fly.dev/docs/operations
- Agent setup and prompt: https://pororoca-ota.fly.dev/docs/agents
- Complete machine-readable runbook: https://pororoca-ota.fly.dev/llms-full.txt

## Non-negotiable boundaries

- Mobile apps receive only an app-scoped runtime identifier and Ed25519 public key.
- CI/MCP receive an app-scoped, 90-day delivery token. CI alone receives the private signing key.
- Every updatable screen ships with a compiled embedded fallback.
- Documents control presentation; compiled native handlers own side effects.
- Validate and test before publishing. Start a new production rollout at 10%.
- Require explicit human approval for publish, rollout change, rollback, or token revocation.