Audit trail for every installed, updated, or removed app, including the source (Play Store, sideload, ADB) and signing certificate. Permission grants and revocations are timestamped per app.
3
Installed 7d
2
Uninstalled 7d
1
Sideloads
Event log
OK31 Dec · 22:10· Cert SHA-256 verified
Installed: NoteHub 2.4.1
Source: Play Store · signed by NoteHub Ltd
Outcome
Installed with minimal permission set (storage scoped).
Warn31 Dec · 17:00· User-initiated
Permission granted: Camera → TikTok
Foreground only
Outcome
Granted via settings. Background access remained denied.
OK30 Dec · 20:48· Cert chain unchanged
Updated: Signal 7.18.2
Source: Play Store
Outcome
Update verified. No new permissions requested.
Threat29 Dec · 18:00· Detected by installer hook
Sideload attempted: free-flashlight.apk
Source: unknown · cert self-signed
Outcome
Install blocked by Lokvault. APK quarantined for review.
OK28 Dec · 14:15· 320 MB freed
Uninstalled: WeatherPro
User-initiated · data wiped
Outcome
All app data and shared prefs purged. No residual permissions.
OK26 Dec · 10:00· Cert SHA-256 verified
Installed: Strava 412.3
Source: Play Store
Outcome
Location 'while in use' granted. Background denied by default.
OK25 Dec · 05:30· Policy: idle-revoke
Permission revoked: Microphone → Facebook
Auto-revoke (unused 90 days)
Outcome
Permission removed. App will need to re-prompt on next use.