# Android Pro Rollout Plan Index

**Goal:** Ship Android `1.0.0` as a free app with every Codex remote feature available to one
execution account and a `₩9,900` non-consumable Pro purchase that raises the limit to five.

## Dependency order

1. [Local entitlement and enforcement](2026-08-01-pro-local-entitlement.md)
2. [Cloud purchase verifier](2026-08-01-pro-verifier.md)
3. [Android Billing and purchase UI](2026-08-01-pro-android-billing.md)
4. [Policy, website, and release](2026-08-01-pro-policy-release.md)

Plans 1 and 2 may be implemented independently. Plan 3 starts after their public interfaces are
stable. Plan 4 updates public claims only after the behavior exists, then performs the integrated
release gate.

## Fixed product contract

- Free includes all official Codex remote features and one configured execution account.
- Pro permits at most five configured execution accounts; `historyOnly` sources do not count.
- Product ID is `pro_multi_account`; launch price is `₩9,900`; purchase type is non-consumable.
- There is no Code Remote account, Google Sign-In, subscription, or Windows purchase.
- Purchase restoration uses the Play account on the Android device.
- A signed entitlement lasts 30 days and has a 7-day verifier-outage grace period.
- Refund or revocation stops future certificates. It never deletes accounts, chats, or history.
- Purchase tokens remain native or verifier-side and never enter the PWA JavaScript or local backend.

## Release boundary

Implementation and local verification are authorized. Cloud deployment, Play Console changes,
merchant activation, signing, store submission, production purchase, refund, and public website
deployment each require explicit operator approval at the step where they would occur.
