Android Backend Runtime

Android Backend Runtime An architecture diagram generated by Archify. Master Token · durable gpsoauth input · Architecture component · profile-owned Master Token durable gpsoauth input profile-owned BearerProvider · AndroidRuntime field · AndroidRuntime bundle · generation fenced BearerProvider AndroidRuntime field generation fenced Retry Policy · _android/retry_policy.py · Architecture component · total method manifest Retry Policy _android/retry_policy.py total method manifest NotebookLMClient · backend=android · Architecture component · conditional graph NotebookLMClient backend=android conditional graph Android APIs · eleven namespaces + raw · Architecture component · shared base workflows Android APIs eleven namespaces + raw shared base workflows AndroidRuntime · bearer · session · transfer · AndroidRuntime bundle · upload · assets · phenotype AndroidRuntime bearer · session · transfer upload · assets · phenotype AndroidSession · lazy TLS channel · AndroidRuntime bundle · supervised unary · stream AndroidSession lazy TLS channel supervised unary · stream NotebookLM PA · notebooklm-pa.googleapis.com · Architecture component NotebookLM PA notebooklm-pa.googleapis.com Workflow Epoch · _android/epoch.py · Architecture component · session-tagged ContextVar Workflow Epoch _android/epoch.py session-tagged ContextVar Neutral Guard Plane · _artifact/_guarded_transfer.py · AndroidRuntime bundle · per-URL fence Neutral Guard Plane _artifact/_guarded_transfer.py per-URL fence HTTPS Data Plane · Scotty · Drive · assets · AndroidRuntime bundle · dedicated clients HTTPS Data Plane Scotty · Drive · assets dedicated clients Asset Hosts · lh3 · usercontent · Architecture component Asset Hosts lh3 · usercontent installs uses gRPC TLS gpsoauth mint Authorization replay ceiling bind scope inherited fence asset policy guarded transfer HTTPS 401 → invalidate generation AndroidRuntime bundle Legend Backend Cloud Security

AndroidRuntime

  • • The bundle owns bearer_provider, session, upload_pipeline, asset_downloads and Phenotype
  • • The gRPC channel opens lazily and participates in the neutral root lifecycle
  • • The evidence profile still pins the app version, package and user agents

Scopes and retry

  • • epoch.py carries one session-tagged workflow epoch through nested namespace calls
  • • retry_policy.py keeps typed call declarations equal to the total replay manifest
  • • Safe unary calls share bounded auth, rate-limit and server-error retry behavior with Web

Credential-safe assets

  • • Asset download uses the neutral guarded-transfer plane with a sticky async CredentialPolicy
  • • A mid-chain 401 or 403 raises AuthError and invalidates only the observed bearer generation
  • • Every redirect hop clears ambient cookies and re-evaluates whether bearer auth is allowed