EV-signed releases. Threat-modelled surfaces. Built to the standard that Nova Launcher left behind — by a UK-registered company, not a hobbyist side project.
Lark is governed by a documented methodology — SGIA, Security-Governed Incremental Architecture. Threat surfaces are mapped before features are written. Invariants are codified, not negotiated. AI-assisted development operates under strict human authority with confirmation gates on every change.
Icon pack loading, widget hosting, IPC, app shortcuts, storage — each analysed and controlled before implementation.
EV-signed APK/AAB artefacts, built from tagged commits by CI. No unsigned builds, no mystery origins, no debug builds in production.
No speculative permissions. Each grant is justified against a concrete, shipped feature — and auditable in the manifest.
Entire release cycles devoted solely to hardening. Security items are locked scope — numbered, tracked, and delivered alongside features.
Code is written with AI assistance under a confirmation-gate contract. No autonomous commits, no silent changes, no drift.
A home screen launcher touches almost every app on the device. We documented the threat surface explicitly before writing a line of production code — because a launcher you trust is a launcher whose compromises are understood.
Most Android launchers are single-developer side projects — useful, but with no verified publisher, no code-signing chain, and no governance around the code you trust with every app on your phone. Lark is built to a different bar.
Fast, customisable, quiet. The features you expect from a flagship launcher — engineered on an architecture that won't regress the moment the company behind it pivots.
Your home screen is a contract. It persists across restarts, crashes and OS upgrades — backed by Room with graceful recovery on corruption.
Icon loading, app queries, database work — all off the main thread. Zero tolerance for jank on 60 Hz or 120 Hz displays.
No telemetry, no analytics pipelines. Internal storage only. Minimal permissions — nothing speculative, nothing "just in case".
Signature-verified icon pack loading. Malicious APKs masquerading as icon packs can't gain a foothold in your launcher process.
Widget apps run behind AppWidgetHost sandboxing with provider validation. A broken widget can never crash the launcher.
Every release reproducible from a Git tag. Every change reviewed. No bulk commits, no surprise refactors — release discipline is a feature.
Join the waitlist for beta releases, build notes, and the occasional architecture write-up. No marketing spam. No third-party trackers.