AndroidManifest.xml analysis of an APK: targetSdk, compileSdk, debuggable, cleartext traffic, backup, sharedUserId, defined permissions, uses-feature, uses-library, exported components without a permission guard, and the native library inventory per CPU architecture. Keyless pay-per-call in USDC on Base or Solana: no account or API key.