diff --git a/.github/workflows/android-release-build.yml b/.github/workflows/android-release-build.yml
index 1128b56b6..deec0ab46 100644
--- a/.github/workflows/android-release-build.yml
+++ b/.github/workflows/android-release-build.yml
@@ -62,6 +62,10 @@ jobs:
 
       - name: Build and Sign Release APKs
         env:
+          # :app:syncNativeArtifacts queries the GitHub API for the pinned binaries
+          # release; unauthenticated it gets HTTP 403 (shared-runner rate limit), so
+          # provide the auto token for the M15 authenticated-retry fallback (build.gradle).
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
diff --git a/.github/workflows/firebase-distribution.yml b/.github/workflows/firebase-distribution.yml
index 1203874da..f744f1370 100644
--- a/.github/workflows/firebase-distribution.yml
+++ b/.github/workflows/firebase-distribution.yml
@@ -148,6 +148,10 @@ jobs:
       # artifacts published to GitHub/R2 (separate workflow); this workflow never runs on tags.
       - name: Build and Sign APK
         env:
+          # :app:syncNativeArtifacts queries the GitHub API for the pinned binaries
+          # release; unauthenticated it gets HTTP 403 (shared-runner rate limit), so
+          # provide the auto token for the M15 authenticated-retry fallback (build.gradle).
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
diff --git a/controller/README.md b/controller/README.md
index ab36711be..6f56ebf03 100644
--- a/controller/README.md
+++ b/controller/README.md
@@ -41,6 +41,6 @@ K2Go is built on top of the **[Termux](https://github.com/termux/termux-app)** p
 
 Our deepest thanks to the **Termux team and contributors** for their foundational work, without which K2Go would not be possible.
 
-## Disclaimer
+## Disclaimer!
 
 **This software is under active development and is provided "as is", without warranty of any kind.** It is intended for research, testing, and educational development. Because it interacts heavily with Android's background services and networking stack, it may behave differently across various device manufacturers (OEMs). It is not yet guaranteed for stable, unattended production deployment. Use at your own risk.
diff --git a/controller/app/src/main/java/org/iiab/controller/redesign/LibraryHomeFragment.java b/controller/app/src/main/java/org/iiab/controller/redesign/LibraryHomeFragment.java
index a82883775..158a41d54 100644
--- a/controller/app/src/main/java/org/iiab/controller/redesign/LibraryHomeFragment.java
+++ b/controller/app/src/main/java/org/iiab/controller/redesign/LibraryHomeFragment.java
@@ -254,3 +254,5 @@ private static int probe(String endpoint) {
         }
     }
 }
+
+// CI test (ADFA-4812): a push to a non-main branch is built and distributed to Firebase — validates ADFA-4810. Throwaway; do not merge.