Tracks and gates
Use internal → closed → open testing tracks with clear entry criteria. “Ship Friday” is a policy problem, not a courage problem.
Define crash-free sessions and ANR budgets; block promotion when telemetry crosses the line.
Store compliance as part of CI
Privacy manifests, permission strings, and data safety forms should be reviewed like code—before the upload, not after rejection.