Android Full media component: FFmpeg 9.0.2 producer b7b1387

Component prerelease only; not an app release or Latest update.

The AAR is unchanged from the producer: SHA-256 61d49dbf0e87c5478e5bffeb7a719f0dac223b440bcd6c5a5a933432825ce00a, 35,647,148 bytes. It contains the three existing Android ABIs with minSdk 26. The component moves FFmpeg from 8.1.3 to 9.0.2 (commit 946fcce07b6dcd0331c8cc609192aeff5e1924f8) and keeps mpv 0.41.0, mbedTLS 3.6.7 and the reviewed distrust policy. Its accompanying source kit preserves the full captured dependency and publisher sources, source patches, generated FFmpeg configs, actual build recipes and the producer's evidence.

Producer: public commit b7b13871e93c4f5a8c66db27cc2392dabc3da430, Actions run 39618662616, attempt 1, NDK 30.0.16248370. The run passed its own artifact checker (buildExit: 0). That checker is the same reviewed validator (450d2ed1…) that accepted the previous component on reinspection; its per-library results (ELF identity on all thirty libraries, 16 KiB load alignment on the twenty 64-bit ones) are carried into the provenance unchanged. No local reinspection was needed or performed.

This is not a device/playback/JNI or live TLS test, app/seam integration acceptance, Play artifact, or a claim of a reproducible binary rebuild. Packaging requires the exact producer SDK notice inputs and grants no publication approval.

Consume only the declared AAR checksum and publish its source kit, provenance and SHA256SUMS together. Do not replace an earlier vendor asset or reuse an upstream Maven coordinate for these bytes.