diff --git a/docs/fdroid/org.comunes.tane.yml b/docs/fdroid/org.comunes.tane.yml
index c3891e8..2046fca 100644
--- a/docs/fdroid/org.comunes.tane.yml
+++ b/docs/fdroid/org.comunes.tane.yml
@@ -15,19 +15,14 @@ AutoName: Tane
 RepoType: git
 Repo: https://git.comunes.org/comunes/tane.git
 
-# Reproducible, developer-signed: F-Droid rebuilds each split and, if it matches
-# our own signed APK on the git.comunes.org release byte-for-byte, publishes OUR
-# APK (same signature as the Play build). Value is the SHA-256 of the tane-upload
-# signing certificate (public).
-AllowedAPKSigningKeys: ddfae432091b8248a8a4a1b353487fa626301f4357ef835e94ec312f69418e38
-
 Builds:
   - versionName: 0.1.15
     versionCode: 171
-    commit: v0.1.15
+    commit: f04dd3da1a3993c5a8f3222544f75b979d2c7f9d
     subdir: apps/app_seeds
     output: build/app/outputs/flutter-apk/app-armeabi-v7a-release.apk
-    binary: https://git.comunes.org/comunes/tane/releases/download/v%v/app-armeabi-v7a-release.apk
+    binary:
+      https://git.comunes.org/comunes/tane/releases/download/v%v/app-armeabi-v7a-release.apk
     srclibs:
       - flutter@stable
       - tesseract4android@4.9.0
@@ -40,9 +35,9 @@ Builds:
       - export PUB_CACHE=$(pwd)/.pub-cache
       - $$flutter$$/bin/flutter config --no-analytics
       - $$flutter$$/bin/flutter pub get --enforce-lockfile
-      - "sed -i '/^buildscript {/,/^}/d' $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-*/android/build.gradle"
-      - 'echo "org.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=1g" >> apps/app_seeds/android/gradle.properties'
-      - 'echo "org.gradle.daemon=false" >> apps/app_seeds/android/gradle.properties'
+      - sed -i '/^buildscript {/,/^}/d' $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-*/android/build.gradle
+      - echo "org.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=1g" >> apps/app_seeds/android/gradle.properties
+      - echo "org.gradle.daemon=false" >> apps/app_seeds/android/gradle.properties
       - cd apps/app_seeds
       - $$flutter$$/bin/dart run slang
       - $$flutter$$/bin/dart run build_runner build --delete-conflicting-outputs
@@ -53,17 +48,18 @@ Builds:
       - pushd $$tesseract4android$$/tesseract4android
       - gradle --no-daemon assembleStandardRelease
       - popd
-      - cp 
+      - cp
         $$tesseract4android$$/tesseract4android/build/outputs/aar/tesseract4android-standard-release.aar
         $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-0.4.31/android/libs/tesseract4android-release.aar
       - $$flutter$$/bin/flutter build apk --release --split-per-abi --target-platform=android-arm
 
   - versionName: 0.1.15
     versionCode: 172
-    commit: v0.1.15
+    commit: f04dd3da1a3993c5a8f3222544f75b979d2c7f9d
     subdir: apps/app_seeds
     output: build/app/outputs/flutter-apk/app-arm64-v8a-release.apk
-    binary: https://git.comunes.org/comunes/tane/releases/download/v%v/app-arm64-v8a-release.apk
+    binary:
+      https://git.comunes.org/comunes/tane/releases/download/v%v/app-arm64-v8a-release.apk
     srclibs:
       - flutter@stable
       - tesseract4android@4.9.0
@@ -76,9 +72,9 @@ Builds:
       - export PUB_CACHE=$(pwd)/.pub-cache
       - $$flutter$$/bin/flutter config --no-analytics
       - $$flutter$$/bin/flutter pub get --enforce-lockfile
-      - "sed -i '/^buildscript {/,/^}/d' $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-*/android/build.gradle"
-      - 'echo "org.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=1g" >> apps/app_seeds/android/gradle.properties'
-      - 'echo "org.gradle.daemon=false" >> apps/app_seeds/android/gradle.properties'
+      - sed -i '/^buildscript {/,/^}/d' $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-*/android/build.gradle
+      - echo "org.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=1g" >> apps/app_seeds/android/gradle.properties
+      - echo "org.gradle.daemon=false" >> apps/app_seeds/android/gradle.properties
       - cd apps/app_seeds
       - $$flutter$$/bin/dart run slang
       - $$flutter$$/bin/dart run build_runner build --delete-conflicting-outputs
@@ -89,17 +85,18 @@ Builds:
       - pushd $$tesseract4android$$/tesseract4android
       - gradle --no-daemon assembleStandardRelease
       - popd
-      - cp 
+      - cp
         $$tesseract4android$$/tesseract4android/build/outputs/aar/tesseract4android-standard-release.aar
         $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-0.4.31/android/libs/tesseract4android-release.aar
       - $$flutter$$/bin/flutter build apk --release --split-per-abi --target-platform=android-arm64
 
   - versionName: 0.1.15
     versionCode: 173
-    commit: v0.1.15
+    commit: f04dd3da1a3993c5a8f3222544f75b979d2c7f9d
     subdir: apps/app_seeds
     output: build/app/outputs/flutter-apk/app-x86_64-release.apk
-    binary: https://git.comunes.org/comunes/tane/releases/download/v%v/app-x86_64-release.apk
+    binary:
+      https://git.comunes.org/comunes/tane/releases/download/v%v/app-x86_64-release.apk
     srclibs:
       - flutter@stable
       - tesseract4android@4.9.0
@@ -112,9 +109,9 @@ Builds:
       - export PUB_CACHE=$(pwd)/.pub-cache
       - $$flutter$$/bin/flutter config --no-analytics
       - $$flutter$$/bin/flutter pub get --enforce-lockfile
-      - "sed -i '/^buildscript {/,/^}/d' $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-*/android/build.gradle"
-      - 'echo "org.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=1g" >> apps/app_seeds/android/gradle.properties'
-      - 'echo "org.gradle.daemon=false" >> apps/app_seeds/android/gradle.properties'
+      - sed -i '/^buildscript {/,/^}/d' $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-*/android/build.gradle
+      - echo "org.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=1g" >> apps/app_seeds/android/gradle.properties
+      - echo "org.gradle.daemon=false" >> apps/app_seeds/android/gradle.properties
       - cd apps/app_seeds
       - $$flutter$$/bin/dart run slang
       - $$flutter$$/bin/dart run build_runner build --delete-conflicting-outputs
@@ -125,18 +122,26 @@ Builds:
       - pushd $$tesseract4android$$/tesseract4android
       - gradle --no-daemon assembleStandardRelease
       - popd
-      - cp 
+      - cp
         $$tesseract4android$$/tesseract4android/build/outputs/aar/tesseract4android-standard-release.aar
         $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-0.4.31/android/libs/tesseract4android-release.aar
       - $$flutter$$/bin/flutter build apk --release --split-per-abi --target-platform=android-x64
 
+# Reproducible, developer-signed: F-Droid rebuilds each split and, if it matches
+# our own signed APK on the git.comunes.org release byte-for-byte, publishes OUR
+# APK (same signature as the Play build). Value is the SHA-256 of the tane-upload
+# signing certificate (public).
+# Note: `commit:` must be a full commit hash (not a tag) per F-Droid review;
+# f04dd3da1a3993c5a8f3222544f75b979d2c7f9d is the commit tag v0.1.15 points to.
+AllowedAPKSigningKeys: ddfae432091b8248a8a4a1b353487fa626301f4357ef835e94ec312f69418e38
+
 AutoUpdateMode: Version
 UpdateCheckMode: Tags v[\d.]+
 VercodeOperation:
   - '%c * 10 + 1'
   - '%c * 10 + 2'
   - '%c * 10 + 3'
-UpdateCheckData: 
+UpdateCheckData:
   apps/app_seeds/pubspec.yaml|version:\s*[\d.]+\+(\d+)|apps/app_seeds/pubspec.yaml|version:\s*([\d.]+)\+
 CurrentVersion: 0.1.15
 CurrentVersionCode: 173