CallerValidator

```
public class CallerValidator

                    
```
Enterprise-grade Dual-Layer Caller Verification Engine.
Enforces:
- Runtime Binder UID verification and package identity resolution.
- Package namespace restriction (strictly com.tzsmm.*).
- Step 1: Signature matching via PackageManager.checkSignatures.
- Step 2: Cryptographic SHA-256 Certificate Fingerprint Pinning against obfuscated production release keys.

Field Summary

Fields
Modifier and Type	Field	Description
`public final static CallerValidator`	`INSTANCE`

Method Summary

Modifier and Type	Method	Description
`final String`	`validateCallingUid(Context context, Integer callingUid)`	Validates an IPC caller from Binder context.
`final Boolean`	`validatePackage(Context context, String targetPackage)`	Validates a specific package by name.
`final Boolean`	`isPackageAuthorized(Context context, String targetPackage)`	Executes dual-layer signature and fingerprint verification.
`final String`	`getPackageCertFingerprint(PackageManager pm, String packageName)`	Extracts and computes the SHA-256 fingerprint of an APK's signing certificate.

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- Method Detail
  - validateCallingUid
```
 final String validateCallingUid(Context context, Integer callingUid)
```
    Validates an IPC caller from Binder context.
    
    Parameters:
    
    context - Application context.
    
    callingUid - Calling UID obtained from Binder.getCallingUid().
  - validatePackage
```
 final Boolean validatePackage(Context context, String targetPackage)
```
    Validates a specific package by name.
  - isPackageAuthorized
```
 final Boolean isPackageAuthorized(Context context, String targetPackage)
```
    Executes dual-layer signature and fingerprint verification.
  - getPackageCertFingerprint
```
 final String getPackageCertFingerprint(PackageManager pm, String packageName)
```
    Extracts and computes the SHA-256 fingerprint of an APK's signing certificate.