<?xml version="1.0" encoding="utf-8"?>
<!--
  Cleartext HTTP is a debug-only affordance: the local admin panel runs on
  http://10.0.2.2:8000 and a LAN IP has no certificate either.

  The main manifest says `false`, so a release build cannot send a bearer token or a withdrawal
  request over plain HTTP even if someone points `cashloop.apiBaseUrl` at an http:// origin by
  mistake. That is the whole reason the flag lives here rather than in the shared manifest.
-->
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
    xmlns:tools="http://schemas.android.com/tools">

    <application
        android:usesCleartextTraffic="true"
        tools:replace="android:usesCleartextTraffic" />
</manifest>
