cargo-ndk builds libcertgen.so for arm64-v8a during prepareModuleFiles. AGP mergeJniLibFolders picks up jniLibs/ and routes through stripped_native_libs into the module ZIP. customize.sh extracts the .so on device install. ProGuard keeps NativeCertGen JNI class and CertGenConfig fields for runtime JNI field access.