title: Checking app release signature at runtime -- chicken and egg?
body: <p>I'm trying check my app's release signature at runtime to prevent tampering.  However, what I've been reading is that I need to log the signature during a run so that I can hard code it into my app for runtime comparison.  But I see two problems with this:
  1) The signature obtained while debugging (reading the log) will be different than the release signature.
  2) If I get the release signature and then put it into my code for runtime comparison, won't that change the signature for the next release build... hence a chicken and egg problem?
  What am I missing?  Do static final strings not change the signature?  Likewise, if I log release output does the log code not change the signature? What does and doesn't impact the release signature?</p>