Best Practices

1. Initialize the SDK as early as possible.
2. Never ignore flagged or untrusted states in sensitive flows.
3. Prefer graceful degradation over hard-blocking when business requirements allow it.
4. Log security violations for analytics, auditing, and investigation.
5. Re-check security state when the app resumes or before high-risk actions.
6. Test your security response paths on simulators, rooted or jailbroken test devices, and debugging environments.
7. Keep androidDebugHash and iosDebugHash out of production builds.