diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9612999..3873e27 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,8 +17,8 @@ Development opened after the stable v0.1.2 release.
   Android full lint remains at the exact ten-error `main` baseline (one
   `NewApi`, one `LocalContextConfigurationRead`, and eight bilingual
   `StringFormatMatches` diagnostics); this lot adds no lint error and disables
-  no rule. Private candidates may override numeric `versionName` and increasing
-  `versionCode` at build time without changing development defaults.
+  no rule. Private daily candidates retain development `versionName=0.1.3` and
+  may override only an increasing `versionCode` at build time.
 
 - Added the loopback-only `/exercices` desktop catalogue administration
   surface with bounded search/profile/BODY ZONES filtering, detail and
diff --git a/android/app/build.gradle.kts b/android/app/build.gradle.kts
index 7dcc289..2f00680 100644
--- a/android/app/build.gradle.kts
+++ b/android/app/build.gradle.kts
@@ -45,16 +45,6 @@ val trainlogVersionCode =
             ?: throw GradleException("TRAINLOG_ANDROID_VERSION_CODE must be a positive integer")
     } ?: 4
 
-/* WHY: private in-place candidates can remain on the installed stable product
- * line while development continues on the next version. CONTRACT: the build-
- * only override accepts a numeric semantic version and leaves the repository
- * default untouched. */
-val trainlogVersionName =
-    providers.environmentVariable("TRAINLOG_ANDROID_VERSION_NAME").orNull?.let { raw ->
-        raw.takeIf { it.matches(Regex("[0-9]+\\.[0-9]+\\.[0-9]+")) }
-            ?: throw GradleException("TRAINLOG_ANDROID_VERSION_NAME must be numeric x.y.z")
-    } ?: "0.1.3"
-
 android {
     namespace = "com.labfytools.trainlog"
     compileSdk = 37
@@ -65,7 +55,7 @@ android {
         targetSdk = 36
 
         versionCode = trainlogVersionCode
-        versionName = trainlogVersionName
+        versionName = "0.1.3"
         testInstrumentationRunner =
             "androidx.test.runner.AndroidJUnitRunner"
     }
diff --git a/docs/current_state.md b/docs/current_state.md
index 6550001..746da19 100644
--- a/docs/current_state.md
+++ b/docs/current_state.md
@@ -337,6 +337,10 @@ The full Android lint comparison against an isolated clean `main` worktree is
 unchanged at ten pre-existing errors: one `NewApi`, one
 `LocalContextConfigurationRead`, and eight bilingual `StringFormatMatches`
 diagnostics. This UI tranche adds no lint error and changes no lint policy.
+The next private daily Android candidate remains on development
+`versionName=0.1.3`; only its strictly increasing `versionCode` may be supplied
+as a build-time override. No public tag or release is created by that private
+candidate process.
 
 The private Program execution rollout installed desktop schema v27 and the
 signed nondebuggable Android versionCode 17/schema v25 update without
diff --git a/docs/tests.md b/docs/tests.md
index e555f3e..a8caf44 100644
--- a/docs/tests.md
+++ b/docs/tests.md
@@ -656,11 +656,10 @@ tagged source state, and the tag, Android `versionName`, Meson project version,
 TUI product version, asset names, and release title must agree.
 
 Private update rollout may set `TRAINLOG_ANDROID_VERSION_CODE` to a positive
-integer and `TRAINLOG_ANDROID_VERSION_NAME=0.1.2` to remain on the installed
-stable product line. Both are build-only overrides; the repository development
-defaults remain unchanged. They are used only to maintain a strictly increasing
-installed → backup bridge → current APK chain and do not change any schema or
-exchange-format version.
+integer above the installed package while retaining the current development
+`versionName=0.1.3`. The version-code override is build-only and does not change
+any schema or exchange-format version. Private daily candidates must not
+downgrade the logical product version to the earlier 0.1.2 stable line.
 
 For `TRAINLOG_UI_ANDROID_WEB_UNIFICATION_V1`, `lintDebug` was also run from a
 detached clean worktree at the exact `main` baseline and from the mission