I want a compact Device Policy Controller that installs as Device Owner through Android Enterprise QR provisioning and locks a Samsung phone (OneUI, Android 12+) into single-app kiosk mode. Nothing beyond my own APK may appear—the Home screen, Recents, Status bar, Settings, Play Store, Phone, SMS, and every other app stay hidden. The lock must survive reboots, crashes, and system updates, and the app should auto-launch on boot and immediately relaunch if it is ever killed. An admin escape is still required, but only through a small PIN entry screen; any other authentication style is out of scope. I don’t have a provisioning file yet, so you’ll create a fresh QR JSON that pairs cleanly with the build. The entire solution must work offline with no backend, no cloud calls, and no Play Store publishing. Deliverables • Signed APK ready for sideloading • Full Android Studio source (Kotlin or Java) • QR provisioning JSON that installs the DPC as Device Owner and silently pushes the kiosk app • One-page setup guide covering first-time provisioning, PIN reset, and exit procedure Acceptance criteria • Device boots directly into my app with no system UI visible • LockTask mode cannot be exited without the admin PIN • Behaviour persists after power cycles and over-the-air updates • Build passes installation and functionality tests on a Samsung phone running Android 12 or later within 7 calendar days of project start If you already have Device Owner or LockTask experience, this should be straightforward. Feel free to suggest refinements before we begin.