com.google.android.compos.payload Copy

Recorded on devices as "CompOS", this is a platform component of the Android Virtualization Framework (AVF) rather than an app. AVF provides isolated execution environments using the pKVM hypervisor, and AOSP lists isolated compilation among its use cases: a protected virtual machine compiles the bootclasspath and system server JARs after an APEX update, before the reboot rather than during early boot, which AOSP says significantly reduces the boot time after the update. AOSP names the com.android.compos APEX as the implementation. In the Android source, that APEX contains CompOSPayloadApp, whose manifest declares the package com.android.compos.payload with the label CompOS and android:hasCode="false". The package recorded here has the same name with a com.google prefix and the same label. In our sample it appears only on Google Pixel and Googlebook devices, has no launcher entry, requests no permissions, and where signer data is available is signed by a key this site classifies as Google. Treating it as Google's build of the AOSP CompOS payload is an inference from the matching name and label. Version note: Google's Android Developers Blog says AVF was first introduced in Android 13 on Pixel devices, and in our sample this package appears from API 33 (a Pixel 7) up to API 37. AOSP states that AVF is supported only on ARM64 devices. For Android Enterprise, EMM and kiosk use, no enrolment, policy or user-facing role is identified in the sources cited here, and administrators will only meet it in an app inventory. If it is the CompOS payload its name indicates, interfering with it could affect isolated compilation after a module update, so it is best left in place.

• Android Virtualization Framework (AVF) overview - Android Open Source Project →
• AVF use cases - Android Open Source Project →
• CompOSPayloadApp AndroidManifest.xml - Android (packages/modules/Virtualization) source →
• com.android.compos APEX Android.bp - Android (packages/modules/Virtualization) source →
• Virtual Machines as a Core Android Primitive - Android Developers Blog →
• Package provenance for com.google.android.compos.payload - Android System App Database →

• Signed by Google's own signing key (the same key Google uses across devices), so it is a Google-provided preinstall that updates independently of the system image, and that single certificate is consistent across all 11 device profiles.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.