Purpose

Move privileged or trusted logic server-side while keeping Android clients simple.

When to use

• Adding callable or HTTP functions.
• Adding Firestore/Auth triggers.
• Validating operations that rules cannot express.
• Testing functions locally.

Inputs to inspect

• Use case and trust boundary.
• Input schema and auth/role requirements.
• Runtime, region and emulator setup.
• Android caller contract.

Required workflow