diff --git a/bin/publish-latest-branch-build.php b/bin/publish-latest-branch-build.php
index 80784d9..f98022c 100755
--- a/bin/publish-latest-branch-build.php
+++ b/bin/publish-latest-branch-build.php
@@ -1,319 +1,320 @@
 #!/usr/bin/env php
 <?php
 ################################################################
 # This script is supposed to be executed by Phorge's Harbormaster,
 # from the directory of the leased working copy, on top of the
 # desired commit.
 #
 # Algorithm:
 #   - read the secret environment variables
 #   - for each APK:
 #     - make fingerprint
 #     - sign APK
 #     - move to the HTTP area
 #   - finally, if we are on a patch page:
 #     - publish a nice comment on Phorge on the patch page
 ################################################################
 
 // Die violently in case of any errors.
 require __DIR__ . '/../include/autoload.php';
 
 // Get environment variables.
 // These environment variables are very secret and passed to this script
 // using traditional Unix variable export.
 // These variables SHOULD be stored in a file that has very hardened permissions like
 // chmod 600, or similar.
 // Note that this PHP script does not know the .env filename. We just receive the env vars.
 // We die violently if a env variable does not exist (or if it's empty).
 // These are parsed earlier so to crash at startup.
 $KEYSTORE_PATH       = require_env('KEYSTORE_PATH');       // to sign the APK files
 $KEYSTORE_PASSPHRASE = require_env('KEYSTORE_PASSPHRASE'); // to sign the APK files
 $ARTIFACTS_PATH      = require_env('ARTIFACTS_PATH');      // to expose APK files on the web
 $ARTIFACTS_URL       = require_env('ARTIFACTS_URL');       // to download APK files from the web
 $PHORGE_API_URL      = require_env('PHORGE_API_URL');      // to publish comment on Phorge
 $PHORGE_API_TOKEN    = require_env('PHORGE_API_TOKEN');    // to publish comment on Phorge
 $ARCANIST_PATH       = require_env('ARCANIST_PATH');       // to publish comment on Phorge
 
 require_once $ARCANIST_PATH . '/support/init/init-script.php';
 
 // Set he pathname to the repository built apk file(s).
 $APK_PATH_GENERIC = './app/build/outputs/apk/gitpull/*.apk';
 
 // Set the expected base URL for the published APK files and its webroot path on the filesystem.
 
 // The first argument of the script is the Differential ID number,
 // or empty if we are a generic commit.
 $phorge_differential_id = $argv[1] ?? null;
 
 // Show the current directory.
 // This is supposed to be a /var/drydock/repo/something and it's automatically
 // created by Harbormaster during the repository leasing.
 print_log_info(sprintf(
 	"Current directory: %s",
 	getcwd()
 ));
 
 // Get the branch name, and the Phorge document id of the page to be commented.
 $phorge_document_id = '';
 $branch_name = null;
 if ($phorge_differential_id) {
 	// We are coming from a Differential revision page.
 	// The first argument is "123", that is, the "D123" revision page.
 	// We assume that as branch name, to create nice APK names.
 	$branch_name = 'D' . $phorge_differential_id;
 	$phorge_document_id = $branch_name;
 } else {
 	// We are coming from a generic commit, not created from Differential.
 	// Get the git ref name (probably "HEAD").
 	$remote_shit = shell_line('git', [
 		'name-rev',
 		'--name-only',
 		'HEAD',
 	]);
 	$branch_name = basename($remote_shit);
 }
 
 // Get the git commit hash and title.
 // TODO: get also the author name.
 $git_commit = shell_line('git', [
 	'rev-parse',
 	'HEAD',
 ]);
 $git_commit_title = shell_line('git', [
 	'show',
 	'--pretty=format:%s',
 	'-s',
 	'HEAD',
 ]);
 
 // Find every single APK and generate core info.
 $generated_apks = [];
 
 // No APK, no party.
 $apk_founds = glob($APK_PATH_GENERIC);
 if (!$apk_founds) {
 	print_log_error("No APK Founds. WTF!?");
 	exit(1);
 }
 
 // Process every single APK.
 foreach (glob($APK_PATH_GENERIC) as $apk_raw_path) {
 	print_log_info("Processing raw apk: $apk_raw_path\n");
 	// Get the original name of the APK, produced by gradle.
 	// Example: 'apk-amd64-unsigned.apk'.
 	$apk_raw_name = basename($apk_raw_path);
 	$apk_raw_dir = dirname($apk_raw_path);
 
 	// Build the "branch-apk-amd64-unsigned.apk" filename, branch prefixed.
 	// We remove "-unsigned" from the filename since it would be weird.
 	$apk_raw_destination_name = "{$branch_name}-{$apk_raw_name}";
 	$apk_raw_destination_path = $apk_raw_dir . '/' . $apk_raw_destination_name;
 
 	// Create a version of this APK name without that '-unsigned' that is nonsense asd.
 	// From: 'apk-amd64-unsigned.apk'
 	// To:   'apk-amd64.apk'
 	$apk_raw_name_clean = $apk_raw_destination_name;
 	$apk_raw_name_clean = str_replace('app-',      '', $apk_raw_name_clean);
 	$apk_raw_name_clean = str_replace('-gitpull',  '', $apk_raw_name_clean);
 	$apk_raw_name_clean = str_replace('-unsigned', '', $apk_raw_name_clean);
 
 	// From the raw APK we will build 2 artifacts (1 intermediate).
 	// The first is the "aligned" that is completely temporary and unuseful.
 	// The final is the "-signed", downloadable and installable.
 	$apk_aligned_name        = add_file_suffix($apk_raw_name_clean, '-aligned');
 	$apk_aligned_path        = $apk_raw_dir . '/' . $apk_aligned_name;
 	$apk_aligned_signed_name = add_file_suffix($apk_raw_name_clean, '-signed');
 	$apk_aligned_signed_path = $ARTIFACTS_PATH . '/' . $apk_aligned_signed_name;
 	$apk_aligned_signed_url  = $ARTIFACTS_URL . $apk_aligned_signed_name;
 
 	// Calculate the signature of the raw APK. This may take some time.
 	// This is probably not useful, but useful for extra auditing of this log.
 	print_log_info("RAW APK {$apk_raw_name}: sha256sum: calculating...");
 	$apk_raw_sha256 = hash_file('sha256', $apk_raw_path);
 	print_log_info("RAW APK {$apk_raw_name}: sha256sum: calculated: $apk_raw_sha256");
 
 	// Expose the raw APK on the web, just because we can.
 	print_log_info("RAW APK {$apk_raw_name}: expose in HTTP destination");
 	copy($apk_raw_path, $apk_raw_destination_path);
 
 	// Run Android "ZIP align" on the raw APK.
 	// Publish it directly.
 	print_log_info("RAW APK {$apk_raw_name}: zipalign... creating {$apk_aligned_name}");
 	$return_var = -1;
 	passthru(sprintf(
 		'zipalign -p -f -v 4 %s %s',
 		escapeshellarg($apk_raw_path), // Input
 		escapeshellarg($apk_aligned_path) // Output
 	), $return_var);
 	if ($return_var !== 0) {
 		throw new Exception("zipalign returned with exit status code: $return_var");
 	}
 
 	// No align, no party.
 	if (!file_exists($apk_aligned_path)) {
 		throw new Exception("Missing output file expected from zipalign: '$apk_aligned_path'");
 	}
 
 	// Sign the aligned APK.
 	// Publish it directly.
 	print_log_info("APK ALIGNED {$apk_aligned_name}: apksigner... creating {$apk_aligned_signed_name}");
 	$return_var = -1;
 	passthru(sprintf(
 		'apksigner sign --ks %s --out %s --ks-pass pass:%s %s',
 		escapeshellarg($KEYSTORE_PATH),
 		escapeshellarg($apk_aligned_signed_path), // Output
 		escapeshellarg($KEYSTORE_PASSPHRASE),
 		escapeshellarg($apk_aligned_path) // Input
 	), $return_var);
 	if ($return_var !== 0) {
 		throw new Exception("apksigner returned with exit status code: $return_var");
 	}
 
 	// No sign, no party.
 	if (!file_exists($apk_aligned_signed_path)) {
 		throw new Exception("Missing output file expected from apksigner: '$apk_aligned_signed_path'");
 	}
 
 	// Calculate the signature of the aligned signed APK. This may take some time.
 	print_log_info("APK ALIGNED SIGNED {$apk_aligned_signed_name}: calculating sha256sum...");
 	$apk_aligned_signed_sha256 = hash_file('sha256', $apk_aligned_signed_path);
 
 	$apk_abi = extractABIFromAPK($apk_raw_name);
 	// Clean old APK in the repository to never re-use it by mistake
 	// as it happened when we moved everything to the /app directory...
 	unlink($apk_raw_path);
 	unlink($apk_aligned_path);
 
 	// Remember this APK later and its signature.
 	$generated_apks[] = new APK($apk_aligned_signed_name, $apk_aligned_signed_url, $apk_aligned_signed_sha256, $apk_abi);
 }
 
 // Overwrite the latest git show for this branch name (force date update).
 $BUILD_GIT_SHOW_FILE = $ARTIFACTS_PATH . '/' . $branch_name . '-git-show.txt';
 file_put_contents($BUILD_GIT_SHOW_FILE, shell_exec('git show'));
 
 // Build Phorge comment.
 // There is a fixed header, and multiple lines about each APK.
 $telegram_apk_lines = [];
 $phorge_apk_lines   = [];
 foreach ($generated_apks as $generated_apk) {
 
 	// Show architecture, if available.
 	// APK for **amd64**:
 	if($generated_apk->getABI()) {
 		$phorge_apk_lines[] = sprintf(
 			"APK for **%s**: %s",
 			$generated_apk->getABI(),
 			$generated_apk->getPhorgeDownloadLink()
 		);
 
 		// TODO: understand why Telegram does not render as bold text lol.
 		$telegram_apk_lines[] = sprintf(
 			"APK for **%s**",
 			TelegramStupidSDK::escapeMarkdownV2($generated_apk->getABI())
 		);
 	}
 
 	foreach ($generated_apk->getTelegramCommentLines() as $apk_line) {
 		$telegram_apk_lines[] = $apk_line;
 	}
 	$telegram_apk_lines[] = "";
 
 	foreach ($generated_apk->getPhorgeCommentLines() as $apk_line) {
 		$phorge_apk_lines[] = $apk_line;
 		$phorge_apk_lines[] = "";
 	}
 }
 $telegram_apk_lines_str = implode("\n", $telegram_apk_lines);
 $phorge_apk_lines_str   = implode("\n", $phorge_apk_lines);
 
 $phorge_api = new ConduitClient($PHORGE_API_URL);
 $phorge_api->setConduitToken($PHORGE_API_TOKEN);
 
 // add a comment to the build URL
 if (!empty($phorge_document_id) && empty(getenv('NO_COMMENT'))) {
 
 	// We have a Differentials revision under review!
 
 	$telegram_chat_content = implode("\n", [
 		// In Telegram, normal text must be escaped. Link destinations must not be escaped.
 		TelegramStupidSDK::escapeMarkdownV2("⚙ Dear Android hackers, please review this promising patch:"),
 		TelegramStupidSDK::escapeMarkdownV2("https://gitpull.it/$phorge_document_id"),
 		"",
 		TelegramStupidSDK::escapeMarkdownV2("Here the related fresh test builds:"),
 		"",
 		// The texts in these links are already escaped.
 		$telegram_apk_lines_str,
 	]);
 
 	// Send message to Telegram groups.
 	echo "DEBUG TELEGRAM CONTENT\n";
 	echo "$telegram_chat_content\n";
 
 	// Send message to your default Telegram group.
 	// See the TELEGRAM_* environment variables.
 	(new TelegramStupidSDK())->sendMessage($telegram_chat_content);
 
 	// Publish comment on Phorge too.
 	$phorge_chat_content = implode("\n", [
 		"Bip bop I'm a bot. Here fresh Android builds {icon cog spin}",
 		"",
 		$phorge_apk_lines_str,
 	]);
 	$differential_args = [
 		'objectIdentifier' => $phorge_document_id,
 		'transactions' => [
 			[
 				'type' => 'comment',
 				'value' => $phorge_chat_content,
 			],
 		],
 	];
 	$phorge_result = $phorge_api->callMethodSynchronous('differential.revision.edit', $differential_args);
 
 } elseif (empty(getenv('NO_COMMENT'))) {
 	// We have NOT a Differentials revision under review!
 	// So this is an atomic commit.
+	// Escape everything since Telegram markdown is nonsense lol.
 	$telegram_chat_content = implode("\n", [
-		"🌚 New commit: *$git_commit_title*",
-		"https://gitpull.it/R4:$git_commit",
+		TelegramStupidSDK::escapeMarkdownV2("🌚 New commit: *$git_commit_title*"),
+		TelegramStupidSDK::escapeMarkdownV2("https://gitpull.it/R4:$git_commit"),
 		"",
-		"Here the related fresh test builds:",
+		TelegramStupidSDK::escapeMarkdownV2("Here the related fresh test builds:"),
 		"",
-		$telegram_apk_lines_str,
+		$telegram_apk_lines_str, // This is already Telegram-escaped.
 	]);
 
 	echo "DEBUG TELEGRAM CONTENT\n";
 	echo "$telegram_chat_content\n";
 
 	// Send message to your default Telegram group.
 	// See the TELEGRAM_* environment variables.
 	(new TelegramStupidSDK())->sendMessage($telegram_chat_content);
 
 	// Publish comment on Phorge too. On the commit page? Uhm. To be tested.
 //	$phorge_chat_content = implode("\n", [
 //		"{icon gear spin} Bip bop I'm a bot. Here fresh Android builds:",
 //		"",
 //		// The texts in these links are already escaped.
 //		$phorge_apk_lines_str,
 //	]);
 //	$differential_args = [
 //		'objectIdentifier' => $phorge_document_id,
 //		'transactions' => [
 //			[
 //				'type' => 'comment',
 //				'value' => $phorge_chat_content,
 //			],
 //		],
 //	];
 //	$phorge_result = $phorge_api->callMethodSynchronous('diffusion.commit.edit', $differential_args);
 }
 
 // delete very old files
 print_log_info("Cleaning old artifacts");
 shell_exec(sprintf(
 	"find %s -type f -mtime +120 -delete",
 	escapeshellarg($ARTIFACTS_PATH)
 ));
 
 print_log_info("Done");