# Changelog

## [Unreleased]

- Native Android HTTPS onboarding, origin-bound browsing, session persistence,
  recovery, server erasure, camera/document selection, downloads and blob exports.
- SwiftUI/WKWebView iOS implementation, isolated web sign-in, native settings,
  recovery, file export, and strict URL/metadata policies; Xcode validation pending.
- JVM, Android emulator, portable Swift, and real pinned-upstream HTTPS tests.
- Reproducible build configuration, CI and maintainer-controlled signing workflow.
- MIT licensing, upstream audit, security model and release documentation.

No stable release has been published. No native push or browser-to-app session
handoff is claimed. See validation records for what has actually been executed.