·
159 commits
to main
since this release
Cypher Box 0.1.7 (Android versionCode 35, iOS build 18).
Bark Vault (Ark)
- Engine upgrade: migrate to
@secondts/bark-react-native0.15.0 (bark core 0.6.0), then 0.6.1 (0.16.1). - Emergency Exit: fee-reserve soft gate with a break-glass "start exit anyway", esplora open fallback so a bot-blocked provider no longer wedges the wallet, and keep the auto-backup running during an exit so the local backup stays fresh mid-exit.
- Refresh: funds stay spendable during a refresh (bark 0.6.0), auto-refresh received capsules gated on the SDK estimate, foreground maintenance sweep + arkoor exit-runway guard, delegated background-maintenance wake.
- Dust: one-tap dust consolidation + capsule refresh UX, accurate dust status on the home banners, corrected capsule refresh fee rule and stale fee URL.
- Reminders and copy fixes; capsule reminders acquire their own push token; corrected expired-capsule copy; protect arkoor capsules from silent expiry.
- Updated in-app capsule guide; "Learn more" opens our own how-to guide.
Hot Vault
- Optional dice/coin entropy and an optional BIP39 passphrase on create and recover.
CoinOS
- Withdraw fee selector falls back to the blockstream esplora, then static tiers, when mempool.space is unavailable.
Strike
- Consolidate to the one working login flow, drop the offline_access scope, revoke the access token on disconnect.
Android
- Ship arm64-v8a only to stop the 32-bit launch crash.
Privacy / Terms of Service
- Gate the on-chain address subscription behind explicit consent.
- Publish the Bark Vault terms and align with Second's ToS; disclose the optional dice entropy and BIP39 passphrase; ToS version bumped to 2026-08, so existing users are prompted to review and accept.
Verification
- Source commit:
f43a86969dbcb6cc1ef59488ac74a71078a1a359 - Tag:
v0.1.7-vc35(GPG-signed) - Reproducible build verified: build-verify built the AAB twice and the SHA-256s matched.
- Unsigned real-config AAB SHA-256:
98c6b31f68adcff480d64f6386ff3e71f6520d8b0091c2e0916c5dcc10a78360 - CI-reference (no-secrets) AAB SHA-256:
b3f4f4bd72b7782efcaf7a51d93f21746ee8c196f108794c444383a1ac3c76d1 - Build instructions: see
BUILD.md. The Play binary is signed locally with a hardware-protected key; the CI artifact is unsigned and never shipped.