v1.12.2

• refactor obfs4 path. Safe from failure when pinning the server.
• Fixed obfs4 exit bridge reordering issues.

known issues :

• packet drop on cold connections will have a hard time getting connection back. This is per-main process.

1.12.0

• Fixes related to edge cases for when user abruptly turning off their computer without using the app exit path by utilizing RunOnce registry on next app boot.
• Auto-recover pinning is now embedded into the pinning itself, not separate toggle.
• Culture trimming.
• Uninstall NAOT + trim.
• Other nits and housekeeping.

v1.11.11

• Hardening entry/exit tor nodes
• Correcting order of killing the process on exit based on callbacks.

v1.11.9

• Apps list lifecycle rework — the process list clears when the window hides (tray) and rebuilds fresh on restore. No more stale/dead rows accumulating unseen; single-flight rebuilds, duplicates impossible by construction.
• Frozen static brushes — all shared theme brushes are now frozen Freezables: cheaper rendering, safe cross-thread reads.
• Readable selectors — the bridge-mode and exit-region dropdowns had a white-on-white selection box (stock template ignores Background). Both now use a full dark template: dark box + popup, light text, highlighted active mode.
• Filter-list adblocking removed entirely. It was breaking legitimate domains (microsoft.com, mozilla.org, copilot… — path-scoped and cosmetic rules promoted to whole-domain DNS blocks). Only your manual Blocked Domains list remains. Leftover list caches delete themselves on boot.
• PAC/auto-config fix. Windows silently prefers a PAC script over our manual proxy, so routing did nothing with zero errors on affected machines. PAC/auto-detect is now backed up, paused while routing, and restored on stop (compare-before-restore, like everything else). Rescue script mirrors it.
• Bootstrap gate. Routing flipped on at control-port auth — seconds into Tor's life, long before it could carry traffic ("bootstrapped but nothing routes until toggle"). Routing now engages at bootstrap 100%, with honest per-mode timeouts; a stalled bootstrap fails loudly instead of stranding you.
• Browser Secure-DNS checklist (Config). Explains the Edge-works/Firefox-doesn't split: reads Firefox/Edge/Chrome DoH settings read-only and flags forced-DoH profiles (fatal under lockdown, leaky without it).
• Event-driven tor stop. SIGNAL SHUTDOWN over control + Exited-event wait — already-dead returns in ~0ms, dying daemons return the instant they go. The CloseMainWindow placebo (3s burned every stop) is gone; wedged daemons still get a bounded SIGKILL fallback.
• Exit hardening. Timestamped exit-trace.log (%AppData%\PTor) of every shutdown step, no-latch teardown (no failure can brick future exits), invisible-dialog fallback, 90s force-exit failsafe on all exit paths.
  Death pact. tor.exe + transports live in a kill-on-close Job Object — a hard crash can never orphan them again. Stale-sweep + atomic settings/health/checkpoint saves cover the rest.
• Single instance with --takeover-from handover for restart/elevate flows.
• Tor log viewer (Config) — last 300 daemon lines, so 1st-boot failures say why.
• Uninstall.exe — stops PTor, restores proxy/env/DNS, deletes our registry keys, removes only our WinDivert service, wipes %AppData%\PTor + %ProgramData%\PTor, offers program-folder removal, and enforces a reboot (--dry-run / --yes / --no-reboot / --log supported).
• rescue-internet.bat + README rescue ladder (restart PTor → rescue bat → Uninstall + reboot).

v1.11.4

• Initial release