You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Apps list lifecycle rework — the process list clears when the window hides (tray) and rebuilds fresh on restore. No more stale/dead rows accumulating unseen; single-flight rebuilds, duplicates impossible by construction.
Frozen static brushes — all shared theme brushes are now frozen Freezables: cheaper rendering, safe cross-thread reads.
Readable selectors — the bridge-mode and exit-region dropdowns had a white-on-white selection box (stock template ignores Background). Both now use a full dark template: dark box + popup, light text, highlighted active mode.
Filter-list adblocking removed entirely. It was breaking legitimate domains (microsoft.com, mozilla.org, copilot… — path-scoped and cosmetic rules promoted to whole-domain DNS blocks). Only your manual Blocked Domains list remains. Leftover list caches delete themselves on boot.
PAC/auto-config fix. Windows silently prefers a PAC script over our manual proxy, so routing did nothing with zero errors on affected machines. PAC/auto-detect is now backed up, paused while routing, and restored on stop (compare-before-restore, like everything else). Rescue script mirrors it.
Bootstrap gate. Routing flipped on at control-port auth — seconds into Tor's life, long before it could carry traffic ("bootstrapped but nothing routes until toggle"). Routing now engages at bootstrap 100%, with honest per-mode timeouts; a stalled bootstrap fails loudly instead of stranding you.
Browser Secure-DNS checklist (Config). Explains the Edge-works/Firefox-doesn't split: reads Firefox/Edge/Chrome DoH settings read-only and flags forced-DoH profiles (fatal under lockdown, leaky without it).
Event-driven tor stop. SIGNAL SHUTDOWN over control + Exited-event wait — already-dead returns in ~0ms, dying daemons return the instant they go. The CloseMainWindow placebo (3s burned every stop) is gone; wedged daemons still get a bounded SIGKILL fallback.
Exit hardening. Timestamped exit-trace.log (%AppData%\PTor) of every shutdown step, no-latch teardown (no failure can brick future exits), invisible-dialog fallback, 90s force-exit failsafe on all exit paths.
Death pact. tor.exe + transports live in a kill-on-close Job Object — a hard crash can never orphan them again. Stale-sweep + atomic settings/health/checkpoint saves cover the rest.
Single instance with --takeover-from handover for restart/elevate flows.
Tor log viewer (Config) — last 300 daemon lines, so 1st-boot failures say why.