SafeHouse 0.2.1

• Canonical account limits, early password-check rejection, application-password lock stability, strict proxy CIDRs and operation-scoped Turnstile checks.
• Metadata and taxonomy authorization when duplicating content.
• Durable alert/purge queues, retries and Site Health status; monitoring of stored sensitive capabilities, custom roles and direct user grants.
• Redis recovery generations, isolated user/role state, unambiguous namespaces, multisite runtime separation and atomic signed counters.
• Cache lifecycle fixes and conservative invalidation for old URLs, terms, prices and listings.
• Observed price history only: unavailable/partial states, complete windows beyond 1000 changes, long-reduction retention, zero prices and visible storage failures. Migration begins a new trusted observation period.
• Atomic signed release/advisory envelopes, expiry and persistent anti-rollback floors, private size-limited downloads and conditional immutable publication. See dev/SIGNED-DATA-PROTOCOL.txt for rollout and renewal.
• Isolated digest-pinned signer, security release gates, local-only dev ports, random dev credentials and strict SMTP encryption validation.

Signed release: manifest.json carries the SHA-256 of the zip and is signed with the SafeHouse release key (manifest.json.sig, Ed25519; public key in PUBLIC_KEYS, plugin/src/Core/Updater.php). Sites update from https://updates.designhouse.me/shouse/ and install only packages that pass both checks.