- Validate IPC sender origin using event.senderFrame
- Fix duplicate DApp activity entries (stale listener cleanup)
- Show post-condition mode badge and warn on Allow with no conditions
- Restrict dApp URLs to https only
- Fix dApp registry URLs for Velar and BNSv2
- Update SDK to app-version with security fixes