v2.3.0 — Security & Stability Audit

What's New in v2.3.0

Security Hardening

• Machine-specific encryption key with seamless migration
• Content Security Policy on all windows
• URL validation on external links (https/http only)
• Input validation on all 12 IPC handlers
• Deep link hardening, token redaction in logs

Permissions Fix

• Fixed: users grant Accessibility/Screen Recording but app didn't detect it
• Root cause: macOS caches permission state per-process on Sequoia+
• Fix: force re-evaluation on every check instead of reading cached value

Database Integrity

• Foreign key enforcement enabled
• Fixed data cleanup that was never running
• 4 new migrations with dedup indexes and schema corrections

Accessibility

• Keyboard navigation, screen reader labels, focus traps
• ARIA tabs, reduced-motion support, contrast improvements

Test Coverage

• 546 tests across 7 files (up from 22)

Build

• Code-signed with Developer ID