v2.10.0

Your word, on the record

v2.10.0 · additive — ship and forget.

Compatibility: SOFT — additive only. A new ratings event kind (38123) that old
clients simply never query, plus onboarding and cosmetic UI. No wire-format,
trade-protocol, or vote-acceptance change. Existing trades, balances, listings,
and communities are untouched, and nothing here needs a coordinated update —
ship it and forget it.

Ratings — reputation, one tap at a time

• Every settled trade now ends with a single 👍 / 👎 about the other party. One
  tap, never a form, never a blocker — and it's a GENERIC primitive: the same
  event rates a buyer, a seller, or an arbiter, so one system feeds everything
  that needs reputation.
• It survives the rush. People bolt the moment they have their sats, so the
  rating isn't trapped on the success screen: every settled-but-unrated trade
  keeps a one-tap thumb in Me, so you can vouch (or warn) later. Rate now or rate
  next week — it lands in the same slot either way, and you can't stuff one trade.
• It's a rating you can trust. A vote only counts if it references a SETTLED
  escrow the rater was actually a party to (same verify-don't-trust posture as
  the arbiter roster) — fake ratings on trades you weren't in, or that never
  settled, are dropped. The numbers you see are verified, not asserted.
• It already does something: a seller who's earned a clean record (5 positive,
  none negative) graduates to subscription listings, and your own tally now
  shows in Me — including an arbiter's. The bigger consumers (rating-tiered
  arbiter assignment, amount caps) build on this keystone next.

Put yourself on the map

• The "no Chama here yet — make one" tap during onboarding used to error out for
  new accounts (it tried to sign before you had a key). Now it does the right
  thing: it remembers your request, lands you on your own flag and currency, and
  the moment you sign in, reframes to "Sign in to put yourself on the map — we'll
  tell the Chama arbiters that {your country} wants in," then quietly publishes
  it. The generic "Chama not listed?" form behaves identically.
• A quiet but important follow-through: a community shell you spin up before
  signing in now gets stamped with your key the instant you do — so even a brand-
  new country community can carry a verifiable arbiter roster down the line.

Polish

• Two different federations no longer look the same on Browse. Each can carry its
  own chip accent — BLF reads indigo, GBF reads teal — hand-picked to never
  collide with the role colors or status pills. (The amber "off-route" tile
  still wins; that's routing, not identity.)
• Desktop downloads got legible. The release page now lists the bundles in a
  sensible order with plain-language names — macOS, Windows, then the two Linux
  side by side — so a non-technical downloader knows which file is theirs.

Numbers

• 2,316 tests green (the full union: v2.9's fix + 22 ratings + 17 onboarding
  assertions, run together for the first time); typecheck clean; production
  build clean. Ratings verified end-to-end; onboarding driven through a live
  first-run flow (request queued pre-login → account created → shell stamped →
  report published).