ExitLane 0.2.0-rc.1

ExitLane 0.2.0-rc.1

ExitLane 0.2.0-rc.1 is the final release candidate for the first stable 0.2.0 release. It keeps the
complete beta.5 product and assurance baseline while closing the appliance-timezone consistency
gap.

Timezone consistency

• Settings now controls Debian. A timezone selected in ExitLane is validated as an installed
  IANA zone and applied through Debian's fixed timedatectl interface before it is persisted.
• No half-applied state. A failed system operation leaves the stored value untouched. A storage
  failure restores the previous system timezone, and every failure path is visible and audited.
• Existing appliances converge safely. At startup, an explicit valid ExitLane timezone is
  reconciled to the appliance. Invalid or unreadable state remains visible instead of silently
  assuming UTC.
• Upgrade and rollback preserve time configuration. The transaction snapshot records the
  pre-upgrade appliance timezone and restores it alongside the application state when rollback is
  required.

Diagnostics and interface corrections

• Successful Speedtests now show download, upload, and ping together, with download and upload as
  the primary results. Speedtest remains an explicit, confirmed action and never runs automatically.
• Compact cards keep normal hostnames and IPv4 endpoints readable without arbitrary single-character
  wrapping. Longer technical values use accessible disclosure rather than destructive break-all
  behavior.

Updated product presentation

The README and promotional images now show the current Cobalt / Slate interface on a working
ExitLane installation: live appliance health, an active NordVPN tunnel, an operational WireGuard
peer, real connection diagnostics, and integrated documentation. No core status was fabricated and
no Speedtest was run for the screenshots.

Supported platform and upgrade

The supported appliance baseline remains Debian 13 on amd64, primarily a Proxmox LXC with
/dev/net/tun and permission to create WireGuard interfaces. Upgrade with the trusted RC checkout:

sudo ./installer/install-debian.sh

Create and verify an encrypted backup first. The installer creates a root-only pre-upgrade recovery
snapshot and automatically rolls back when the transaction cannot complete.

Direct Internet exposure remains unsupported. Keep the management interface on a trusted network
and use the documented HTTPS reverse-proxy configuration where remote browser access is required.