Vault Bridge v0.1.3 preview

Vault Bridge v0.1.3

This is a UI-observability fix on top of the v0.1.2 consistency release.

Fix

Overview and Activity now reconcile with backend state after unattended
synchronization, even if a renderer event is delayed or missed. The app keeps
the push update path and adds a bounded passive refresh while visible plus an
immediate refresh when the window regains focus.

The installed diagnostic command now uses isolated ephemeral session data and
checks the healthy connected tunnel runtime without reopening Keychain on a
configured installation. Credential verification during configuration has a
15-second network bound.

The read-only MCP, strict SSH, Secure Tunnel, diagnostic and deployment
contracts are unchanged. ChatGPT receives only search and fetch.

Install

Use the versioned
Codex installation runbook.

The attached Apple Silicon DMG and ZIP are ad-hoc signed and integrity-checked,
but are not Developer ID signed or Apple notarized.

Verification

• Repository lint, type checking, tests, builds, Compose validation and release
  hygiene pass.
• The packaged app, DMG, ZIP, locked Electron fuses and SHA-256 manifest are
  verified locally.
• The owner installation passes live checks for vault, pinned SSH/Docker,
  OpenAI tunnel and synchronization.