v0.11.0

[0.11.0] - 2026-07-01

Features

• First-class peer key-change signal + atomic TOFU reset (#123) (protocol) (e20cf05)
• Expose derived telemetry install id to JS/RN bindings (#114) (uniffi) (27606f6)
• Let telemetry-grade sinks bypass MLS event sampling (#113) (protocol) (6dcdb9e)
• Persist per-install telemetry scrub secret (#112) (protocol) (1bf3854)
• Emit relay role transition events (#110) (router) (cc4e456)
• Telemetry-driven diagnostics in demo app (#95) (bindings) (fbaeddb)
• Expose TelemetrySink and typed dicts across UniFFI/RN (#94) (uniffi) (5924e62)
• Wire metrics, transport-state, routing, device telemetry (#93) (protocol) (9a43c92)
• Route Event and MLS streams through TelemetrySink (#92) (protocol) (b06e41a)
• Introduce TelemetrySink and TelemetryRecord taxonomy (#91) (protocol) (af6b646)
• Emit AckEvicted and FragmentAssemblyEvicted events (#89) (protocol) (b0a6de1)

Bug Fixes

• Validate the iOS simulator lib in the npm ship-gate (bindings) (f40084a)
• Restore offline Android↔iOS message delivery (#122) (ble,mls,router) (21b399d)
• Floor notify egress to the 185-byte cap when the peripheral-link MTU is unobserved (#121) (ble) (44e8a0f)
• Restore offline 1:1 MLS convergence over BLE mesh (#120) (ble,mls,protocol) (54e80e0)
• Ship Android consumer ProGuard rules for the FFI (#118) (bindings) (da38638)
• Saturate forward_count to close MAX_FORWARD_COUNT bypass (#108) (core) (907dd32)
• Scope python broadcast raise to BLE-only semantics (#104) (bindings) (8ec1564)
• Copy uniffi.dll on windows instead of symlinking (#101) (bindings) (aabc3be)
• Guard BlePeripheral peer maps with existing lock (#100) (bindings) (6eba328)
• Tear down websocket and recv loop on disconnect (#99) (bindings) (0e06ce6)
• Use InternetMessage.recipient_id in outbox drain (#98) (bindings) (124e0d3)
• Raise on send_message("*") with no known BLE peers (#102) (bindings) (9d750b3)
• Unblock python install and close UDL-drift gaps (#97) (bindings) (402179c)
• Isolate TelemetrySink panics to prevent SharedState poisoning (#96) (protocol) (9921b38)

Refactoring

• Add stable Error::code() for telemetry classification (#111) (transport) (227bf76)
• Extract CategorySampler from MlsEventRateLimiter (#90) (protocol) (e819fbd)

Documentation

• Point iOS integration at install paths that actually exist(1f74afd)
• Backfill 0.9.2–0.10.0, cut 0.11.0, and reformat (#124) (changelog) (5a195e7)
• Record PRs #108-#122 under Unreleased (changelog) (b55b74c)
• Correct stale API and transport-priority references (#117)(a64add7)
• Bring nostr transport into the docs(6455afb)
• Record PRs #70-#106 and fix dead slug links (changelog) (aaae268)

Miscellaneous

• Add community-health files (CoC, templates, CODEOWNERS) (#116)(fb19195)
• Relicense SDK to AGPL-3.0 + commercial dual-license (#107)(d93a5a5)
• Fix github slug casing in RN + python metadata (#106) (bindings) (2bfc9c0)
• Point repo URLs at the actual canonical slug (#105)(70ed2fe)

Ci

• Drop x86_64 (Intel) macOS build from release workflow (#125) (release) (0129155)
• Add actions: write so CLA bot can update PR check status (#109) (cla) (5213333)