R-TrustTunnel 0.6.2

R-TrustTunnel 0.6.2

Русский

Коротко

0.6.2 — релиз про надёжность. VPN теперь лучше переживает сон компьютера и
телефона, сам замечает, что соединение «зависло», и честнее показывает,
защищён ли ваш трафик на самом деле.

Что стало лучше

После сна VPN снова работает сам. Раньше после пробуждения Mac значок
показывал «подключено», а сайты не открывались, пока вы вручную не нажимали
«Отключить» и «Подключить». Теперь соединение восстанавливается само.
На Android после сна телефон тоже переподключается сам и не тратит попытки
впустую.

Зависшее соединение больше не прячется. Бывает, что пара соединений ещё
работает, а все остальные сайты молча не грузятся. Теперь приложение это
замечает и переподключается. В режиме прокси (SOCKS) оно тоже переподключается
само, и при этом трафик не уходит мимо VPN.

Видно, работает ли защита. В режиме «весь компьютер» строки
«Защита» и «DNS» становятся зелёными, только когда приложение действительно
проверило, что трафик не утекает мимо VPN. Если защита сломана — вы увидите
«ошибка», а не ложный зелёный значок. Проверки запускаются, только пока окно
приложения открыто, поэтому в фоне не тратят ресурсы.

Быстрее отключение. На Mac кнопка «Отключить» срабатывает меньше чем за
полсекунды, а окно не подвисает, пока VPN останавливается.

Уживается с другими VPN. Если до этого был запущен Cisco AnyConnect или
похожий клиент, R-TrustTunnel больше не отказывается подключаться.

Смена Wi-Fi на Android. Возвращение в Wi-Fi больше не обрывает открытые
загрузки и звонки без настоящей причины.

Новый внешний вид на всех платформах и терминальный клиент для Linux.

Как обновиться

• macOS: закройте R-TrustTunnel, скачайте
  R-TrustTunnel-macOS-arm64-UI-Choices.dmg и установите один из пакетов
  внутри: Native, WebView или Both. Если приложение открыто, установщик покажет
  непонятную ошибку скрипта — просто закройте приложение и повторите.
• Android: устанавливайте поверх 0.6.0, 0.6.1 или беты 0.6.2 — профили
  сохранятся. Версии 0.5.x и старше сначала удалите (при этом удалятся
  локальные профили — заранее экспортируйте их).
• Windows / Linux: окно приложения и служба VPN должны быть из одного
  релиза — обновляйте их вместе.

Что пока стоит знать

• Пакеты для macOS не подписаны Apple Developer ID; при первом запуске
  может понадобиться разрешить запуск в «Системных настройках → Конфиденциальность
  и безопасность». Установщик Windows не подписан, SmartScreen может
  предупредить.
• Это всё ещё предварительная версия: не все сценарии проверены на
  установленных пакетах (см. «Проверки» ниже).

English

In short

0.6.2 is a reliability release. The VPN now survives sleep better, notices
on its own when the connection has stalled, and shows more honestly whether
your traffic is really protected.

What got better

• The VPN works again after sleep. Previously, after a Mac woke up, the
  icon said "connected" but sites did not load until you pressed Disconnect and
  Connect. It now recovers by itself. Android also reconnects after sleep
  without wasting its retry attempts.
• A stalled connection no longer hides. When a couple of connections still
  work but everything else silently hangs, the app now notices and reconnects.
  Proxy (SOCKS) mode reconnects too, and traffic never goes around the VPN
  meanwhile.
• You can see whether protection works. In whole-computer mode the
  Protection and DNS rows turn green only after the app has actually checked that
  nothing leaks past the VPN. A broken guard shows "failed", not a false green.
  The checks run only while the app window is open.
• Faster disconnect. On a Mac, Disconnect takes under half a second, and the
  window stays responsive meanwhile.
• Works alongside other VPNs. After Cisco AnyConnect or a similar client,
  R-TrustTunnel no longer refuses to connect.
• Wi-Fi changes on Android no longer drop open downloads and calls without
  a real reason.
• New look on all platforms and a terminal client for Linux.

How to update

• macOS: quit R-TrustTunnel, download
  R-TrustTunnel-macOS-arm64-UI-Choices.dmg and install one package from it:
  Native, WebView or Both. If the app is running, the installer shows an unclear
  script error; quit the app and try again.
• Android: install over 0.6.0, 0.6.1 or the 0.6.2 beta; profiles are kept.
  Uninstall 0.5.x and older first — this deletes local profiles, so export them.
• Windows / Linux: the app window and the VPN service must come from the
  same release; update them together.

Good to know

• macOS packages are not signed with an Apple Developer ID, and the Windows
  installer is not Authenticode signed; your OS may ask you to confirm the launch.
• This is still a preview: not every scenario has been checked on installed
  packages (see "Verification" below).

Файлы / Assets

Файл / File	Что / What
R-TrustTunnel-macOS-arm64-UI-Choices.dmg	macOS (Apple Silicon): внутри три установщика — Native, WebView, Both; ставьте один
R-TrustTunnel-Windows-x64-Setup.exe	Windows 10/11 x64
R-TrustTunnel-Android.apk	Android 10+, arm64-v8a / x86_64. 0.6.2 / versionCode 60202, certificate SHA-256 4aa431cd89387e969da006b0a76288ac725fa17e952a83641df80d4b977306af
R-TrustTunnel-Linux-x86_64{,-webview,-both}.flatpak	Linux x86_64, Wayland: Native / WebView / Both
rtrust-host-0.6.2-12-x86_64.pkg.tar.gz	Linux host service for system VPN (installed separately)
SHA256SUMS, rtrust-release-062-source-*.json	checksums; source identity of the build (commit 4123160, tree 39641b8)

macOS packages are ad-hoc sealed (no Developer ID / notarization); the Windows installer is not Authenticode signed. Desktop update sequence 12; desktop control IPC v7.

Проверки / Verification

Check	Result
GitHub CI on release PR #108 (macOS, Linux, Windows)	PASS
Jenkins native #10 (4123160): macOS + Windows unit/build/smoke, Linux full-tunnel E2E, macOS/Windows official endpoint E2E, Wintun service E2E	PASS
Jenkins Linux #12 (4123160): unit, Wayland, network E2E, Flatpak and host packages	PASS
Jenkins Android #26 (4123160): JNI/APK/lint, emulator smoke, VPN acceptance over TrustTunnel HTTP/2, HTTP/3, Hysteria2, AmneziaWG; Always-on/lockdown	PASS
Physical phone (POCO X3, arm64): rtrust-engine HTTP/3 transport 5/5, quiet-flow liveness 2/2, unit 96/96 (test binaries only)	PASS
Installed-package acceptance of this exact build (macOS wake reconnect #99/#62, Android over 0.6.2-beta.1, Linux/Windows #81/#90)	NOT RUN

Full notes: docs/releases/v0.6.2.md

R-TrustTunnel 0.6.2 beta 1

R-TrustTunnel 0.6.2 beta 1

Beta pre-release: macOS and Android only. Android 0.6.2-beta.1 / versionCode 60201, signed with the release key introduced in v0.6.0 (certificate SHA-256 4aa431cd89387e969da006b0a76288ac725fa17e952a83641df80d4b977306af). Desktop update sequence 12; the update channel is not promoted. Windows and Linux packages remain in v0.6.1 / v0.6.0.

Built from tag v0.6.2-beta.1 (27dc2c5); the merge commit's tree is identical to the built commit a4cc966.

Changes since v0.6.1

macOS

• Kill-switch proof (#96, #81). PF drops outgoing packets silently, so the service now proves the guard with a read-only BPF tap on the physical interface and a control frame in every run. In whole-computer mode the "Protection" and DNS rows turn green, and a broken guard turns them "failed".
• Service probes of DNS and protection (#84, #91).
• Stop and reconnect (#80, #94). Status answers during Stop, Stop takes under half a second on the lab Mac, and Stop/reconnect durations (no addresses) go to events.log.
• Other VPNs (#95). PF states left by Cisco AnyConnect and similar clients are flushed after our guard is loaded instead of refusing to connect.

Android

• Recovery after sleep (#92). The reconnect budget is restored after a stable session, timers count real time across sleep, and the transport is checked on wake-up.
• Network changes (#86, #89). An IPv6 address or route appearing after Wi-Fi returns no longer recreates the session.
• UI variant 3 (#73).

All clients

• Dead-session detection (#69). UI v3 for Native, WebView and iOS (#74). Linux terminal client (#72).

Updating

• macOS: quit R-TrustTunnel before installing. Otherwise preinstall refuses, and the installer shows only a generic script error.
• Android: install over 0.6.0 or 0.6.1; profiles are kept. 0.5.x and older must be uninstalled first, which deletes local profiles.

Assets

File	What
R-TrustTunnel-Android.apk	Android 10+, arm64-v8a and x86_64
R-TrustTunnel-macOS-arm64-system-candidate.{pkg,dmg}	macOS system VPN, Native UI
…-system-candidate-webview.{pkg,dmg}	same, WebView UI
…-system-candidate-both.{pkg,dmg}	same, both UIs
SHA256SUMS	checksums

macOS packages are ad-hoc sealed, not Developer ID signed or notarized.

Verification

Check	Result
CI on the release PR #97 (macOS, Linux, Windows)	PASS
macOS installed package, test Mac (26.5.2 arm64), code of #96 7bfb564 (same service code as this tag)	PASS: transport/DNS/protection passed in 11/11 samples on an idle tunnel. Negative test (set skip on en0): protection and DNS → failed, after restore → passed. Stop 0.3–0.5 s; reconnect after sleep ≈3 s
macOS installed package built from this tag	NOT RUN
Android device install/update of this APK	NOT RUN
Linux/Windows installed acceptance of #81; #62 degraded path after sleep; #70 Stop in split mode with many routes	NOT RUN

Details: docs/releases/v0.6.2.md

R-TrustTunnel 0.6.1

R-TrustTunnel 0.6.1

Android 0.6.1-preview.1 / versionCode 60101. Signed with the release key introduced in v0.6.0 (certificate SHA-256 4aa431cd89387e969da006b0a76288ac725fa17e952a83641df80d4b977306af).

Changes since v0.6.0

• Connection status on all clients (#67): only checks that produced a result are shown. Route, DNS, guard and connectivity have no runtime source yet, so they are no longer listed as "unchecked". A running transport reads "Transport: running". The amber colour still means nothing has been verified.
• Android release signing (#66): scripts/sign-android.py uses the new release key from keystore.properties and rejects any other certificate.
• Version 0.6.1, desktop update sequence 11 (#68).

Updating Android

• From 0.6.0 (preview.1 / preview.2): install the APK over the current version. Profiles are kept.
• From 0.5.x and earlier: the app is signed with a new key, so the old version has to be uninstalled. Uninstalling deletes your profiles. Export local profiles first; reconnect portal profiles with an invitation.

Verification

Check	Result
Unit tests, CI on #66/#67/#68 (macOS, Linux, Windows)	PASS
Device: Honor DEL-LX9, Android 12, update 60002→60101 over the installed app, production profile	PASS: profiles kept, VPN works, T-Bank works through the VPN, header without "unchecked" rows
Windows: unit, clippy, build, smoke, installer, service E2E, full E2E (Jenkins rtrust-release-060-native #7, source db8796a)	PASS
macOS: unit, clippy, build, smoke, AmneziaWG/Hysteria/H2, dmg/pkg (same build)	PASS
Linux (flatpak, Arch host)	not published: the build node had no DNS; will follow later
Desktop auto-update channel (latest, sequence 11)	not promoted

The Android native library was built from the same Rust sources as in 0.6.0-preview.2 (the Android crates did not change in 0.6.1).

Details: docs/releases/v0.6.1.md

R-TrustTunnel 0.6.0

Release notes, verified checks and known limitations: https://github.com/onixus/Rust-trustvpn/blob/cbd50aa217049f0d7bff28350fae34a2ed55d12c/docs/releases/v0.6.0.md — Windows installer is not Authenticode-signed; macOS packages are ad-hoc signed (no automatic updates on macOS).

Android APK: 0.6.0-preview.2 (versionCode 60002), built after the tag from main 4cbff53 (#63, #64; source manifest rtrust-android-0.6.0-preview.2-source-manifest.json). It keeps the VPN on the current network after Wi-Fi/mobile handoffs, recovers an Always-on session switched on in Settings, and adds Settings -> VPN data usage. Signed with a NEW key: certificate SHA-256 4aa431cd89387e969da006b0a76288ac725fa17e952a83641df80d4b977306af. It updates 0.6.0-preview.1 installs in place, but cannot update installations from v0.5.0 or earlier (signed with 74b16206...b21b1b95): uninstall the old app first; profiles and Keystore credentials are not carried over. Release notes for the APK: https://github.com/onixus/Rust-trustvpn/blob/4cbff53/docs/releases/v0.6.0.md#android

0.5.0 desktop rebuild - update sequence 9

Desktop rebuild of 0.5.0 with update sequence 9. The original v0.5.0 assets and immutable sequence 8 are retained.

The old build identified itself as sequence 7, which could repeatedly offer 0.5.0 and select the 0.4.0 rollback package. This rebuild identifies itself as sequence 9. Signing now refuses a manifest whose version or sequence differs from the archived compiled source.

Built from commit 1166a92cd534863985c1e83f8f63b83ee4484b8d, source manifest f4c25c52be42b9682ab8cc86796fd039c85e15f6b77f709e1643cade31f64ba4.

Validation:

• GitHub Actions passed on Linux, macOS and Windows.
• Jenkins native build 10 completed SUCCESS (Windows/macOS packaging and protocol E2E; complete Linux ARM64 service, TUN, full tunnel and Always-on checks).
• Jenkins Linux build 12 passed the complete x86_64 unit, Wayland and network suite. Packaging restart 13 completed SUCCESS, including isolated signed Flatpak install/update/rollback and unsigned-update rejection.
• Flatpak bundles, host package and SHA256SUMS are signed with the existing release key; the public key is unchanged.
• Signed metadata is bound to compiled sequence 9; staging the installed sequence is refused before download and the exact sequence-9 rollback is accepted.

Earlier failed attempts and transient ARM64 timeouts are retained in local evidence. Five diagnostic TUN repetitions and the complete native retry passed without changing assertions or timeouts. The initial Linux archive contained AppleDouble files; the retry used a clean archive. Flatpak export required clearing inactive incremental Cargo cache to restore disk reserve.

This is a preview desktop rebuild. Windows packages are not Authenticode signed; macOS packages are ad-hoc sealed and not Developer-ID notarized. Full macOS system VPN testing remains pending because Hiddify retains the system route. Android/iOS artifacts are unchanged and remain in the original v0.5.0 release.

Real Windows signed 7 → 9 update, forced unhealthy install, rollback to 7 and successful retry to 9 passed. Encrypted profiles remained unchanged and decryptable; installed GUI/service hashes match the rebuilt artifacts. The installed updater rejects sequence 9 as current. Windows latest is now sequence 9; macOS automatic-update promotion remains withheld. PR #27 merged as 94331e7fd61d239bd5fb38d057e0e191e31363bf.

The release tag points at the merged commit 94331e7fd61d239bd5fb38d057e0e191e31363bf, which also contains the earlier server/client repository separation. Compiled client source trees match the frozen build commit 1166a92cd534863985c1e83f8f63b83ee4484b8d.

v0.5.0 — Mobile widgets and managed routes preview

v0.5.0 — mobile widgets and managed routes preview

• iPhone preview with profile import/export, QR import, portal synchronization,
  On Demand and a small VPN widget. Device installation requires Apple signing.
• Android VPN widget and updated shared mobile policy handling.
• macOS glass appearance with a persistent Settings toggle and accessibility fallback.
• Desktop IPv4 TUN inclusion/exclusion rules, LAN bypass and server-assigned route
  groups. The portal publishes group revisions per registered device; the desktop
  client applies them after synchronization while disconnected and reconnecting.
• HTTP requests on the desktop mixed proxy port.
• Additive server image upgrades and Linux server API/publication tests.

Route groups are desktop-only; Android/iOS do not consume the separate group API.
Existing mobile profile-embedded routing policies remain supported. This is a
preview release. macOS packages are ad-hoc sealed, not Developer-ID notarized;
Windows packages are not Authenticode signed. Validation and artifact provenance
are recorded in the release's evidence file and final publication notes.

Downloads and validation

• Windows x64: Setup executable.
• macOS arm64: UI Choices DMG and system candidate PKG. The glass toggle is in Settings.
• Linux x86_64: signed Flatpak bundles (native, WebView, or both) and host package.
• Android: signed APK with arm64-v8a and x86_64 libraries.
• iOS: unsigned arm64 device application archive and ad-hoc signed arm64 Simulator archive. The device archive is not an installable IPA; see iOS-README.txt.

The original release artifacts are built from the frozen source snapshot below. The standalone macOS PKG routing hotfix is built separately, with exact source hashes and a patch recorded in macos-routing-fix-evidence.json. See release-evidence.json, jenkins-builds.json and source manifests for provenance. SHA256SUMS is signed by the existing release key CB9C4FB4B9CFAF255BE008C9F0E6162B056843CC; its public key is included as rtrusttunnel.gpg.

Physical iPhone/Android device VPN testing, Windows system installation E2E and macOS system package installation were not performed for this release. The user's installed VPN was preserved. This release does not promote an automatic-update manifest.

Final Jenkins runs: native #8, Linux x86_64 #10, Android #12 — completed SUCCESS. iOS Simulator hosted tests: 8 passed. GitHub Actions checks passed on Linux, macOS and Windows. Release commit: 4400ca12938619df92326c4abe21818bf39915e9 (tree identical to tested source ed4dcdb77e048e1299343de70d6eaf82603593b8).

macOS IPv4 routing hotfix — 2026-10-07

Use R-TrustTunnel-macOS-arm64-system-candidate.pkg for the IPv4 selection / LAN exclusion fix. The standalone PKG preserves the active DNS servers in an owned unscoped resolver when selected routes contain a DNS server, restores only its own DNS entry on disconnect/recovery, and derives LAN exclusions from connected interface subnets instead of all non-default routes. macOS start/stop/recovery waits now allow larger route selections.

This is the exact locally built debug candidate installed and tested on macOS arm64; it is ad-hoc sealed. Installation, 36 unit tests, live DNS/LAN discovery, uncached system DNS, DNS through TUN, physical DNS leak blocking, named HTTPS, LAN access, clean disconnect and reconnect passed. Startup remains slow because per-prefix route installation is sequential. Exit R-TrustTunnel completely before installing. Other release binaries, including the UI Choices DMG, retain their original contents and validation.

Source: base commit 1166a92cd534863985c1e83f8f63b83ee4484b8d plus macos-routing-fix-source.patch; see macos-routing-fix-evidence.json. SHA256SUMS is updated and signed with the existing release key. Automatic-update manifests are unchanged.

macOS sleep/wake hotfix — 2026-10-07

The standalone R-TrustTunnel-macOS-arm64-system-candidate.pkg now contains the installed and user-confirmed sleep/wake update. It uses native IOKit sleep and powered-on notifications, retains the network guard during recovery, and keeps control IPC responsive while cancelled route work drains. Redacted, bounded local lifecycle diagnostics are available in /private/var/run/rtrust/events.log. Quit R-TrustTunnel after disconnecting before installing.

Validation: 40 unit tests, strict clippy, native IOKit registration/cleanup, package extraction/signature verification, and an installed 158-second clamshell sleep. Automatic recovery completed 15.281 seconds after powered-on; DNS and HTTPS were checked. A subsequent HTTP/3 protocol failure triggered another successful automatic recovery; intermittent HTTP/3 and a separately observed DNS discrepancy are not claimed fixed. The user subsequently confirmed networking worked.

Source commit: 4f4462b (helper code 5bf65be, unchanged GUI 6abf980). See macos-sleep-fix-evidence.json and macos-sleep-fix-source.patch for provenance and limits. This is a locally validated, ad-hoc sealed hotfix, not a new exact-source Jenkins run or Developer-ID-notarized package. Other platform files and the UI Choices DMG are unchanged. Signed SHA256SUMS is refreshed; automatic-update manifests are unchanged.

R-TrustTunnel 0.4.0 — AmneziaWG 3 preview

The client now connects to AmneziaWG 3 servers in addition to TrustTunnel
and Hysteria 2. An awg-quick configuration is imported as a profile; the
transport implements the 3.1 obfuscation set (junk packets, S1–S4 padding,
H1–H4 header ranges, I1–I5 signature packets, header protection, content
padding, random trailers, cookie suppression and timer ranges) over the
WireGuard handshake, with TCP, UDP and DNS carried through the tunnel. See
AmneziaWG for the supported options and known limits.

Also new since v0.3.2-ui.2:

• Hysteria 2: port hopping, Brutal bandwidth mode, BBR/Reno selection, QUIC
  windows and timeouts, Gecko obfuscation, leaf-certificate pinSHA256
  checking and embedded mutual-TLS client credentials.
• tt:// and hy2:// profile links open the client on macOS, Windows and Flatpak.
• Refreshed desktop UI around the Flow palette and a refreshed Android home screen;
  protection state is shown per connection mode.
• Android binds the tunnel only to a foreground network.
• Windows: a closed Wintun adapter that stays listed no longer blocks the next
  connection ("Wintun adapter removal is still pending"); the service refreshes
  the adapter list through WMI. Sleep/wake always-on checks were added.
• IPv6 is refused locally when the endpoint has no IPv6 egress.

Packages:

• macOS arm64: UI Choices DMG (Native / WebView / Both), plus the Native system PKG. Ad-hoc sealed; no Developer ID/notarization.
• Windows x64: R-TrustTunnel-Windows-x64-Setup.exe, the first refreshed public installer since 0.3.2. Not Authenticode-signed.
• Linux x86_64 Wayland: three signed Flatpak variants and the signed host service package rtrust-host-0.4.0-36. The host package is now a .pkg.tar.gz built on the Fedora CI node.
• Android arm64/x86_64: signed APK, versionCode 40001, versionName 0.4.0-preview.1. Retains the existing signing certificate and upgrades over 30209.

Validation: Jenkins native #93, Linux #36 and Android #66 completed
SUCCESS on the release commit, including Gitleaks/Trivy, unit tests, the
AmneziaWG interoperability suite against amneziawg-go 3.1, the Linux
full-tunnel E2E with TrustTunnel and AmneziaWG profiles, and the Android
emulator acceptance for all three transports with reinstall/upgrade.
The Windows full tunnel was exercised with TrustTunnel and AmneziaWG profiles
in authorized runs on a physical host before the release commit: TrustTunnel
passed, AmneziaWG passed three of four runs; the fourth failed at the recovery
step after the GUI was killed and is not explained yet.

Not validated in this release:

• The macOS full-tunnel E2E was not run with an AmneziaWG profile, and the
  macOS packages were not installed on a machine in this wave.
• Physical Android phones were not used; the Android acceptance has one known
  intermittent failure (a 5 s TCP read timeout through TrustTunnel) that passes on rerun.
• An AmneziaWG peer must reply from the configured endpoint address; replies
  from another address of a multi-homed server are dropped.

After publication the Windows installer passed the authorized signed-update
maintenance run on a physical host (sequence 6 → 7 with an injected failed health
check, rollback to 6 and a successful retry), and sequence 7 was promoted to
latest.json for Windows; see secure updates. The
macOS update manifest of sequence 7 is published but not promoted. The authorized
Windows full-tunnel run was then repeated on that host with the service of build
#93: TrustTunnel and AmneziaWG each passed once, including outage, GUI crash,
service kill, always-on and network-loss steps. release-evidence.json in the
release predates both runs.

Verify downloads with SHA256SUMS and its detached signature; the OpenPGP public
fingerprint is CB9C4FB4B9CFAF255BE008C9F0E6162B056843CC.

R-TrustTunnel 0.3.2 — Flow icon preview

v0.3.2-ui.2 — Flow branding preview

The selected client icon, #6 Flow / Поток, is now included in Native and
WebView windows and tray, macOS app bundles, Linux Flatpak and Android launcher
and notifications. Android adaptive artwork stays within its safe zone; Android
13 includes themed monochrome artwork. The Windows native executable, installer
and shortcuts are configured to use the same ICO; no new Windows binary is
published while its build node is unavailable.

Packages:

• macOS arm64: UI Choices DMG (Native / WebView / Both), plus the Native system PKG. Ad-hoc sealed; no Developer ID/notarization.
• Linux x86_64 Wayland: three signed Flatpak variants and the signed Arch host service package rtrust-host-0.3.2-23.
• Android arm64/x86_64: signed APK, versionCode 30209, versionName 0.3.2-preview.7. Retains the existing signing certificate.

Validation: macOS Jenkins #73, Linux #23 and Android #30 completed
SUCCESS, including Gitleaks/Trivy, unit, smoke and applicable network E2E.
Android covered both transports and reinstall/upgrade. Every macOS package was
expanded: icon hashes and sealed app bundles were checked. All three Flatpak
payloads contain the canonical SVG; APK adaptive, monochrome and notification
resources were checked. This wave packages branding; installation on physical
phones/desktops was not repeated. Earlier installed UI acceptance is documented
in v0.3.2-ui.1.

Two CI fixture timing races were resolved without relaxing assertions: Linux
autostart arguments are written atomically, and the pinned Hysteria binary is
prepared before timing Android fixture readiness. Failed builds remain recorded.
The release evidence records source manifests and the scope of validation.

Verify downloads with SHA256SUMS and its detached signature; the OpenPGP public
fingerprint is CB9C4FB4B9CFAF255BE008C9F0E6162B056843CC.

R-TrustTunnel 0.3.2 — UI refresh

Modernized client UI for macOS, Linux and Android.

• A clearer default-profile card, connection status and primary action.
• Native desktop navigation with network settings moved into Settings.
• WebView Profiles / Settings / Sync navigation and mode-specific settings.
• Android grouped import/settings actions, English/Russian labels, and the status-colored bottom connection button.
• Shared encrypted profile storage and automatic TrustTunnel / Hysteria 2 selection.

Packages:

• macOS Apple Silicon: UI Choices DMG contains Native, WebView and Both PKG installers. No Developer ID/notarization; macOS may require individual approval.
• Linux x86_64 Wayland: Native, WebView and Both Flatpak bundles signed with the existing project key. The Arch host-service package is provided separately.
• Android arm64/x86_64: signed in-place update, versionCode 30208 (versionName remains 0.3.2-preview.6).
• Windows is deferred while its build node is unavailable; no older Windows installer is included as a new build.

This remains a preview release. Verify downloads using SHA256SUMS and its detached signature; the signing public key is included.

Validation: macOS Jenkins #69 and Linux Jenkins #20 completed successfully, including Gitleaks/Trivy, unit, smoke and network E2E. The installed macOS app/service and Linux Native/host service were checked after upgrade. WebView and Both packages passed smoke on physical KDE Wayland. Android build 30208 was installed and verified on Huawei with Always-on/lockdown retained. See release-evidence.json for build provenance and scope.

Linux signing key fingerprint: CB9C4FB4B9CFAF255BE008C9F0E6162B056843CC.