v0.5.0 — Mobile widgets and managed routes preview

v0.5.0 — mobile widgets and managed routes preview

• iPhone preview with profile import/export, QR import, portal synchronization,
  On Demand and a small VPN widget. Device installation requires Apple signing.
• Android VPN widget and updated shared mobile policy handling.
• macOS glass appearance with a persistent Settings toggle and accessibility fallback.
• Desktop IPv4 TUN inclusion/exclusion rules, LAN bypass and server-assigned route
  groups. The portal publishes group revisions per registered device; the desktop
  client applies them after synchronization while disconnected and reconnecting.
• HTTP requests on the desktop mixed proxy port.
• Additive server image upgrades and Linux server API/publication tests.

Route groups are desktop-only; Android/iOS do not consume the separate group API.
Existing mobile profile-embedded routing policies remain supported. This is a
preview release. macOS packages are ad-hoc sealed, not Developer-ID notarized;
Windows packages are not Authenticode signed. Validation and artifact provenance
are recorded in the release's evidence file and final publication notes.

Downloads and validation

• Windows x64: Setup executable.
• macOS arm64: UI Choices DMG and system candidate PKG. The glass toggle is in Settings.
• Linux x86_64: signed Flatpak bundles (native, WebView, or both) and host package.
• Android: signed APK with arm64-v8a and x86_64 libraries.
• iOS: unsigned arm64 device application archive and ad-hoc signed arm64 Simulator archive. The device archive is not an installable IPA; see iOS-README.txt.

The original release artifacts are built from the frozen source snapshot below. The standalone macOS PKG routing hotfix is built separately, with exact source hashes and a patch recorded in macos-routing-fix-evidence.json. See release-evidence.json, jenkins-builds.json and source manifests for provenance. SHA256SUMS is signed by the existing release key CB9C4FB4B9CFAF255BE008C9F0E6162B056843CC; its public key is included as rtrusttunnel.gpg.

Physical iPhone/Android device VPN testing, Windows system installation E2E and macOS system package installation were not performed for this release. The user's installed VPN was preserved. This release does not promote an automatic-update manifest.

Final Jenkins runs: native #8, Linux x86_64 #10, Android #12 — completed SUCCESS. iOS Simulator hosted tests: 8 passed. GitHub Actions checks passed on Linux, macOS and Windows. Release commit: 4400ca12938619df92326c4abe21818bf39915e9 (tree identical to tested source ed4dcdb77e048e1299343de70d6eaf82603593b8).

macOS IPv4 routing hotfix — 2026-10-07

Use R-TrustTunnel-macOS-arm64-system-candidate.pkg for the IPv4 selection / LAN exclusion fix. The standalone PKG preserves the active DNS servers in an owned unscoped resolver when selected routes contain a DNS server, restores only its own DNS entry on disconnect/recovery, and derives LAN exclusions from connected interface subnets instead of all non-default routes. macOS start/stop/recovery waits now allow larger route selections.

This is the exact locally built debug candidate installed and tested on macOS arm64; it is ad-hoc sealed. Installation, 36 unit tests, live DNS/LAN discovery, uncached system DNS, DNS through TUN, physical DNS leak blocking, named HTTPS, LAN access, clean disconnect and reconnect passed. Startup remains slow because per-prefix route installation is sequential. Exit R-TrustTunnel completely before installing. Other release binaries, including the UI Choices DMG, retain their original contents and validation.

Source: base commit 1166a92cd534863985c1e83f8f63b83ee4484b8d plus macos-routing-fix-source.patch; see macos-routing-fix-evidence.json. SHA256SUMS is updated and signed with the existing release key. Automatic-update manifests are unchanged.

macOS sleep/wake hotfix — 2026-10-07

The standalone R-TrustTunnel-macOS-arm64-system-candidate.pkg now contains the installed and user-confirmed sleep/wake update. It uses native IOKit sleep and powered-on notifications, retains the network guard during recovery, and keeps control IPC responsive while cancelled route work drains. Redacted, bounded local lifecycle diagnostics are available in /private/var/run/rtrust/events.log. Quit R-TrustTunnel after disconnecting before installing.

Validation: 40 unit tests, strict clippy, native IOKit registration/cleanup, package extraction/signature verification, and an installed 158-second clamshell sleep. Automatic recovery completed 15.281 seconds after powered-on; DNS and HTTPS were checked. A subsequent HTTP/3 protocol failure triggered another successful automatic recovery; intermittent HTTP/3 and a separately observed DNS discrepancy are not claimed fixed. The user subsequently confirmed networking worked.

Source commit: 4f4462b (helper code 5bf65be, unchanged GUI 6abf980). See macos-sleep-fix-evidence.json and macos-sleep-fix-source.patch for provenance and limits. This is a locally validated, ad-hoc sealed hotfix, not a new exact-source Jenkins run or Developer-ID-notarized package. Other platform files and the UI Choices DMG are unchanged. Signed SHA256SUMS is refreshed; automatic-update manifests are unchanged.