R-TrustTunnel 0.6.2 beta 1

R-TrustTunnel 0.6.2 beta 1

Beta pre-release: macOS and Android only. Android 0.6.2-beta.1 / versionCode 60201, signed with the release key introduced in v0.6.0 (certificate SHA-256 4aa431cd89387e969da006b0a76288ac725fa17e952a83641df80d4b977306af). Desktop update sequence 12; the update channel is not promoted. Windows and Linux packages remain in v0.6.1 / v0.6.0.

Built from tag v0.6.2-beta.1 (27dc2c5); the merge commit's tree is identical to the built commit a4cc966.

Changes since v0.6.1

macOS

• Kill-switch proof (#96, #81). PF drops outgoing packets silently, so the service now proves the guard with a read-only BPF tap on the physical interface and a control frame in every run. In whole-computer mode the "Protection" and DNS rows turn green, and a broken guard turns them "failed".
• Service probes of DNS and protection (#84, #91).
• Stop and reconnect (#80, #94). Status answers during Stop, Stop takes under half a second on the lab Mac, and Stop/reconnect durations (no addresses) go to events.log.
• Other VPNs (#95). PF states left by Cisco AnyConnect and similar clients are flushed after our guard is loaded instead of refusing to connect.

Android

• Recovery after sleep (#92). The reconnect budget is restored after a stable session, timers count real time across sleep, and the transport is checked on wake-up.
• Network changes (#86, #89). An IPv6 address or route appearing after Wi-Fi returns no longer recreates the session.
• UI variant 3 (#73).

All clients

• Dead-session detection (#69). UI v3 for Native, WebView and iOS (#74). Linux terminal client (#72).

Updating

• macOS: quit R-TrustTunnel before installing. Otherwise preinstall refuses, and the installer shows only a generic script error.
• Android: install over 0.6.0 or 0.6.1; profiles are kept. 0.5.x and older must be uninstalled first, which deletes local profiles.

Assets

File	What
R-TrustTunnel-Android.apk	Android 10+, arm64-v8a and x86_64
R-TrustTunnel-macOS-arm64-system-candidate.{pkg,dmg}	macOS system VPN, Native UI
…-system-candidate-webview.{pkg,dmg}	same, WebView UI
…-system-candidate-both.{pkg,dmg}	same, both UIs
SHA256SUMS	checksums

macOS packages are ad-hoc sealed, not Developer ID signed or notarized.

Verification

Check	Result
CI on the release PR #97 (macOS, Linux, Windows)	PASS
macOS installed package, test Mac (26.5.2 arm64), code of #96 7bfb564 (same service code as this tag)	PASS: transport/DNS/protection passed in 11/11 samples on an idle tunnel. Negative test (set skip on en0): protection and DNS → failed, after restore → passed. Stop 0.3–0.5 s; reconnect after sleep ≈3 s
macOS installed package built from this tag	NOT RUN
Android device install/update of this APK	NOT RUN
Linux/Windows installed acceptance of #81; #62 degraded path after sleep; #70 Stop in split mode with many routes	NOT RUN

Details: docs/releases/v0.6.2.md