2026.09.07.2 — security hardening

Disable ENS CCIP Read so resolver-controlled gateway URLs cannot cause backend HTTP requests. Onchain ENS forward and reverse lookups remain available; CCIP-only names fall back to a wallet address.

Operator scripts use encrypted Foundry keystores, private logs, strict address parsing and atomic JSON writes. Uncertain broadcasts are not retried automatically. See docs/OPERATOR_SCRIPTS.md before the next authorized onchain operator action. No real keys were migrated.

Validation: full application gate, ABI/renderer fixtures, Foundry, regression tests against local RPC/provider mocks, operator script tests and shell syntax checks. No Solidity or renderer changes, no contract deployment, no test mainnet transactions.

2026.09.07.1 — reliability and wallet errors

Expose a complete paginated mint feed for hub announcements. Explain wallet, fee, network and contract errors with a next step. Require the release gate and isolate HTTP test servers.

Validation: 84 Bun tests, 17 Foundry tests, TypeScript, server bundle and dependency audit passed. Collection fixture output remains unchanged.

Deployed mainnet token and renderer contracts are unchanged.