v2.3.2

Added

• cp: abuse caps on public /dashboard/session/* (DoS gate before deploy)
• cli: hmd dashboard login — local HAID+gh device-flow signer
• cp: dashboard session routes public + CORS (god stays gated)
• cp: dashboard login sessions + god-mode aggregates (enforce L1-L5, G1-G4)
• presence: auto-connect CP behind one-time opt-in consent
• ship: auto-sync Netlify /install redirect to release tag

Fixed

• ship: relocatable heimdall-site fallback path ($HOME, not baked absolute)
• ship: npm readback tolerates registry lag; §3 notice silent once decided

Tests

• oracle: INV-LOGIN — gate dashboard team-login sessions (L1-L5)
• oracle: INV-GOD — gate god-mode cross-tenant reads (G1-G4)

Maintenance

• release: v2.3.2

Full changelog: v2.3.1...v2.3.2

Install/upgrade:

curl -fsSL https://raw.githubusercontent.com/randomittin/heimdall/v2.3.2/install.sh | bash

install.sh.minisig is the detached minisign signature of this release's install.sh; bin/heimdall-autoupdate verifies it against release/heimdall-signing.pub before applying.