Repository Issue Activity (beta)

#89 App Store submission

#29 [High] Mid-session HELLO rewrites a live link's identity (iOS permanent hijack / Android attribution spoof)

#86 [Discussion] Keep INTERNET permission for automatic updates?

#11 [Docs] No end-user documentation for non-technical people

#36 [Low] Batch: sentAt clamp, fromBase64, INTERNET permission, iOS Nearby leftovers, dead leave-channel, wipe restarts radio, copy drift, npm audit

#61 [Docs] Host and publish the user guide (Cloudflare Pages / domain)

#79 [Tracking] App distribution — Releases, signing, download page, iOS, policy

#85 [Distribution] Policy: stores, sideload, and mirrors

#84 [Distribution] Reproducible builds

#83 [Distribution] Decide and document an iOS distribution path

#82 [Distribution] Website download page (link Releases + verify steps)

#81 [Distribution] Production Android signing (replace Expo template key)

#80 [Distribution] Publish Android builds to GitHub Releases on v* tags

#71 [High] Mesh Radio off toggle does not persist, restarts silently on next foreground or BLE event

#72 [Medium] decodeEnvelope has no payload size ceiling, oversized envelope crashes storeEnvelope as an unhandled rejection

#70 [High] Panic wipe can resurrect a wiped OTK secret through an unfenced persistPrekeys race

#69 discussion on my prev pr #67 (emergency coordination design)

#68 [Tracking] Evict issued-unconsumed OTKs when pool hits ceiling

#62 [Meta] Repo hygiene: CONTRIBUTING, Code of Conduct, issue templates, SECURITY

#54 [High] Ciphertext re-wrap still resets hop count and mesh TTL for relays

#55 [High] Panic wipe: mesh stays live after DB wipe until stop() — race residual

#48 [High][FS] Unsigned OTKs can redirect decryption to a third party

#4 [Critical] No forward secrecy for sealed messages

#3 [Critical] Envelope re-wrap bypasses dedup, hop limit, and TTL

#56 [Draft][FS] Batch for discussion: peer OTK DoS, absorb persist, consume-before-parse, crash durability (P1–P4)