What changed, honestly.

Rendered-browser + source review by an independent audit: mobile-responsive product tour (scaling film canvas, fixed viewport chrome, real links, honest paused state), light-mode hamburger contrast fix, AA-contrast badge/chip fixes, single-row app header on small screens. No behaviour or contract changes.

Recoverable private settings transactions, setup checks bind to the installed environment, masked key prompts, managed loopback startup, protected approval/performance state, log rotation and retention, runtime regressions.

Pinned and bounded public HTTP transport; private Desktop peer enforcement; provider snapshots; image consent; per-order artifact metadata; Unicode brand identities; packaged dashboard for wheel installs.

Full-package audit implementation; see docs/FULL-AUDIT.md for exact scope, tests and external release requirements.