CHANGELOG

Every release.
Published the same day we sign it.

Each entry is hash-anchored to the release manifest. The hash you see here is the hash a verifying device should compute — if they do not match, sound the alarm.

Release2026-06-062026.06.r13571a6c8…

Compact preview, every screen explained

  • Public landing redesigned around the live phone preview
  • Six screens reachable from the first fold — lock, home, status, mesh, audit, privacy
  • Premium iconography across the demo and the marketing surfaces
  • Sovereign Status panel exposes the audit chain head and the last verified release hash
Milestone2026-06-052026.06.r02c3ce40e…

Disaster-mesh resilience app reaches first-class

  • Resilience app handles four operating modes plus drill mode out of the box
  • Earthquake alert ingestion from seven independent government sources
  • Forced kill-switch tested with end-to-end revoke + wipe + audit seal on real hardware
  • Federated immunity (privacy-strict pattern sharing) wired to the on-device daemon
Release2026-05-302026.05.r3bf821077…

Smart updates — full image to delta patch

  • Delta updates implemented end-to-end (≤500 MB hard cap, base hash verified)
  • Update refused if any of the three required signatures is missing
  • AVB rollback index frozen at install, downgrade attempts rejected
  • Audit ledger gains an entry per install attempt, including failures
Release2026-05-222026.05.r21e0db997…

Zero-knowledge device attestation

  • Halo2-based attestation proves the device is a genuine LyDos Phone without revealing identifying data
  • Banks and work apps that opt in can require the proof at session start
  • No correlatable identifier leaves the device — the attestation is unlinkable
Release2026-05-102026.05.r15a8c9e22…

Kernel-level immune system

  • Sovereign writes guarded by an eBPF kernel-level veto, even with root
  • Four-mode state machine wired to the user interface (normal, degraded, safe, lockdown)
  • SOS broadcast verified to remain available in every mode, including critical lockdown
Milestone2026-04-252026.04.r3934a65f4…

Three-signature update protocol

  • Release, security, and operations sign every OTA. Single-key compromise no longer fatal
  • Public release manifests published alongside the bundle
  • Reproducible-build pipeline pinned, verification script in the repository
Milestone2026-04-172026.04.r06e6fbcb1…

Sovereign federation stack integrated

  • Sovereign federation stack reached first end-to-end integration: 13 engines, 115 endpoints, 76 backing tables (backend; production device fleet still pre-launch)
  • Cross-device immunity pattern sharing designed hashed-only — region buckets only, no raw data
  • End-to-end key sovereignty: master private keys never leave the secure element
Source

Every change in this list maps to a public commit. Build it yourself if you want.

Signed

Every entry corresponds to a manifest signed by three independent roles before release.

Auditable

The on-device audit chain references the release hash you see here. Tampering breaks both.