Windows x86_64 client
Shared client core; Windows x86_64 service package.
RC2 preserves the RC1 product model while strengthening long-lived connections, abuse boundaries, platform lifecycles, and release reproducibility.
- Published
Security and abuse boundaries
- Request-proof v2 authenticates identity before route selection or request-body reads; ambiguous HTTP framing is rejected quietly.
- The join secret stays on the client; the server stores only an opaque selector and Ed25519 public verifier.
- Server-signed short-lived membership tickets with verified device and network authorization.
- Encrypted, padded discovery and peer-hello packets with edge attestation for public endpoints.
- Fixed resource budgets across HTTP, HTTP/2, UDP discovery, handshake, and peer-add paths.
Connectivity and data plane
- In-place membership renewal instead of full handshakes during healthy sessions.
- Endpoint stickiness under active traffic, with verified recovery only after the current path becomes stale.
- Quality probes, make-before-break roaming, and jittered backoff that separates synchronized retry cycles.
- Single-flight Android recovery across Wi-Fi and mobile transitions without stacked restarts.
- Pooled buffers, fewer hot-path allocations, and complete Linux GSO batch processing.
- Packet-local handling of transient TUN write pressure and protection against stale liveness decisions after fresh receive activity.
Platforms and lifecycle
- Windows x86_64/ARM64, macOS Intel/Apple Silicon, and Linux x86_64/ARM64 client packages.
- All-in-one, API-only, and isolated Edge-only roles for Ubuntu x86_64/ARM64.
- Aligned Windows Service, macOS LaunchDaemon, Linux systemd, and Android foreground VPN behavior.
- Reliable Android Stop and approval of rotated TLS identities without clearing app data.
- Event-driven Android peer counts with notification changes coalesced in 250 ms windows and obsolete runtime callbacks invalidated.
Operations and release engineering
- Transactional install and update flows with service-state preservation and automatic rollback.
- Accessible action menus over existing installations, explicit service-start behavior, and TLS renewal with validity-window checks.
- Clean RC2 server installation and client re-enrollment for request-proof v2 and store schema v2.
- Doctor bundles, installer self-tests, privacy-safe mesh counters, and bounded log rotation.
- Go 1.27.1 toolchain, pinned dependencies, and reproducible platform targets.
- Automated SHA-256, Android signing, brand-asset, and immutable RC1 archive contracts.