October 16, 2026

• Detect an older local store

  The app records a store generation in the system’s secure key storage so it can detect a restored older copy of the local store.

• Enforce protected recovery rules

  An account’s protected recovery mode is fixed when it is created. Protected imports and recovery-kit actions now follow that mode, and device removal waits for effective revocation rather than treating a pending change as complete.

• Encrypted attachment for local automation

  Foundations for attaching an automation client to a running Lowfire instance now include a local endpoint, encrypted connections and shared session handling. Queued arguments and results are held in encrypted temporary storage; this is one part of the wider automation-permission rollout.

• Explain failures when memory runs short

  Conversation and organisation actions, attachment preparation and downloads now fail in plain words when working memory is unavailable. A download can recover if its verification record cannot be allocated.

• One authority check for membership actions

  Membership actions now use the same authority decision, reducing differences between ways of adding or removing a member.

• Smaller working memory for linking and backups

  Linking streams account-deletion metadata instead of loading it all at once. Backup records are split into bounded pieces, and restore processes them in limited working memory without rewriting already stored backup names.

• Recover video quality after a connection narrows

  The media engine improves recovery after a connection suddenly has less capacity, with a targeted simulated-call check behind the change.

• Spelling Revert restores the whole word

  A spelling correction keeps both complete words, so Revert restores everything originally typed instead of a truncated word.

• Give back memory after large automation calls

  Large command results, JSON output and request parsing release their temporary memory back to the operating system instead of keeping the peak allocation.

• More accurate Linux emoji font selection

  The bundled emoji font is advertised only for characters it contains. Native test runs also release the font objects they create.

• Terminal sheets close immediately

  Escape puts away an already built terminal task sheet at once. Reopening the Recovery Kit keeps its contents behind Show again.

• Reminder dates stay reachable in a tiny window

  The custom reminder sheet puts Date and Time first, so an invalid date in a small window does not push the fields out of sight.

• Terminal account actions fit their card

  Settings keeps the account card’s actions inside its boundary, including on Linux.

Designs, contracts and foundations are work in progress; they do not by themselves mean a finished feature is available.

• Encrypted organisation directory foundations

  The wire format and server gain sealed organisation-catalog records and sealed private-channel join requests. These are pieces of the directory implementation, rather than a new complete browsing experience.

• iPhone input and lifecycle foundations

  The iPhone bridge contract, touch scrolling and app lifecycle were added, including background and foreground handling. Desktop automation can exercise touch input, but these foundations do not by themselves make an iPhone release available.

• Shared permissions and delayed security design

  Two design decisions establish one permission policy for automation and account-level handling of security changes that must wait. The decisions describe the intended system; further implementation is still required.