other

• release: bump the Tauri bundle version to 0.1.1 d52cfbb
• release: v0.1.1 70624d0
• fix(host): shadow-mode adaptive no longer detaches viewers it cannot help 5c7eb55
• fix(portal): control v2 disconnected the session on its first input ack 4f7f481
• docs: drop the root claims instead of qualifying them d5d0ea1
• ci: write Cargo caches only from main and share redundant entries 1af9ebe
• ci: split the complete demo gate into parallel cached legs 8941f0b

other

• fix(release): make the Portal macOS package actually build and ship signed d548572
• fix(website): drop the duplicate notarization note from the hero d4c104b
• fix(release): make the Portal release build run, and correct the runbook order 73d4319
• fix(website): restore the download status element and the notarization gate 9255f35
• nit: remove terrible ui warning 69f67d9
• release: open the Sigil bootstrap channel for v0.1.0 8eb3156
• docs(website): stop blaming notarization for the missing Portal download 78f9065
• docs: align release language with the bounded multi-viewer session 5fc8b5f
• fix(ci): let the Windows Portal compile guard actually run a149171
• fix(proof): stop rejecting ffmpeg builds that do have libx264 1fe6c4b
• test(proof): cover enrolled control-v2 admission and per-viewer revisions 21a5aeb
• docs: state the bounded multi-viewer product boundary dfe7df5
• test(proof): make the replacement and focus-handoff gates deterministic b2e61ed
• fix: bind authenticated media to the advertised authorization revision 9c040f6
• fix(host): close the legacy/multi-viewer admission race and reclaim focus state dc29737
• feat(host): default to the in-process encoder and expose shadow mode ca1d294
• docs(website): correct signing claims and refresh the roadmap 3b65bac
• feat: enforce multi-viewer acceptance bounds b1e8e2a
• feat: aggregate viewer feedback and isolate stalls 0f1134c
• build: package Portal across the os/arch matrix without Apple notarization 9588dac
• feat: complete exclusive focus handoff 0d9d3bb
• feat: admit bounded concurrent viewers da393bb
• feat: share host-owned media generations 19a8476
• feat: administer multiple enrolled viewers 093e2c5
• feat: authenticate relay-ready media objects e267bba
• feat: establish explicit v2 single-viewer sessions 5a2bab9
• nit: ui changes from UAT c369cdd
• test: follow the input module split in the compatibility identifier gate f07125e
• refactor: split input.rs so keymap edits stay clear of ACL security code 7599473
• fix: surface the root cause of a Decky readiness timeout c8aee34
• perf: hold media payloads behind Arc to drop per-client frame copies c8d7846
• fix: close architecture review follow-up gaps 28d94b5
• build: assemble portal-dist in build.rs instead of a bash hook e388c67
• ci: assemble portal-dist before plain-cargo builds in demo gate 0ff59ad
• docs: name the Sigil release target contract in the README 692ddbb
• fix: report degraded appliance status from every fallible serve step f0d2fd0
• refactor: single-source the MoQ catalog document in sigil-protocol c4ae230
• refactor: retire legacy v0/v1/v2 media tiers and the base64 JPEG fallback 5f090ad
• fix: bundle Portal webview payload from an explicit runtime allowlist d90cfb4
• fix: align frame-channel flag bits with sigil-protocol wire flags f09bb62
• chore: remove personal absolute paths from public docs 83a3d0a
• docs: rewrite readme as a public project description 2837eab
• docs: preserve user-owned Portal geometry c4202fa
• fix(portal): preserve user window geometry c95ad23
• docs: use software auth hardware proof ec801cc
• fix(host): reconcile adaptive control cadence d5a0c34
• docs(input): clarify physical keyboard contract 68b1d7b
• fix(input): forward extended physical keyboard codes 9ed4221
• test(ci): isolate cross-build fixtures from ambient mode ac5d878
• fix(portal): bound JPEG fallback decoding 5c7f437
• fix(host): retain coalesced adaptive recovery barrier f409f48
• perf(source): scan Annex-B input incrementally 28acfe1
• test: issue invitation with live authorization writer 19fb66d
• test(host): stress adaptive commit coordination 57984d8
• feat(portal): force JPEG in debug hardware tests 8e8749f
• refactor(host): decouple adaptive commit acknowledgements d244018
• fix: bound authorization writer ownership 77aa55d
• fix(portal): report JPEG presenter queue exactly 76ec14f
• fix(portal): make JPEG fallback latest-frame-wins a57de27
• fix(ci): enforce exact demo-gate contract 221e06e
• test(ci): prove required cross-build execution e64a7bb
• refactor(release): name Sigil assets by target contract 795ac58
• test(ci): reject semantic cross-build bypasses fb928dc
• test(ci): reject cross-build gate bypasses 85e6a8e
• ci(gate): require the glibc cross build in PRs da9a38a
• test(auth): cover representable hmac-secret responses 5bbfd34
• fix(auth): reject malformed hmac-secret responses 62b8518
• docs(test): require real bypass connections 5761640
• docs(pointer): describe bounded motion visibility recovery 271b029
• fix(pointer): add portable Gamescope feedback fallbacks 0fb6f4c
• fix(test): fail closed on shell test discovery 3ad952a
• feat(portal): gate non-macOS relative pointer capture ba7108a
• docs: require authenticated identity hardware proof b6747c2
• test(compat): bind frozen identifiers across consumers aefc7bd
• fix(compat): expose frozen input tuple to linux backend c53a1e4
• docs(compat): freeze identity and appliance identifiers 0218797
• docs(uat): require a minimal hardware proof matrix (#111) bb4cb78
• fix(uat): support display-manager-independent autologin (#110) c52eb4c
• fix(input): neutralize cancelled and panicked sessions (#109) f84cb13
• feat(input): support one-user uinput ACLs (#108) 0065c99
• test(input): verify Gamescope pointer synchronization (#107) e3c7bce
• fix(streaming): admit live damage-driven startup (#106) 3a7e6f5
• fix(sigil): probe GStreamer properties programmatically (#105) 125ce65
• fix(sigil): probe VA-API capability across drivers (#104) f6cc570
• fix(portal): enforce H.264-only media contract (#103) 0db73cf
• fix(portal): probe H.264 decoder support (#102) 2cb5380
• fix(test): isolate appliance hardware preflight 26e145f
• fix(test): make appliance shutdown deterministic dc8cb64
• fix(test): pin invitation preflight time 6a079fe
• fix(test): require explicit host bypass feature 549b904
• docs(test): show bounded bypass launch 6223d38
• feat(test): add bounded host auth bypass 9399b66
• fix(portal): report iroh-moq transport 08439e9
• fix(install): harden activation instructions 209456b
• fix(install): ship portable host activation 8d2730e
• fix(uat): accept native 1280x800 panels 0fce3e4
• fix(uat): bound VA capability inspection f225f0b
• fix(uat): discover the exact AMD VA encoder e41f0d4
• fix(test): tolerate asynchronous pointer feedback a505aa3
• test(input): gate Gamescope pointer recovery 8d1c8ea
• test(input): probe compositor pointer feedback 9215ed8
• fix(input): reconnect Gamescope pointer feedback 1901365
• fix(capture): close teardown edge cases 3d722d9
• fix(capture): serialize Gamescope consumers 8b596c4
• fix(config): align managed directory security 7f4c8d2
• fix(appliance): support offline management runtime 1979ff8
• refactor(portal): delegate frame acknowledgements bc8f8b6
• refactor(portal): extract client connection lifecycle cd9cb2e
• refactor(portal): extract video delivery ccaf747
• refactor(portal): extract media control 8b95efd
• refactor(portal): extract grouped media receiver c948dc8
• refactor(portal): extract input delivery 3f5d54c
• refactor(portal): extract adaptive feedback 7770f80
• refactor(portal): extract upstream MoQ receiver 77aacb2
• refactor(portal): extract v2 object receiver b3ed6c0
• refactor(portal): extract audio delivery c1bdfb5
• refactor(portal): extract media transport 4fad948
• refactor(portal): extract client media metrics 5b78b5d
• refactor(portal): extract frame channel c5535b9
• refactor(portal): move media support modules 8c5a03f
• refactor(server): extract protocol handlers dc79b65
• refactor(server): extract moq transport 1a9d5ab
• refactor(server): extract media v3 5f6d0fd
• refactor(server): extract media v2 8b97c3b
• refactor(server): extract startup selection a0e7153
• refactor(server): extract adaptive control 6aa71e0
• refactor(server): extract session lifecycle bf395a4
• test(portal): pin moved codec branches ba15129
• refactor(portal): extract window runtime 80eafed
• refactor(portal): extract pointer feedback runtime 2e92ea7
• refactor(portal): extract controller runtime 0e5a5dc
• refactor(portal): extract control runtime a745dc9
• refactor(portal): extract input runtime 0dc7222
• refactor(portal): extract stream runtime 6d8197b
• refactor(portal): extract audio pipeline a8f423f
• refactor(portal): consolidate session state 40d1df9
• refactor(portal): extract connection state 2371dd2
• refactor(portal): extract video pipeline f1e5697
• refactor(portal): extract keyboard mapping 8d859d2
• refactor(source): finish module tree ffbec3d
• refactor(source): extract in-process encoder cd3aee4
• refactor(source): extract external capture pipeline 1468793
• refactor(source): extract capture preflight a42e112
• refactor(source): extract Annex-B parser 61922d8
• fix(streaming): resolve native dimensions per session 66f19fc
• test(streaming): add a bounded feedback smoke probe 4304e71
• fix(streaming): keep feedback available for cqp hosts 1ee0f08
• test(streaming): gate a Gamescope stall proof fb210b4
• fix(streaming): require frame progress for resolution recovery 033572a
• test(moq): prove forced relay recovery b35298a
• test(moq): prove bounded slow-consumer recovery 11c1a99
• test: preserve Bazzite hardware acceptance (#36) 8010a8e
• fix: retain GStreamer paths for Zig release links (#35) 7920c5d
• ci: build commit-pinned Sigil hardware UAT candidates (#34) 60fadde
• test: authenticate persistent hardware probes (#33) deefbce
• Force bounded recovery IDRs without blocking media (#32) f36cd09
• feat: make Sigil bootstrap self-contained (#31) ef404d7
• feat: add controller-first Decky management for Sigil (#30) be30ff3
• feat: add transactional Sigil configuration (#29) b44b012
• feat: add offline Sigil enrollment reset (#28) 81b3725
• feat: add Sigil appliance status foundation (#27) fae73f2
• feat: add bounded Portal network diagnostics (#26) 9816a4e
• test: bind Sigil bootstrap trust contract (#25) 8b49df3
• feat: add versioned Goq MoQ catalog discovery (#24) d72ae8f
• test: pin upstream Gamescope capture contract (#22) 4e16190
• feat: package in-process GStreamer host (#21) 54a4b7d
• feat: resolve native Gamescope dimensions (#20) 1c3e7a9
• Harden invitation acceptance evidence (#19) 22d7031
• Adapt stream resolution to motion and pressure (#18) 203e13e
• Apply bounded adaptive bitrate decisions (#17) 42b178f
• Add opt-in in-process GStreamer control foundation (#16) d0bb8e0
• Use upstream Iroh/MoQ for authenticated media (#15) e30e069
• Add grouped-media recovery groundwork (#14) 3d4d6d0
• Harden public-alpha enrollment and release delivery (#13) 16ad85a
• refactor: name Portal frontend directory (#12) 376d2e2
• fix: deploy website as Cloudflare Worker c3a34bf
• docs: replace inherited agent guide b49c737
• feat: reveal sections with a Bayer dither dissolve 5f993f1
• fix: shorten Sigil install command 4033b17
• feat: add fail-closed Portal platform matrix dcbd80f
• feat: define public release delivery 8eb370c
• fix: raise the wordmark g to cap height 2a3329b
• fix: set the wordmark g in lowercase 0b7955b
• ci: prepare goq.sh Cloudflare Pages publishing 92e1737
• fix: describe the streamed session as SteamOS fba67e5
• fix: keep landing page chrome text unselectable 565441f
• fix: finish website wave interaction 4540bec
• feat: refresh Portal and goq.sh presentation d4a1ae8
• refactor: establish Portal and Sigil product names 23cb438
• fix: restore WebKit mouse button delivery 7e35f38
• feat: add goq.sh landing page f59ff49
• fix: adopt identical legacy package assets 4c8b625
• fix: reorder independent media completions 635bb94
• fix: drain Gamescope encoder without sink pacing 9549125
• fix: restart Gamescope capture without overlap c69d7a8
• fix: canonicalize Bazzite release roots b7809e9
• feat: make video transport drop-aware 0bc5b44
• fix: provision loopback media dependency e3268e4
• fix: support CI ShellCheck version 8ec44d1
• fix: compile cursor grab on Linux 3ae1092

Older commits in this release aren't listed.