Changelog

Gateway & Membership

• **ClientGateway (R0–R2):** DM conversation materialization, suppression preparation, and community roster routing through `getResolvedClientGateway()`.
• **Profile runtime:** `ProfileMessageBus`, `getResolvedProfileId()` migration, same-process profile isolation tests.
• **Community Phase 3:** `community-membership-ingress`, coordinator-owned ledger mutations, provisional invite join, terminal decline paths.
• **Cooperative redaction infrastructure (experimental, UI off):** display gate, thread redaction owner, `pnpm verify:dm-redaction`.
• **Documentation restructure:** `/docs` root is navigation-only; encyclopedia, program, gateway, messaging, and archive shelves — see `docs/README.md`, `docs/program/PROGRAM.md`, `docs/releases/v1.5.0-release.md`.
• DM read path favors account projection when read cutover is enabled.
• Membership mutations converge on evidence-backed ingress (legacy DM-driven authoritative joins reduced).
• **DM cooperative redaction UI** — not shipped; see `docs/messaging/redaction-v1.5-deferred.md` and `docs/messaging/cooperative-redaction-future.md`.
• Some dual-publish paths (`window` + profile bus) remain during migration.
• Phase 3 M5 live gossip A/B may require manual closure per `docs/program/v1.5.0-phase3-scope.md`.

Relay Resilience

• **DM Operation Ledger** (Shadow Mode): Foundation for message deletion reliability
• **DM Message Queue**: Retry resilience for unreliable relays
• **Send with Retry**: Drop-in replacement for send pipeline
• 37 DM Ledger tests passing (reducer correctness, idempotency, anti-resurrection)
• TypeScript: 0 errors
• Non-invasive: existing behavior unchanged, ledger runs in shadow mode

M3 Stabilization

• **M1 Verification Diagnostics**: Comprehensive diagnostics for all M1 goals
• **M1 Replay Tests**: Runtime replay verification suite
• **Goal 2: CAS Media Recovery**: Restore convergence for missing media blobs
• **Goal 4: Security Integration**: Wire security services to production flows
• **Goal 5: Relay Capability Badges**: Community mode and relay tier display

• **Key Verification**: Visual fingerprint/identicon for cross-device identity verification
• **Key Change Detection**: Security alerts for unexpected identity key changes
• **Relay Trust Scoring**: Dynamic relay reputation system
• **Security Audit Logging**: Local encrypted security event log

• **Android/mobile build compilation error** in profile isolation code:

• **Proof-of-Work (PoW) account creation** to prevent automated bot signups:
• **B→A DM visibility gap** - messages from Account B not appearing in real-time for Account A:

• **Duplicate invitation prevention** in "Invite to Group" dialog:
• **Light/dark theme compatibility** for dialog components:

• **Removed mandatory signing requirements for desktop releases** (principled decision):
• Simplified release workflow by removing signing precheck logic and conditional