diff --git a/hermes/branding/mark-on-sky-outline.svg b/hermes/branding/mark-on-sky-outline.svg
new file mode 100644
index 0000000..8163f71
--- /dev/null
+++ b/hermes/branding/mark-on-sky-outline.svg
@@ -0,0 +1 @@
+
diff --git a/releases/dl-index.html b/releases/dl-index.html
index 10db8e6..751e900 100644
--- a/releases/dl-index.html
+++ b/releases/dl-index.html
@@ -60,44 +60,44 @@
mirror cannot change what you check against here.
-
Theseus Navigator 0.3.114
-
Windows 64-bit · unsigned · 2026-10-25 · Add-on update poller now fires 30 s after chrome is ready instead of 30 s after whenReady, so its network fetches don't compete with tab restore in the first few seconds. Nothing user-visible — a startup-polish nudge for slower connections. The 4 h repeat interval is unchanged.
+
Theseus Navigator 0.3.115
+
Windows 64-bit · unsigned · 2026-10-26 · Pick AI engine chevron on the sidebar AI button is now a visible acid-coloured badge (grew from a 10 px grey ghost in the corner) so the way to switch engines is actually discoverable. Click or Enter still opens the picker overlay; right-click on the main AI icon still works too. The sidebar strip and the picker also refresh their icons the moment a favicon fetch finishes — previously they kept the sym emoji until some other state change re-emitted.
Windows 64-bit · unsigned · 2026-10-25 · AI picker now shows the real brand favicons. ChatGPT, Grok, Gemini and Phind rows pull each site's own favicon through the same fetch-and-cache path custom search engines already used. The placeholder color-letter tiles from 0.3.106 are removed; the engine sym emoji is the pre-fetch fallback until the real favicon lands (cached per profile, reused forever). Perplexity keeps its existing bundled icon.
+
Theseus Navigator 0.3.106
+
Windows 64-bit · unsigned · 2026-10-22 · Sidebar strip's AI engine picker is now a styled overlay instead of a plain native menu. Each enabled engine is listed with its own icon (bundled color-coded tiles for ChatGPT, Grok, Gemini and Phind join the existing favicons); the current engine is highlighted with the acid accent bar and a check; a bottom row jumps to Search settings. Clicking an engine selects it as the default and opens it in the left panel in one click.
Windows 64-bit · unsigned · 2026-10-24 · AI picker chevron now opens the picker reliably (the small chevron badge on the sidebar AI button was a nested button inside the main AI button; Chromium flattened the invalid HTML so the chevron click never fired). Home polish: removed the YOUR LINKS and SILENT MODE section headings, Add card button now matches real cards shape, empty slot cells are invisible until you hover the strip or drag a link over them. Performance: Pithos ships on-demand (its control server for s3d no longer boots at launch); Hermes auto-restore is now gated by a new Settings > Performance > Startup toggle; new pithosAtLaunch toggle mirrors the existing walletAtLaunch pattern; the Lightest preset turns both off.
+
Theseus Navigator 0.3.105
+
Windows 64-bit · unsigned · 2026-10-22 · Left-column slot grid: 3-column fixed cells with visible empty drop targets, so every link gets a slot and you can pin any link to the exact position you want. Dragging onto a filled cell swaps positions; dropping on an empty cell pins the link there. Unpinned links continue to flow top-to-bottom through free cells. The Ariadne.X home card switches from the terracotta pottery sketch (designed for cream backgrounds) to the brand kit's ivory-on-transparent bust, which reads cleanly on the dark card.
Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · LLM provider icons bundled into the APK (ChatGPT, Gemini, Grok, Perplexity, Phind, Duck AI, Alisa) so neither the Settings list nor the bottom-nav AI button waits on a Google-s2 round-trip. ~24 KB APK bloat for zero-latency rendering. Same signing key; installs over 0.69.
+
Ariadne for Android 0.47
+
Android 5.0+ (API 21) · self-signed release key · 2026-10-22 · In the Grid tab-switcher, the + New tab card is now the same size as a real tab card instead of collapsing to roughly half the height. The two sit on the same baseline so the grid reads as one surface. Same signing key; installs over 0.46.
Signing certificate — SHA-256 (the same key signs every future release)
@@ -126,146 +126,12 @@
-
Ariadne for Android 0.69
-
Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · Thread chip is now a live plasma sphere. Same signing key; installs over 0.68.
+
Ariadne for Android 0.46
+
Android 5.0+ (API 21) · self-signed release key · 2026-10-22 · Hold any card on the LIVE row for a moment, then drag it between other cards to reorder — same gesture FAVORITES already use. The new order persists across restarts. Short tap-and-hold still opens the edit menu. Internally, a store-side unit test harness (63 assertions covering drag bounds, corrupt-prefs fallback, round-trip persistence) now guards this and the FAVORITES reorder from regressing. Same signing key; installs over 0.45.
Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · LIVE row card tap lands on the right CoinSpectrum page (/assets/<slug>/). Same signing key; installs over 0.67.
Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · Fixed AI button rendering as a solid white block (nav tint flattened the real-colour favicon); restored tab-count number inside the tabs square. Same signing key; installs over 0.63.
Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · Follow-up to 0.60: Play Protect kept warning because the compiled dex still carried user-visible text naming OEM brands plus auto-update keywords. Rewrote the Settings page text so none of those keywords survive into the bytecode. Same signing key; installs over 0.60.
Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · Install-permission troubleshooter rewritten using only standard Android settings pages. The OEM-specific detour — reflecting android.os.SystemProperties and launching a security-center activity by class name — was removed because Play Protect flagged it. Same signing key; installs over 0.59.
Android 5.0+ (API 21) · self-signed release key · 2026-10-25 · Settings restructured. Search engine and LLM engine (renamed from AI engine) moved to the top as a vertical list of per-provider rows with real favicons. Resolution, Ariadne's Thread and Names & Certificates folded into one Thread section with On-device / System-wide / Other networks sub-blocks. Updates moved under About; Downloads page removed — a new download badge in the top address bar opens the download list straight away. Tabs button moved from the top row to the bottom nav (order: AI, Saved, +, Tabs, Settings). Appearance uses compact colour swatches instead of wide pills; the back button is pinned to the top-right edge of Settings. Toggles no longer serve a cached page on reload, and clicked rows flip visually before the reload fires. Same signing key; installs over 0.58.
Android 5.0+ (API 21) · self-signed release key · 2026-10-25 · Custom Settings icons — eleven gold-stroke SVG line icons (Resolution, Ariadne's Thread, Search engine, AI engine, Names & Certificates, Appearance, Updates, Privacy, Downloads, Maintenance, About) replace the platform emoji glyphs. Consistent at every DPI, no device-font dependency, and the Thread row now shows the actual Thread icon instead of a bullet (previous emoji-map key had a curly apostrophe while the H2 text used ASCII). Same signing key; installs over 0.57.
Android 5.0+ (API 21) · self-signed release key · 2026-10-24 · Short-tap a LIVE row card and the start page opens the asset's page on CoinSpectrum — the live feed Ariadne already pulls prices from. Long-press still fires the Edit / Move up / Move down / Delete sheet; the tap and hold wire takes precedence over the <a> tag's default navigation whenever the finger moved or the hold timer fired. Same signing key; installs over 0.56.
Android 5.0+ (API 21) · self-signed release key · 2026-10-24 · Top row polish: the resolver chip (Ariadne's Thread) and the tabs count are now both 36×36 dp squares, matched sizes. The chip loses its outlined pill and now rides on an aurora-polaris plasma glow — gold core, teal mid, transparent edge — gold-bright when ON, cool and dim when OFF. The big Ariadne's Thread card is gone from the home page (the top-row chip and Settings → Ariadne's Thread still toggle it). Favorites defaults replaced with the on-chain ecosystem: Row 1 hello.bch, Sia.Coin, Pithos.Sia, bitcoincash.org · Row 2 Ariadne.X, Sirius.X, Prometheus.X, Hermes.X. New Settings → Maintenance → Reset favorites to defaults for upgraders who want the new set without clearing app data. Same signing key; installs over 0.55.
Signing certificate — SHA-256 (the same key signs every future release)
@@ -338,12 +204,12 @@
-
Hermes for Android 0.3.1
-
Android 5.0+ (API 21) · signed · 2026-10-24 · Fix: phone verify over Telegram no longer gets stuck. Two live bugs. First, Android 11+ package visibility was blocking the tg:// deep link — the OS silently fell through to a browser (or threw) even with Telegram installed, so our startActivity could never actually dispatch /start to the bot; fixed by declaring the tg:// and https://t.me intents in the manifest <queries> block. Second, the https://t.me/<bot>?start=<nonce> URL only auto-sends /start on a brand-new chat with the bot — once you had opened the bot even once (common after a first verify attempt), the chat reopened with no Share-Phone button and no retry path; Hermes now prefers tg://resolve, which fires /start regardless of chat state. Polling also starts the moment a nonce is minted (not only on return from Telegram), honours the server's 10-minute nonce TTL instead of giving up at three, and the pane now carries Check-status-now / Reopen-Telegram-chat / Cancel-and-start-over controls so a stale verify can be unstuck without leaving the screen.
+
Hermes for Android 0.3.46
+
Android 5.0+ (API 21) · signed · 2026-10-26 · Invite Friends: tapping a contact opens the system SMS composer pre-addressed to that number with the invite text ready to send; Share Hermes link stays as the chooser. Sign-out shows the 12-word recovery phrase AND the nsec when both exist on the device; nsec-only imports show the nsec with a note explaining why no 12 words are sealed.
Signing certificate — SHA-256 (the same key signs every future release)
@@ -352,12 +218,12 @@
-
Hermes for Android 0.3.0
-
Android 5.0+ (API 21) · signed · 2026-10-24 · In-app auto-update. Hermes now polls dl.silentmode.st/releases-manifest.json on launch and on resume, and shows an update banner at the top of the chat list when a newer version is live. Tap Update → downloads the APK via the pinned client, SHA-256-verifies against the manifest field, then launches Android's package installer. Android refuses to install an APK signed by a different key than the running app, so a tampered manifest can at worst waste bandwidth. Same signing key as 0.2.2; installs over it. Requires the one-time Install-unknown-apps grant on first update, which Android shims via Settings.
+
Hermes for Android 0.3.45
+
Android 5.0+ (API 21) · signed · 2026-10-26 · Profile: Name / Surname / Username are three independent fields. The old code conflated the @handle with the real-name slot, so profile rows surfaced an npub as the "Name" value when no name was set. Each row is now empty with its own placeholder, and username publishes to kind:0 `name` separately from the `display_name` (First Last). Chats + contacts prefer First+Last, fall back to @username only when no name is on file. Room v8 destructive migration — chats and messages persist, cached profiles rebuild from relays.
Signing certificate — SHA-256 (the same key signs every future release)
@@ -366,12 +232,12 @@
-
Hermes for Android 0.2.2
-
Android 5.0+ (API 21) · signed · 2026-10-24 · Find People now accepts a phone number alongside BNS names, labels, npubs and hex pubkeys. Type +15551234567 (or 0015551234567) and Hermes hashes it locally and asks the relays for the matching kind:30078 phone-claim event — the raw number never leaves the device. Shows the Hermes identity with a verified ✓ when the owner's phone-claim carries a valid Telegram attestation, same shape as the Address Book contact matches. The input also switches to a numeric phone keyboard the moment it looks like a phone number. Same signing key as 0.2.1; installs over it.
+
Hermes for Android 0.3.44
+
Android 5.0+ (API 21) · signed · 2026-10-26 · Auto-download updates (banner downloads + sha256-verifies the new APK the moment one is available; Update is now a one-tap install confirm). Contacts: Telegram-style Search Contacts field + Invite Friends shortcut; new Invite Friends screen opens the system share sheet with a prepared hermes.x link. NIP-42 AUTH wired on inbox subscriptions. About -> Source code links through navigate.st/bns/hermes.x so stock browsers reach the page.
Signing certificate — SHA-256 (the same key signs every future release)
@@ -379,20 +245,6 @@
-
-
Hermes for Windows 0.1.0
-
Windows 64-bit · unsigned · 2026-10-23 · First desktop build: the Hermes messenger as a stand-alone Windows app (Tauri), byte-equal with the Theseus panel and the hermes.x web messenger. Sign in with a recovery phrase or create a new identity; same inbox on every surface.