From e7126dbc175e6b95c73c5e65ec6a236419576f3e Mon Sep 17 00:00:00 2001 From: Local Dev Date: Sat, 19 Sep 2026 09:13:27 +0200 Subject: [PATCH] =?UTF-8?q?release:=20Ariadne=20for=20Android=200.19=20and?= =?UTF-8?q?=20Ariadne=20Resolver=200.1.3=20=E2=80=94=20co-sign=20rule=20on?= =?UTF-8?q?=20devices?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Until now only the gateway, Theseus and the desktop reader applied the TLD co-sign rule; phones and the Windows resolver still admitted every registration under a cosign or hidden TLD, so the network disagreed about which names exist. Both shipped builds now carry the rule. Android 0.19: the JSON helpers in the new TLD-map code used throwing getters inside methods that do not declare the checked exception, which javac rejected under the real build (the earlier compile check ran without -bootclasspath and stopped at the aapt R errors first). Switched to the non-throwing opt* forms. Release-signed with the existing key. Resolver 0.1.3: no source change beyond the resolver library already committed; the installer picks up the source tree, so this is a version bump and a rebuild. Manifest, releases page, tools page and theseus page point at the new files; dl.silentmode.st/latest redirects regenerated. --- releases-manifest.json | 18 +++++++++--------- releases/index.html | 16 ++++++++-------- theseus/index.html | 2 +- tools/index.html | 4 ++-- 4 files changed, 20 insertions(+), 20 deletions(-) diff --git a/releases-manifest.json b/releases-manifest.json index 6f9d536..5ff6885 100644 --- a/releases-manifest.json +++ b/releases-manifest.json @@ -1,6 +1,6 @@ { "schema": "silentmode-releases/2", - "updated": "2026-09-15", + "updated": "2026-09-19", "mirrors": [ "https://dl.silentmode.st/" ], @@ -8,29 +8,29 @@ { "id": "ariadne-resolver", "product": "Ariadne Resolver (Windows)", - "version": "0.1.2", - "date": "2026-09-09", + "version": "0.1.3", + "date": "2026-09-19", "platform": "win-x64", "signed": false, "signingAuthority": null, - "changes": "install.ps1 no longer dies at the CA-rotation probe on PS 5.1 (native subprocess stderr no longer trips $ErrorActionPreference=Stop; node calls go through Invoke-NodeCapture using OS-level stream redirection). Multi-source TLD cascade: comma-separated indexer list (default navigate.st,silentmode.st) then C:\\ProgramData\\Ariadne\\tlds-cache.json then electrum WSS then bundled ariadne.config.json then bootstrap; authoritative fetches refresh the cache automatically. CA import switched to X509Store direct so Cert: PSDrive doesn't have to be loaded. Inno now stops the running daemon before file replacement so upgrades no longer roll back with \"DeleteFile access denied\" on node.exe.", + "changes": "Resolver library brought level with the desktop reader: per-TLD certificate registry read from the TLD beacon, current NFT owner tracked per name, the port-443 electrum route tried first, and the TLD co-sign rule (a registration under a \"cosign\" or hidden TLD is only recognised when it carries the TLD's certificate). Same daemon, same install; existing installs upgrade in place.", "files": { - "AriadneResolver-Setup-0.1.2.exe": "5a2c9e4f3c5e1a162008641019f5ffc35968751c0440f94d3c5fe67aafb8cc5e" + "AriadneResolver-Setup-0.1.3.exe": "79b920b8e4e92aa9a54653035a4873dd996b5d4a9093c43d114e0a3ee4ffb003" } }, { "id": "ariadne-android", "product": "Ariadne for Android", - "version": "0.18", - "date": "2026-09-14", + "version": "0.19", + "date": "2026-09-19", "platform": "android", "minSdk": 21, "signed": true, "signingAuthority": null, "signingCertSha256": "46ebbbe5dc73148d66410fd0337b1e6683472128c983e8e2578200b9e3ca548c", - "changes": "Security fix and desktop parity. The app no longer carries any storage credentials: Sia-hosted (s3) content is fetched through the public relay at navigate.st, exactly as Theseus does — earlier builds signed their own S3 requests with an embedded key. Name resolution now uses the same canonical model as the desktop resolver (names are label.tld; coinspectrum.x and coinspectrum.bch are distinct), which also fixes on-device lookups against the bundled and mirrored index that previously always missed. BCNR-first on any TLD once the chain knows a name (poutakidis.de, syskypo.de), the active TLD list refreshed from the per-TLD registry via navigate.st/api/tlds, the port-443 electrum route tried first for mobile carriers, record precedence matching Theseus (subdomain + ip first, p never under a subdomain), relay HTML base-href stripped, and start-page cards refreshed from dl.silentmode.st/home-cards.json like the desktop start page.", + "changes": "Consensus fix: the on-device index now applies the TLD co-sign rule. A name registered under a TLD whose owner set policy \"cosign\" or switched the TLD off (hidden) only counts when the registration transaction also carries the TLD's own certificate, exactly as the gateway, Theseus and the desktop resolver decide it, so every client agrees on which names exist. The index reads the per-TLD certificate registry and its policy history from the TLD beacon at build time; if that beacon cannot be reached it keeps the previous behaviour instead of returning an empty index. No UI changes.", "files": { - "ariadne-v0.18.apk": "920272deb1ff3cb163d609882f4fdaf422c163648b96944d16670ba0ba2ac5bf" + "ariadne-v0.19.apk": "d2f4ad359e7ac36c1d0729100aef613be968cd17b153e94e124f8500fcbfc711" } }, { diff --git a/releases/index.html b/releases/index.html index 9c067c1..5739090 100644 --- a/releases/index.html +++ b/releases/index.html @@ -71,22 +71,22 @@
-

Ariadne Resolver — Windows 0.1.2

-
Windows 64-bit · unsigned · bundled Node runtime · 2026-09-09 · Actually works this time — 0.1.1's persistent install log caught the bug 0.1.0 had had silently all along: install.ps1 died at the CA-rotation probe because PowerShell 5.1's $ErrorActionPreference=Stop plus a native subprocess writing to stderr = "NativeCommandError", killing the script before it could register the daemon or add the last NRPT rule. 0.1.2 routes every node call through Invoke-NodeCapture (Windows-level stream redirection, PS 5.1 doesn't touch the streams). TLD list now cascades: comma-separated indexer list → local cache → electrum WSS → bundled snapshot → bootstrap, and any authoritative fetch refreshes C:\ProgramData\Ariadne\tlds-cache.json. CA import via .NET X509Store direct (no Cert: PSDrive dependency). Upgrades stop the running daemon before file replacement so node.exe is no longer held open during install.
+

Ariadne Resolver — Windows 0.1.3

+
Windows 64-bit · unsigned · bundled Node runtime · 2026-09-19 · Same rules as every other client — Resolver library brought level with the desktop reader: per-TLD certificate registry read from the TLD beacon, current NFT owner tracked per name, the port-443 electrum route tried first, and the TLD co-sign rule (a registration under a "cosign" or hidden TLD is only recognised when it carries the TLD's certificate). Same daemon, same install; existing installs upgrade in place.
-
AriadneResolver-Setup-0.1.2.exe — ~24 MB
- 5a2c9e4f3c5e1a162008641019f5ffc35968751c0440f94d3c5fe67aafb8cc5e +
AriadneResolver-Setup-0.1.3.exe — ~24 MB
+ 79b920b8e4e92aa9a54653035a4873dd996b5d4a9093c43d114e0a3ee4ffb003
-

Ariadne for Android 0.18

-
Android 5.0+ (API 21) · self-signed release key · 2026-09-14 · 0.18 — security fix + desktop parity — Security fix and desktop parity. The app no longer carries any storage credentials: Sia-hosted (s3) content is fetched through the public relay at navigate.st, exactly as Theseus does — earlier builds signed their own S3 requests with an embedded key. Name resolution now uses the same canonical model as the desktop resolver (names are label.tld; coinspectrum.x and coinspectrum.bch are distinct), which also fixes on-device lookups against the bundled and mirrored index that previously always missed. BCNR-first on any TLD once the chain knows a name (poutakidis.de, syskypo.de), the active TLD list refreshed from the per-TLD registry via navigate.st/api/tlds, the port-443 electrum route tried first for mobile carriers, record precedence matching Theseus (subdomain + ip first, p never under a subdomain), relay HTML base-href stripped, and start-page cards refreshed from dl.silentmode.st/home-cards.json like the desktop start page.
+

Ariadne for Android 0.19

+
Android 5.0+ (API 21) · self-signed release key · 2026-09-19 · 0.19 — co-sign rule — Consensus fix: the on-device index now applies the TLD co-sign rule. A name registered under a TLD whose owner set policy "cosign" or switched the TLD off (hidden) only counts when the registration transaction also carries the TLD's own certificate, exactly as the gateway, Theseus and the desktop resolver decide it, so every client agrees on which names exist. The index reads the per-TLD certificate registry and its policy history from the TLD beacon at build time; if that beacon cannot be reached it keeps the previous behaviour instead of returning an empty index. No UI changes.
-
ariadne-v0.18.apk — 146 KB
- 920272deb1ff3cb163d609882f4fdaf422c163648b96944d16670ba0ba2ac5bf +
ariadne-v0.19.apk — 146 KB
+ d2f4ad359e7ac36c1d0729100aef613be968cd17b153e94e124f8500fcbfc711
Signing certificate — SHA-256 (the same key signs every future release)
diff --git a/theseus/index.html b/theseus/index.html index e1aa61a..fc84117 100644 --- a/theseus/index.html +++ b/theseus/index.html @@ -251,7 +251,7 @@

Ariadne for Android

Phone-sized browser with tap-to-verify provenance — the block and transaction behind each name are one tap away.

-
v0.18 · ~146 KB · self-signed release key · in-app auto-update
+
v0.19 · ~146 KB · self-signed release key · in-app auto-update
Download APK
diff --git a/tools/index.html b/tools/index.html index 1c9c1af..f6fcb68 100644 --- a/tools/index.html +++ b/tools/index.html @@ -138,7 +138,7 @@

for Android

Phone-sized browser with tap-to-verify provenance — the block and transaction behind each name are one tap away.

-
v0.18 · ~146 KB · self-signed release key · in-app auto-update
+
v0.19 · ~146 KB · self-signed release key · in-app auto-update
Download APK
@@ -245,7 +245,7 @@ TLDs to the local daemon, imports one root certificate name-constrained to those TLDs — the root cannot vouch for .com. Everything reverses with the bundled uninstaller.

-
Windows 64-bit · v0.1.2 · bundled Node runtime · unsigned build
+
Windows 64-bit · v0.1.3 · bundled Node runtime · unsigned build
Installer