Silent Mode — releases

Windows 64-bit · unsigned · 2026-10-25 · Add-on update poller now fires 30 s after chrome is ready instead of 30 s after whenReady, so its network fetches don't compete with tab restore in the first few seconds. Nothing user-visible — a startup-polish nudge for slower connections. The 4 h repeat interval is unchanged.

Windows 64-bit · unsigned · 2026-10-25 · AI picker now shows the real brand favicons. ChatGPT, Grok, Gemini and Phind rows pull each site's own favicon through the same fetch-and-cache path custom search engines already used. The placeholder color-letter tiles from 0.3.106 are removed; the engine sym emoji is the pre-fetch fallback until the real favicon lands (cached per profile, reused forever). Perplexity keeps its existing bundled icon.

Windows 64-bit · unsigned · 2026-10-24 · AI picker chevron now opens the picker reliably (the small chevron badge on the sidebar AI button was a nested button inside the main AI button; Chromium flattened the invalid HTML so the chevron click never fired). Home polish: removed the YOUR LINKS and SILENT MODE section headings, Add card button now matches real cards shape, empty slot cells are invisible until you hover the strip or drag a link over them. Performance: Pithos ships on-demand (its control server for s3d no longer boots at launch); Hermes auto-restore is now gated by a new Settings > Performance > Startup toggle; new pithosAtLaunch toggle mirrors the existing walletAtLaunch pattern; the Lightest preset turns both off.

Windows 64-bit · unsigned · bundled Node runtime · 2026-10-01 · Every subsystem is now individually switchable and reports its own state. New endpoint http://127.0.0.1/api/status returns a full state report (daemon version + startup + policy + permitted TLDs + ports + upstream + gateway; index size + warm-start source; per-source enabled/lastAttempt/lastSuccess/lastError/counters for snapshotHttps + electrumWss + perQueryLookup + diskCache + localApi). C:\ProgramData\Ariadne\policy.json extended with a `sources.<name>.enabled` block (hot-reloaded every 5 s alongside the collision policy) -- flip any source off to isolate a path or measure without it. Turning localApi off returns 503 with a hint pointing at the config file. Turning diskCache off skips writing bns-name-snapshot.json AND skips reading it at warm-start. Turning snapshotHttps off skips the HTTPS refresh; electrumWss off skips the WSS refresh; perQueryLookup off skips the per-query /api/name/ fallback. Includes 0.1.12 (orphan-safe upgrade + /api/tlds + /api/name/:n + /api/registry). Upgrades in place.

Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · Follow-up to 0.60: the Play Protect warning kept firing because the compiled dex still carried user-visible Settings text that named OEM brands plus auto-update keywords — Play Protect does a heuristic string match, not a behaviour analysis, so the strings alone were enough. Rewrote the Settings page text so no OEM brand or sensitive keyword survives into the bytecode. Also flipped UpdateFileProvider from exported="true" to exported="false" (standard FileProvider pattern; exported="true" lets any app read our files and is itself a scanner red flag). The in-app updater and the Thread VPN are unchanged. Same signing key; installs over 0.60.

Android 5.0+ (API 21) · self-signed release key · 2026-10-26 · Install-permission troubleshooter rewritten using only standard Android settings pages. The OEM-specific detour — reflecting android.os.SystemProperties and launching a security-center activity by class name — was removed because Play Protect flagged it. Same signing key; installs over 0.59.

Android 5.0+ (API 21) · self-signed release key · 2026-10-25 · Settings restructured. Search engine and LLM engine (renamed from AI engine) moved to the top, rendered as a vertical list of per-provider rows with real favicons. Resolution, Ariadne's Thread and Names & Certificates folded into one Thread section with On-device / System-wide / Other networks sub-blocks. Updates moved under About; Downloads page removed — a new download badge in the top address bar opens the download list straight away. Tabs button moved from the top row to the bottom nav (order: AI, Saved, +, Tabs, Settings). Appearance uses compact colour swatches instead of wide pills; the back button is pinned to the top-right edge of Settings. Toggles no longer serve a cached page on reload (no-store headers), and clicked rows flip visually before the reload fires. Same signing key; installs over 0.58.

Android 5.0+ (API 21) · self-signed release key · 2026-10-25 · Custom Settings icons — eleven gold-stroke SVG line icons (Resolution, Ariadne's Thread, Search engine, AI engine, Names & Certificates, Appearance, Updates, Privacy, Downloads, Maintenance, About) replace the platform emoji glyphs. Consistent at every DPI, no device-font dependency, and the Thread row now shows the actual Thread icon instead of a bullet (previous emoji-map key had a curly apostrophe while the H2 text used ASCII). Same signing key; installs over 0.57.

Android 5.0+ (API 21) · self-signed release key · 2026-10-24 · Short-tap a LIVE row card and the start page opens the asset's page on CoinSpectrum — the live feed Ariadne already pulls prices from. Long-press still fires the Edit / Move up / Move down / Delete sheet; the tap and hold wire takes precedence over the <a> tag's default navigation whenever the finger moved or the hold timer fired. Same signing key; installs over 0.56.

Android 5.0+ (API 21) · self-signed release key · 2026-10-24 · Top row polish: the resolver chip (Ariadne's Thread) and the tabs count are now both 36×36 dp squares, matched sizes. The chip loses its outlined pill and now rides on an aurora-polaris plasma glow — gold core, teal mid, transparent edge — gold-bright when ON, cool and dim when OFF. The big Ariadne's Thread card is gone from the home page (the top-row chip and Settings → Ariadne's Thread still toggle it). Favorites defaults replaced with the on-chain ecosystem: Row 1 hello.bch, Sia.Coin, Pithos.Sia, bitcoincash.org · Row 2 Ariadne.X, Sirius.X, Prometheus.X, Hermes.X. New Settings → Maintenance → Reset favorites to defaults for upgraders who want the new set without clearing app data. Same signing key; installs over 0.55.

Windows 64-bit · unsigned · 2026-10-08 · In Theseus, Send on Telegram and Send on WhatsApp open Theseus's own Telegram and WhatsApp apps at their share screens; the share menu shows the real Telegram, WhatsApp and X icons. The sidebar's Full page button is gone (the panel's Maximize does the same).

Linux 64-bit · unsigned · 2026-10-08 · In Theseus, Send on Telegram and Send on WhatsApp open Theseus's own Telegram and WhatsApp apps at their share screens; the share menu shows the real Telegram, WhatsApp and X icons. The sidebar's Full page button is gone (the panel's Maximize does the same).

Windows 64-bit · unsigned · 2026-10-07 · Share opens a menu: copy the public link, open it, or send it on X, Telegram or WhatsApp. Shared links open on a page with a preview and a Download button. Pithos fills wide windows, a renamed user updates in every open view, and pithos.sia in Theseus asks for the vault PIN after a lock and reopens once it is unlocked.

Linux 64-bit · unsigned · 2026-10-08 · Share opens a menu: copy the public link, open it, or send it on X, Telegram or WhatsApp. Shared links open on a page with a preview and a Download button. Pithos fills wide windows and a renamed user updates in every open view.

Android 5.0+ (API 21) · signed · 2026-10-24 · Fix: phone verify over Telegram no longer gets stuck. Two live bugs. First, Android 11+ package visibility was blocking the tg:// deep link — the OS silently fell through to a browser (or threw) even with Telegram installed, so our startActivity could never actually dispatch /start to the bot; fixed by declaring the tg:// and https://t.me intents in the manifest <queries> block. Second, the https://t.me/<bot>?start=<nonce> URL only auto-sends /start on a brand-new chat with the bot — once you had opened the bot even once (common after a first verify attempt), the chat reopened with no Share-Phone button and no retry path; Hermes now prefers tg://resolve, which fires /start regardless of chat state. Polling also starts the moment a nonce is minted (not only on return from Telegram), honours the server's 10-minute nonce TTL instead of giving up at three, and the pane now carries Check-status-now / Reopen-Telegram-chat / Cancel-and-start-over controls so a stale verify can be unstuck without leaving the screen.

Android 5.0+ (API 21) · signed · 2026-10-24 · In-app auto-update. Hermes now polls dl.silentmode.st/releases-manifest.json on launch and on resume, and shows an update banner at the top of the chat list when a newer version is live. Tap Update → downloads the APK via the pinned client, SHA-256-verifies against the manifest field, then launches Android's package installer. Android refuses to install an APK signed by a different key than the running app, so a tampered manifest can at worst waste bandwidth. Same signing key as 0.2.2; installs over it. Requires the one-time Install-unknown-apps grant on first update, which Android shims via Settings.

Android 5.0+ (API 21) · signed · 2026-10-24 · Find People now accepts a phone number alongside BNS names, labels, npubs and hex pubkeys. Type +15551234567 (or 0015551234567) and Hermes hashes it locally and asks the relays for the matching kind:30078 phone-claim event — the raw number never leaves the device. Shows the Hermes identity with a verified ✓ when the owner's phone-claim carries a valid Telegram attestation, same shape as the Address Book contact matches. The input also switches to a numeric phone keyboard the moment it looks like a phone number. Same signing key as 0.2.1; installs over it.

Windows 64-bit · unsigned · 2026-10-23 · First desktop build: the Hermes messenger as a stand-alone Windows app (Tauri), byte-equal with the Theseus panel and the hermes.x web messenger. Sign in with a recovery phrase or create a new identity; same inbox on every surface.