Changelog

What changed, and when.

Customer-visible changes only.

September 2026

• Machine-checked protocol models. The two-way, typed-code and receiver-card modes are modelled in ProVerif; results, assumptions and the models themselves are on the security page.
• PC without a camera: send with a typed code. The receiving phone shows a one-time code; the PC sends by screen only. Receiver cards remain for fixed device pairs, and a phone can retire its card key.
• Compression. Files are compressed before encryption when it helps; CSV and text shrink four to ten times. One-way transfers no longer carry base64 overhead.
• Printable report. Every dispatch record and receipt can be printed or saved as PDF, re-verified at print time.
• Browser verifier. kionel.com/verify.html checks a receipt or dispatch record, and optionally the file, without uploading anything.
• Clearer messages. Success, warnings and errors appear at the top of the screen; loaded files show as loaded; the time a file will take is shown before sending.
• Camera on/off on the receiving device at any time.
• Fix: files above roughly 100 KB failed in one-way mode ("Maximum call stack size exceeded").
• Fix: a failing offline cache could stop pages from opening; the cache can no longer block a page.
• One-way transfer. A sender without a camera, such as a desktop instrument PC, can now send; the receiver no longer has to show a code back.
• Works offline after the first visit. The transfer app is cached on the device and runs with no network at all.
• Clearer start. The app explains that two devices are needed and shows a code to open the page on the second one, instead of an empty camera frame.
• Licence warnings. The licence line turns amber 30 days before expiry and during the 14-day grace period, and states the days left.
• Clock rollback resistance. Setting the device clock back to stretch a licence is detected and shown on screen.
• Annual subscription. Each renewal delivers a new signed licence file, downloaded with your licence key.
• Command-line tools for signing dispatch and delivery when the file travels by another route.

August 2026

• Enterprise protocol (v2). P-256 signatures with canonical low-S form, enrolment trust bundles and a control plane contract.
• Hardware-backed keys. Windows TPM key bridge and Android attestation verification; production enrolment is not yet shipped.
• Device qualification. A signed matrix of how a sender and receiver pair actually performed.