0.3
The audit round
2026-09-15- Three rounds of an independent code review closed: 148 findings, 62 of them security.
- One Instagram account belongs to one Orren account; a second connect is refused instead of taking over the inbox.
- Pasted links that point inside a private network are refused before anything is fetched.
- A capture written before a field existed still opens; the capture history can no longer read as empty.
- Every legal document rewritten from what the software actually does, served at /legal and shown at onboarding.
- The capture page reads on the light ground.