Every publish build gets a new build number. Republish the same version and its release notes stay the same; product changes require a new version and updated notes. Tracking starts at 0.1.0—we have not invented a history of earlier development updates. Dates below are when notes were prepared, not proof of a successful publish.
0.30.3 — Merged project updates
Current version
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Prepare verified web beta candidate with controlled grants, bounded readiness and no-go launch evidence
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Next Mail Ready remains off by default. Synthetic acceptance passes, but real-mailbox, hosting-router and installed-device validation remain unavailable; production enablement requires a separate operator decision.
Prepare one upcoming Inbox metadata page from the existing encrypted mailbox index, without speculative Gmail reads, new sync loops or persistent anticipation writes. The server-controlled feature remains off by default.
Reduce warm selected-Inbox first-page queries from 72 to 23 by reusing at most ten already-listed rows, with final version validation and one bounded mutation retry.
Pass unchanged synthetic latency, provider-exclusion, cross-worker and resource acceptance checks after targeted profiling. Preserve prior failed evidence and real-mailbox, routing and installed-device limitations.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Next Mail Ready remains off by default. Synthetic acceptance passes, but real-mailbox, hosting-router and installed-device validation remain unavailable; production enablement requires a separate operator decision.
0.30.1 — Bounded mail preparation remains disabled
Preview · Notes prepared
What changed
Reject oversized encrypted preview rows and continuation cursors in SQL before transferring them into optional preparation memory.
Keep Next Mail Ready disabled: the expanded synthetic workload improves next-page timing but fails the unchanged first-page performance allowance. This is not release acceptance or approval to enable the feature.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Next Mail Ready is implemented but disabled and not accepted: its latest fixed-threshold performance gate fails. Do not enable until resolved; real mailbox, hosting-router and installed-device validation also remain unavailable.
0.30.0 — Local-only next-mail preparation preview
Preview · Notes prepared
What changed
Add an off-by-default next-page preparation path for selected Inbox browsing on web, desktop and iOS, using saved server metadata rather than speculative Gmail reads.
Warm saved mail opens without requesting reconciliation for every visit; explicit Refresh and existing coordinated synchronization remain available.
Limit preparation to one small page, reject under pressure and discard expired, changed-account or obsolete results without advancing the visible inbox.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Next Mail Ready remains disabled by default. Evidence is synthetic; real mailbox capacity, actual hosting-router hit rates and signed/installed-device suspension behavior require separate approval and validation.
0.29.18 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Add encrypted, isolated persistent Gmail previews with incremental recovery and bounded foreground content caching
Merged change: Published your App
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.17 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Assign persistent, distinct mailbox colors with owner-serialized allocation and callback regression coverage
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.16 — Mail loading audit: preserve history and isolate recovery
Preview · Notes prepared
What changed
Preserve complete history on any refetched-page pause; use interactive capacity for user-requested windows; retain Mailbags/counts and compact empty retries; let healthy streams advance around known pauses; stop inactive/head retry loops and false new-mail notices; fence old-view callbacks; return current reconnect status. Expand isolated browser and actual-hook regressions without changing draft/send isolation, mailbox limits or Google consent.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.15 — Mail loading audit: preserve history and isolate recovery
Preview · Notes prepared
What changed
Protect every refetched page, use interactive capacity for explicit older windows, retain Mailbags/counts across windows, compact empty retries, keep healthy streams moving around existing pauses, stop inactive/head retry loops, fence old-owner callbacks, and return current reconnect status. Extend isolated browser and actual-hook regressions while preserving explicit mutation refresh and draft/send isolation.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.14 — Keep mail visible and sending independent of inbox reads
Preview · Notes prepared
What changed
Preserve loaded inboxes during pacing and failed refresh; isolate draft/send-job metadata from Gmail downloads; protect interactive capacity from background history; start immediate-send timing after server validation. Preserve Inbox refresh for snooze cancellation. Regression checks cover delayed saving, single send queueing, metadata-only updates, paused-mail recovery, and existing mail/account safety.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.13 — Keep mail visible and sending independent of inbox reads
Preview · Notes prepared
What changed
Preserve loaded mail and cursors on paused refresh; separate provider-free draft/job updates from mail downloads; reserve both mailbox units and a foreground slot against background history; let the server start immediate-send undo timing. Require 22 isolated browser scenarios including delayed autosave/send and paused-refresh recovery, without provider quota changes.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.12 — Preserve loaded mail and unblock saving and sending
Preview · Notes prepared
What changed
Separate draft/job metadata from Gmail downloads, retain loaded messages during pacing or failed refresh, preserve interactive capacity against background history, and use server-side timing for immediate sends. Require the integrated source/composer delayed-save and paused-refresh browser regressions alongside existing release safeguards.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.11 — Preserve inbox mail and unblock draft saving and sending
Preview · Notes prepared
What changed
Separate provider-free draft/job metadata from mail traversal, preserve loaded messages and cursors on paused automatic refresh, reserve interactive capacity against background history, and start immediate-send undo timing after server validation. Add integrated source/composer and pacing regression coverage without changing provider quotas or enabling mail indexing.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.10 — Reconcile default-sender tests with Calendar account access
Preview · Notes prepared
What changed
Update the native default-sender test's isolated API fixture for the merged Calendar-access hook. Assert each account's Calendar status renders alongside the existing pending, confirmed and no-extra-mail-read checks. Preserve all native and web publishing gates.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.9 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Minimize HTTP request logs with route templates and isolated privacy regression coverage
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.8 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.7 — Product practices evidence review
Preview · Notes prepared
What changed
Added a dated web, desktop, iOS and API practices comparison with primary sources, evidence limits and ranked release recommendations.
Linked existing readiness and data-handling reports without enabling features or changing launch approvals.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.6 — Reliable quiet-hours choices in Settings
Preview · Notes prepared
What changed
Settings keeps the latest quiet-hours and home-timezone edits visible while saving them in order, with clear progress and retry guidance if saving fails.
Device-specific mail-alert enrollment and preview choices remain separate; editing workspace quiet hours never requests browser permission or enables delivery.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.5 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Gate web releases on isolated complete signup-age browser regression
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.4 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Require synthetic setup permission render checks in web release validation and reject empty or failing suites
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.3 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Recheck persisted Ride Ahead choices after uncertain saves and block unresolved setup navigation
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.2 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Restore intact mail-loading scenarios and verify separate account-recovery coverage
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.1 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Guard unsaved Scout setup across links, history fragments, and browser exits
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.29.0 — Optional Calendar access in iOS account setup
Preview · Notes prepared
What changed
Choose optional Calendar viewing and event editing alongside Mail when connecting an account on iOS. Calendar starts off and can be removed from the request.
iOS account cards show confirmed Calendar access, including view-only and missing access. Mail remains usable when optional Calendar permissions are declined.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.21 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Connect consented Gmail mail push with durable outbox, fair reconciliation and private device controls
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.20 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Align native default-sender feedback and stable ordering with confirmed owner-scoped preferences
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.19 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Add explicit native Calendar AI consent and ephemeral requested schedule recaps
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.18 — Device-specific encrypted mail downloads
Preview · Notes prepared
What changed
Keep desktop history and iPhone recent-mail download consent, scope, limits, pause and removal local to each device and mailbox.
Add a bounded foreground iPhone cache with Wi-Fi and storage gates, preserved pinned snapshots, resumable read-only checkpoints and separately confirmed older cellular reads.
Keep attachments on demand by default; add bounded encrypted PDF/text custody and safe exports with owner/lifecycle cancellation, without fetching tracking images.
Verify device policies, retention, interruption and revocation with synthetic suites and record the signed-device evidence still required.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.17 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Extend fictional mail browser gate with hidden, offline and inactive warm-up cancellation coverage
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.16 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.15 — Merged project updates
Preview · Notes prepared
What changed
Reconcile combined project sources after merges. This Preview record does not publish the app or approve outstanding launch requirements.
Merged change: Document declined live Calendar AI testing and unverified evidence
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.14 — Stable publishing checks under concurrent startup
Preview · Notes prepared
What changed
Coordinate the mail-budget fixture's virtual clock across all five live readers, preserving exact default-budget assertions without multiplying elapsed time.
Keep the synthetic multi-worker startup barrier alive beyond the queue wait window, so slow child startup cannot invalidate the first-turn fairness test. Preserve worker limits, production scheduling and strict fairness assertions.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Coordinate the concurrent mail-budget regression fixture's virtual clock so deployment scheduling cannot multiply elapsed time or expire other readers while their database work is pending. Preserve five-reader concurrency, exact mailbox-budget assertions and production admission limits.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.12 — Stop abandoned queued reads and refresh contacts before creating cards
Preview · Notes prepared
What changed
Remove queued Google reads when all interested requests disconnect, without canceling another tab's shared read or refunding dispatched provider work.
Before creating contacts, check a completed full Google snapshot rather than only local or incremental contact data; block creates when refresh cannot complete.
Add synthetic cross-worker cancellation and stale-contact regressions while preserving the merged inbox/color/refresh checks.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.11 — Mail-loading release safeguards
Preview · Notes prepared
What changed
Release checks now catch inbox switching, saved account color and paused-refresh regressions using fictional mail.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.10 — Repair mailbox recovery and contact actions
Preview · Notes prepared
What changed
Let healthy inboxes load older mail while another mailbox is paused.
Do not substitute a phone-matched contact for an unmatched explicit email.
Add Move to Inbox for archived mail in reader and bulk actions, excluding drafts, Spam and Trash.
Validate and trim account names before writes and acknowledgement.
Return keyboard focus to People after closing its contact dialogs.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.9 — Preserve loaded mail through refresh failures
Preview · Notes prepared
What changed
Keep the current mail window and cursors when a refresh reports provider or local read failures, even with HTTP 200.
Include inbox-switch caching, bounded read reuse, account appearance confirmation, and mobile contact-card fixes from this audit.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.8 — Inbox switching and account appearance reliability
Preview · Notes prepared
What changed
Reduce speculative mail body reads and reuse brief authorized previews across inbox views; keep safety and reconciliation reads fresh.
Keep recent inbox caches and confirm account appearance without refreshing all mail; show account-save feedback.
Avoid empty offline replay refetches and fix mobile contact-card overflow and panel sizing.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.7 — Recover safely from local mail read pauses
Preview · Notes prepared
What changed
Keep recent mail and message opening prioritized over background inbox preparation.
Retain successful previews and recover paused accounts with bounded, account-specific retries.
Distinguish app pacing from Google throttling with live, accurate retry messages.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.6 — Merge-safe release preparation
Preview · Notes prepared
What changed
Automatically record a new Preview version and bounded merge notes after source-changing merges; keep unchanged merges idempotent, preserve known limitations and retain strict publishing checks.
Regenerate combined API clients and validators before post-merge release preparation to avoid stale generated declarations.
Include the merged desktop-history and setup accessibility verification documentation, preserving the deferral of live and device verification.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.5 — Reconciled API generation and merged release checks
Preview · Notes prepared
What changed
Regenerate API clients and runtime validators from the shared API definition after merges, fixing Calendar permission validators that referenced constants before declaration.
Preserve the merged Essential setup, Google connection, default sender, Contacts import, Scout Calendar consent and desktop mail-history recovery checks in a new release fingerprint.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.4 — Consolidated setup and desktop recovery review
Preview · Notes prepared
What changed
Record the merged Essential setup, Google connection, default-sender, Contacts import and explicit Scout Calendar permission updates in a new versioned release.
Include the desktop mail-history recovery checklist and synthetic evidence without claiming completed native Mac or Windows verification.
Refresh the release source fingerprint after merges so publishing can run the full guarded build.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.3 — Scout Calendar context with clear Essential setup progress
Preview · Notes prepared
What changed
Preserve the four-step Essential setup progress and review flow alongside explicit read-only Calendar AI choices and encrypted desktop mail-history downloads.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.2 — Calendar AI context with desktop history downloads
Preview · Notes prepared
What changed
Keep optional read-only Scout Calendar summaries and their separate calendar consent alongside encrypted desktop mail-history downloads.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.1 — Scout Calendar consent and requested summaries
Preview · Notes prepared
What changed
Choose exact calendars for read-only Today highlights without granting mail access; Calendar, AI assistance, Ride Ahead and natural speech stay separate.
Keep optional schedule summaries separate from email conclusions, with clear incomplete-data states, revocation checks and no event changes.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.28.0 — Opt-in Scout Calendar context
Preview · Notes prepared
What changed
Choose exactly which calendars Scout may use for requested Today schedule highlights, separately from Google access, AI assistance and Ride Ahead consent.
Keep the ordinary agenda local and available without AI; mark partial schedules clearly and block outdated summaries after permissions or Calendar access change.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.27.5 — Clear Essential setup progress
Preview · Notes prepared
What changed
Essential setup shows only its four selected steps and review sections, with consistent progress on desktop and smaller screens.
Optional edit links remain outside the short path; returning to review and finishing preserves saved choices and confirms the selected setup is complete.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.27.4 — Optional encrypted desktop mail history
Preview · Notes prepared
What changed
Add explicit per-mailbox desktop history downloads with encrypted resumable checkpoints, disk budgets, pause/resume, removal and downloaded-text reading. Browser saved-copy limits and remote Gmail search are unchanged; native signed-device verification remains pending.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.27.3 — Unified Google Mail and Calendar setup
Preview · Notes prepared
What changed
Guided setup can request Mail and optional Calendar viewing and event editing together while preserving current setup choices and valid Mail after partial approval.
Mail and Calendar share popup recovery controls; account-specific server checks confirm grants and Calendar callbacks return a terminal receipt without opening a second workspace or changing events.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.27.2 — Reliable default sender in setup and Settings
Preview · Notes prepared
What changed
Choose the PonyXpress default sender with accessible saving feedback, confirmed status and inline recovery without changing Gmail settings.
Keep the confirmed default first in setup and Settings while preserving labels, keyboard focus and the relative order of other mailboxes.
Update saved sender preferences promptly during mail loading and protect them from delayed refreshes and older mail-window transitions.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.27.1 — Reviewed contact import with current setup updates
Preview · Notes prepared
What changed
Keep the reviewed Contacts import in setup and the Contacts manager alongside the latest simplified defaults and separate Scout saves.
Preserve local selection, explicit Google destination and confirmation, exact-email duplicate checks and safe recovery of uncertain imports on web and iOS.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.27.0 — Review contacts before importing
Preview · Notes prepared
What changed
Review CSV, vCard or deliberately chosen device contacts, select individual people and one Google account, and confirm before anything is imported.
Manage Contacts inside setup step 4 without leaving the guide; device access never enables automatic imports, background sync, Scout or cross-account sharing.
Check exact-email duplicates and Google Contacts permission before saving; report partial and unconfirmed imports without blindly repeating uncertain writes.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.25 — Google mailbox popup with matching-attempt confirmation
Preview · Notes prepared
What changed
Mailbox setup requests a centered Google popup, reuses the same authorization attempt after a blocked launch, and confirms only that attempt before closing its window.
Keep the current setup defaults, permission choices and separate Scout saves while showing safe return instructions for browser tabs and partial Google grants.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.24 — Confirm the matching Google authorization attempt
Preview · Notes prepared
What changed
Each Google mailbox connection has an owner-scoped attempt identifier, so a late response from an older Google window cannot finish or close a newer connection.
Connection status recovery reads the selected attempt independently, including when multiple authorization windows finish out of order.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.23 — Simpler guided setup
Preview · Notes prepared
What changed
Guided setup starts Contacts and Gmail settings selected for Google approval, with optional switches still under your control.
Setup uses shorter instructions without internal release checklists, while retaining connection errors, privacy disclosures and separate Scout consent.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Show an 80%-opacity initial-load overlay with a galloping cream-and-gold horse, delivery copy, and blocked workspace clicks and keyboard shortcuts.
Keep background refreshes usable, respect reduced motion, offer retry during prolonged waits, and release the overlay on completion or connection errors.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.21 — Responsive refresh and recent-mail-first loading
Preview · Notes prepared
What changed
Refresh recent mail in one read instead of invalidating every loaded page first; show an immediate spinner and status, suppress duplicate refreshes, and backfill older mail afterward.
Reuse request-local Gmail full-message reads for previews, avoid an unnecessary older-page read before returning the first page, and fetch Mailbag metadata concurrently.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.20 — Faster recent-mail loading and responsive refresh
Preview · Notes prepared
What changed
Refresh the recent first page once, show immediate spinning and status feedback, prevent duplicate clicks, and backfill older mail without re-fetching the entire loaded inbox first.
Reuse request-local Gmail full-message reads for previews, stop fetching older provider pages before the first page returns, and load Mailbag metadata concurrently.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.19 — Keep inbox navigation visible during mailbox switches
Preview · Notes prepared
What changed
Retain the signed-in owner’s account rail and Mailbags while a different inbox or folder loads, without reusing the previous view’s messages or cursors.
Remove the undefined account search label and add owner-isolation and navigation-loading regressions.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.18 — Verified Google setup recovery and Contacts retry isolation
Preview · Notes prepared
What changed
Complete adversarial connection hardening with prompt first-mail loading, independent Contacts sync and separate Calendar approval within setup.
Keep failed Contacts reads paused across route changes and exclude Contacts from unrelated offline-mail replay invalidation; explicit Retry remains available.
Add regression coverage for cached-contact preservation, query remounts and explicit recovery. Live Google approval remains a separate required check.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.17 — Adversarial setup and Google connection hardening
Preview · Notes prepared
What changed
Load a smaller first inbox page without waiting on Google Contacts; synchronize Contacts independently with cached-data fallback and bounded pagination.
Serialize simultaneous mailbox authorizations against token rotation, preserve refresh-token continuity, and reject missing Mail or offline grants.
Offer separate Calendar connection and selection inside setup, with approval progress, duplicate-click protection, reconnect recovery, and bounded waiting.
Recover saved setup revisions after cache loss, handle closed consent windows, and improve mobile error and quiet-hour layouts.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.16 — Reliable mailbox connection and loading
Preview · Notes prepared
What changed
Show Google approval and mailbox-loading progress during setup, and refresh completed connections promptly.
Recover once from changed or expired mail-page cursors with a fresh read-only traversal; preserve drafts and avoid automatic provider-error retry loops.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.15 — Reliable social sharing images
Preview · Notes prepared
What changed
Social sharing image tags now contain complete HTTPS URLs in the initial HTML, preserving the existing preview image, dimensions and descriptions.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.14 — Lighter public-page branding
Preview · Notes prepared
What changed
Public headers and footers now use a smaller logo image, reducing its transfer size by 97.7% while preserving branding and accessible text.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.13 — Public page discovery and crawler responses
Preview · Notes prepared
What changed
Public marketing, help and policy pages now include readable content and page-specific metadata before JavaScript loads.
Added production-origin canonical URLs, matching page URLs for sharing, a public-page XML sitemap and a permanent redirect from /welcome to /.
Unknown page addresses now return real, non-indexable HTTP 404 responses while private workspace and demo routes keep their existing app behavior.
Preserved PDF module-worker delivery and added built-output checks for public HTML, redirects, private routes, missing pages and isolated reader assets.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.12 — Native linked Google mailbox consent
Preview · Notes prepared
What changed
Bring the web linked-Google-account shortcut into native setup and accounts: offer a verified linked identity for explicit Gmail consent without another PonyXpress sign-in. Google can still require its own security verification.
Recognize connected mailboxes, target reconnects, keep another-account selection, and allow explicit optional-permission updates. Contacts and Gmail settings start off; Calendar and Scout permission boundaries are unchanged.
Prevent duplicate consent windows, handle cancellation without false success, and confirm fresh server state only after native device unlock when required. Failed confirmation retries read status rather than reopening Google.
Add native chooser and consent-flow regression coverage. Real Google system-browser behavior remains subject to the existing authorized signed-device verification checklist; no live provider settings were changed.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.11 — Native Google sign-in and device privacy unlock
Preview · Notes prepared
What changed
Add Google app sign-in and account creation through Clerk with a distinct native return, explicit validated-session activation, cancellation handling and recoverable incomplete-account states.
Keep restored iOS sessions locked before private queries or bearer access; label Face ID, Touch ID and passcode accurately, deduplicate prompts and reject stale owner/session or backgrounded approvals.
Preserve separate Gmail consent, age and legal gates, and independent offline passphrases. Google native identity is disabled in Expo Go and browser previews.
Add mocked native authentication, lifecycle, component and session-bridge checks. Authorized tenant configuration, signed-device Google/Face ID verification and Apple sign-in policy review remain required.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.10 — Email recovery and easier Google mailbox setup
Preview · Notes prepared
What changed
Add an email account-recovery entry point using the secure sign-in provider, with Google-only recovery guidance and no SMS.
Offer a verified linked Google account as a mailbox choice while preserving explicit consent, optional permissions and different-account selection.
Recognize an already connected matching mailbox during setup; validate account hints without changing callback ownership checks.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.9 — Email recovery and easier Google mailbox setup
Preview · Notes prepared
What changed
Add a clear email account-recovery entry point using the existing secure sign-in provider, with Google-only recovery guidance and no SMS.
Offer the verified linked Google account as a mailbox choice while preserving explicit Google consent, optional permissions and different-account selection.
Recognize an already connected matching mailbox during setup; validate and safely encode account-selection hints without changing callback ownership checks.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.8 — Keep setup in place and pace inbox backfill
Preview · Notes prepared
What changed
Keep the Google connection handoff in guided setup, reuse warmed inbox pages, and backfill older inbox mail only while visible and healthy.
Pace Google mailbox reads, pause on quota responses and provider failures, and preserve existing loaded mail and explicit account retries.
Temporarily hide the setup checklist while compose windows are open so it cannot cover the editor.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
Add opt-in web usage events for setup, Google connection outcomes and Scout actions, using only fixed categories without mailbox content or identity.
Add browser-local analytics controls in setup and Settings, respect browser privacy signals, and keep custom events separate from automatic pageviews.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.6 — Reproducible publish security checks
Preview · Notes prepared
What changed
Verify installed security-patch contents and restore stale dependency caches through the frozen package graph before release checks.
Align React type definitions and regenerate existing API contracts so all web, server and native type checks agree.
Known limitations
Web launch remains pending Google data-access approval, required security assessment and successful real mailbox-access verification.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.5 — Honest mailbox loading and Google API diagnostics
Preview · Notes prepared
What changed
Distinguish disabled Google APIs, missing scopes, organization policy denials and quota limits without exposing provider response contents.
Do not show an empty inbox or no-match confirmation when the selected mailbox failed or has not finished loading.
Known limitations
Web launch remains pending Google scope approval and matching Web application OAuth credentials; merged native/type-check issues still need reconciliation.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.4 — Dependency security fixes and patch integrity
Preview · Notes prepared
What changed
Included local dependency security patch contents in release integrity checks.
Updated vulnerable web and build dependencies and added targeted protections for unsafe glob nesting and numeric formatting.
Added dependency security regression checks to release validation.
Known limitations
Web launch remains pending Google scope approval and matching Web application OAuth credentials; merged native/type-check issues still need reconciliation.
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.3 — Google connection recovery
Preview · Notes prepared
What changed
Keep one Google authorization window per connection attempt and prevent nested retries from callback pages.
Report actionable Google OAuth errors without logging credentials, authorization codes or provider response contents.
Known limitations
Web launch remains pending Google scope approval and matching Web application OAuth credentials; merged native/type-check issues still need reconciliation.
0.26.2 — Serve native manifests for header-light preview requests
Preview · Notes prepared
What changed
Corrected a reproduced routing failure where the unmodified Expo Go QR URL received web HTML instead of a native manifest unless platform headers were manually supplied.
Normalize native metadata bootstrap requests before Expo routing while preserving ordinary browser HTML, explicit platforms, asset/API routes, signature negotiation and managed sign-in.
Added request-routing and real HTTP pre-handler regression checks; retained separate hosted-preview and custom-development-build launchers.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.1 — Repair hosted iOS preview launch mode
Preview · Notes prepared
What changed
Explicitly select Expo Go for the managed iOS preview instead of automatically choosing the installed custom development client.
Keep a separate explicit custom-development-client command for signed native builds, preserve managed Expo sign-in, and add a launch configuration regression check.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.26.0 — Native iOS client preview
Preview · Notes prepared
What changed
Added the full PonyXpress native iOS client alongside the existing web and desktop apps, with native mail, organization, contacts, calendar, Scout, Xpress and account controls.
Added independently verified bearer authorization and owner-bound, single-use system-browser mailbox consent without weakening browser CSRF protection.
Added owner-isolated encrypted saved mail and local drafts, independent offline unlock, lifecycle cleanup and native app-switcher protection.
Added native notification enrollment, privacy-safe destinations and a separately gated Expo transport; production delivery remains disabled.
Shared exact policy candidates and release history, recorded a feature parity matrix, and supplied repeatable Mac build, device and distribution-preparation checklists.
Added synthetic native authorization and enrollment checks, native-core and rendered component checks, and preserved existing API/web release regressions.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates, operator/contact details, launch markets, provider arrangements, teen safeguards and Xpress private-learning/background policies still require their existing owner and specialist approvals.
Production private encrypted messaging remains unavailable and separately scoped; native conversion does not approve or enable it.
This Linux workspace has not compiled with Xcode, installed a signed iOS app or performed physical-device, VoiceOver, terminated-offline, native identity or real provider-write tests. See the device checklist.
Native push is disabled until an approved Expo project, controlled delivery authorization and device evidence are supplied; transport acceptance never proves device delivery.
Offline saved mail is opt-in and bounded, not a mailbox backup. Cold offline startup requires an installed build with embedded JavaScript, not a Metro-dependent Debug client.
Native image previews are explicit, credentialless and bounded; SVG/GIF and unmapped inline CID rendering are restricted, and resolved DNS addresses cannot be inspected by the app.
Desktop installers remain unbuilt here. Apple signing, export/privacy declarations, distribution and uploads require owner approval; no production publication was performed.
0.25.2 — Post-launch private messaging roadmap
Preview · Notes prepared
What changed
Documented a phased private-messaging roadmap to resume only after core launch and desktop installers are complete; real encryption and private delivery remain unavailable.
Preserved infrastructure, recovery, notification and retention decisions without authorizing provisioning or spending.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates await owner approval, confirmed operator/contact details, launch markets, provider settings/regions and retention, privacy-request and incident-response operations; no legal or launch certification is provided.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards. Independent Xpress learning/background approval gates remain unchanged.
Real encrypted messaging is not implemented or approved; the fictional preview provides no encryption, authentication or delivery.
Desktop installers are not available; notification delivery depends on device permission, hosting and operating-system support. Voice microphone support is browser-dependent and blocked in the native companion.
Offline reading is selected text in a separately prepared passphrase-protected reader, not full-app offline startup or a backup. Comprehensive route-by-device, reduced-motion and screen-reader verification remains incomplete.
One high-severity braces advisory has no upstream fix. The Clerk proxy has no configured glob filter or user-supplied patterns; the residual dependency risk still needs release review. No advisories are suppressed.
0.25.1 — Web launch candidate and isolated release checks
Preview · Notes prepared
What changed
First web launch excludes real encrypted messaging. Production encryption and delivery gates remain disabled, and their independent review remains incomplete.
Publish preflight now runs TypeScript, release guards, server route tests, the synthetic Xpress provider pipeline and browser-model tests. Integration fixtures use a disposable local database and synthetic provider credentials, never deployment data.
Patched proxy-addr and source-map-js dependency advisories with compatible pinned releases; the remaining unpatched braces advisory is disclosed.
Updated public help, marketing and immutable policy candidate 2026-10-21.7 to explain explicitly started conversation sessions, automatic read-only spoken turns and separate action confirmation. Prior snapshots and consents are preserved.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates await owner approval, confirmed operator/contact details, launch markets, provider settings/regions and retention, privacy-request and incident-response operations; no legal or launch certification is provided.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards. Independent Xpress learning/background approval gates remain unchanged.
Real encrypted messaging is not implemented or approved; the fictional preview provides no encryption, authentication or delivery.
Desktop installers are not available; notification delivery depends on device permission, hosting and operating-system support. Voice microphone support is browser-dependent and blocked in the native companion.
Offline reading is selected text in a separately prepared passphrase-protected reader, not full-app offline startup or a backup. Comprehensive route-by-device, reduced-motion and screen-reader verification remains incomplete.
One high-severity braces advisory has no upstream fix. The Clerk proxy has no configured glob filter or user-supplied patterns; the residual dependency risk still needs release review. No advisories are suppressed.
0.25.0 — Scout, Voice and clear privacy choices
Preview · Notes prepared
What changed
Lead with optional Scout assistance and talk-to-email, with realistic mail, calendar, contact and offline-reading examples.
Clarify that ordinary Gmail is not end-to-end encrypted and the private-messaging preview provides no encryption or delivery.
Publish substantive Terms and Privacy candidates version 2026-10-21.6, with exact archives, self-service deletion instructions and separate optional permissions preserved.
Keep public help, downloads, agreement summaries and share descriptions consistent; improve phone-menu opening and small document-label contrast.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal candidates await owner approval, confirmed operator/contact details, launch markets, provider settings/regions and retention, privacy-request and incident-response operations; no legal or launch certification is provided.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards. Independent Xpress learning/background approval gates remain unchanged.
Real encrypted messaging is not implemented or approved; the fictional preview provides no encryption, authentication or delivery.
Desktop installers are not available; notification delivery depends on device permission, hosting and operating-system support. Voice microphone support is browser-dependent and blocked in the native companion.
Offline reading is selected text in a separately prepared passphrase-protected reader, not full-app offline startup or a backup. Comprehensive route-by-device, reduced-motion and screen-reader verification remains incomplete.
0.24.0 — Important mail first, meeting-aware Scout
Preview · Notes prepared
What changed
Scout puts urgent Ride Ahead assessments and Gmail important/starred mail ahead of updates and promotion cleanup, including featured messages beyond the first inbox page within the chosen interval and session limit. Reviewed positions are not replayed.
Imminent or ongoing selected-calendar commitments come before spoken mail review, with Review now or After the meeting choices. Postponing stops the microphone and waits for an explicit continue; calendar data is not sent for AI analysis and no inbox scan runs in the background.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.23.2 — Spoken Scout follow-up prompts
Preview · Notes prepared
What changed
Scout speaks its clarification and review prompts too, and keeps conversation mode available after today's agenda; it still never confirms a mail change from raw speech.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.23.1 — Scout conversation review safeguards
Preview · Notes prepared
What changed
Spoken promotion commands prepare a checked review, never authorize writes; completed cleanup disappears from the current catch-up and resumed batches refresh their promotion list.
Conversation capture has tested local pause detection and microphone/context cleanup; permissions, page exit and voice changes stop the session. Real microphone and authorized-mailbox checks remain outstanding.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.23.0 — Conversational Scout recaps
Preview · Notes prepared
What changed
Scout gives concise spoken recaps instead of reading email bodies; Gmail-labeled promotions are grouped for reviewed batch filing, archive or Trash.
Optional session conversation mode uses local pause detection, visible microphone status and automatic read-only spoken turns; mail writes and draft saves still require review.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.22.1 — Private preview connection checks
Preview · Notes prepared
What changed
Retained first-observed and newly connected demo key versions so later changes block preview sending, including Bcc. Kept status panels compact. No real encryption or delivery is enabled.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.22.0 — Private messaging prototype
Preview · Notes prepared
What changed
Added an isolated fictional private-messaging preview covering invitations, compose/read, contacts, locking, devices and recovery. No real encryption, authentication or delivery is implemented.
Hard-disabled real encrypted-message APIs and isolated the preview from Gmail drafts, uploads, Scout and authentication bundles.
Documented the maintained-protocol implementation plan and required independent security review before real delivery.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.21.1 — Out-of-office replies and verified desktop offline recovery
Preview · Notes prepared
What changed
Add per-mailbox Out of office settings with formatted replies, scheduling, audience controls and explicit Gmail confirmation; enabled replies run in Gmail even when PonyXpress is closed.
Use optional Gmail settings permission, detect stale edits, preserve demo settings and avoid blind replay of uncertain writes.
Verify the prepared public reader in a hidden sandboxed window before opening saved mail. Keep passphrase, HTTPS-origin, sign-in, update and notification protections, and fail closed with a recovery message if preparation is missing.
Add the disconnected-cloud notice and saved-mail last-sync timestamp after unlock; verify demo save/cancel/reload, invalid schedules and mobile layout without changing real mailboxes.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.21.0 — Out-of-office replies and desktop saved-mail recovery
Preview · Notes prepared
What changed
Add Settings > Out of office for each mailbox, with formatted replies, optional schedules, audience controls and explicit Gmail confirmation. Gmail runs enabled replies even while PonyXpress is closed.
Use existing optional Gmail settings permission, detected-change conflicts and read-back without blind retries; preserve independent fictional demo settings across reloads.
Offer explicit Open saved mail on desktop connection failures, verify the prepared public reader shell, and retain passphrase, origin, update, notification and sign-in protections.
Show a disconnected-cloud notice and saved-mail last-sync time after unlock. Add native recovery, provider and client tests; native-device and authorized real-responder delivery checks remain outstanding.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.20.1 — Read inline email calendar invitations
Preview · Notes prepared
What changed
Recognize named .ics MIME parts stored inline by Gmail, as well as external attachments, so both appear beside the source email for review-first import.
Resolve inline file references only within the freshly authorized message, keep encoded and decoded size checks, and preserve download and forward compatibility.
Add inline provider fixtures covering successful preview/import, source links, duplicate copies, foreign users, invalid MIME paths and understated oversized data. All 117 API tests pass.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.20.0 — Reliable unified inbox and reviewed calendar invitations
Preview · Notes prepared
What changed
Retry a failed mailbox without advancing healthy streams, resetting loaded pages or replacing the open reader/selection; reject obsolete owner/query/cursor responses.
Separate loaded messages and conversations, source estimates and whole-folder unread counts; label partial account badges and explain provider changes during pagination.
Invalidate cursors when connection status or scopes change, and cover arrivals, duplicate IDs, rate-limit retries and count wording with synthetic read-only tests.
Preview an authorized .ics email attachment's title, dates, timezone, location and organizer before choosing a writable calendar and reviewing the save.
Import one non-recurring event without automatic RSVP, copied guests or notifications. Preserve the exact source email and prevent duplicate copies within its receiving mailbox, including uncertain saves.
Bound file parsing and reject unsupported or malformed invitations clearly; add all-day, timezone, malformed-file and synthetic concurrent-import regression checks and updated Help.
Known limitations
Initial invitation import excludes recurrence, embedded timezone definitions, floating or ambiguous times, alarms, cancellations and multiple events.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.19.0 — Review changes to email-linked plans
Preview · Notes prepared
What changed
Review saved plans beside new email evidence before rescheduling or cancelling; exact mailbox and conversation links prevent inferred duplicates.
Choose among multiple linked items manually. Existing events keep their source, video call, alarms and conditional-write safeguards; guest updates need separate approval.
Private reminders keep their separate alarm editor and reviewed cancellation. Try fictional reschedule and cancellation examples in the demo, with updated Help.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.18.1 — Close every disconnect cleanup path
Preview · Notes prepared
What changed
Use shared owner-vault cleanup before and after disconnect, including the terms-declined connection panel; abort and explain storage failures instead of claiming successful erasure.
Add regression coverage for legal-gate wiring, failed erasure, uncertain requests and concurrent-save cleanup; preserve the encrypted offline reader and provider data.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.18.0 — Encrypted opt-in offline reading
Preview · Notes prepared
What changed
Explicitly save bounded text-only conversations in a passphrase-protected on-device vault, with retention and reconnect account revalidation.
Add a separate public-only offline reader shell; erase saved copies on sign-out, mailbox disconnect and account deletion without changing draft recovery or provider data.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.17.1 — Softer Scout forget section
Preview · Notes prepared
What changed
Use a light red warning section with outlined account buttons for forgetting Scout learning; retain the red final confirmation.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.17.0 — Stronger Scout age and safety protections
Preview · Notes prepared
What changed
Keep teen cloud AI restricted across email assistance, queued Ride Ahead, transcription, PDF review and natural read-aloud, with separate feature permissions.
Screen generated suggestions and PDF answers before showing or saving them, while preserving original incoming mail and verbatim read-aloud behavior.
Find Scout safety guidance, crisis-help limits and a user-reviewed report-email link in Help and Settings alongside existing Voice and PDF controls.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.16.1 — Clear warning styling for Scout learning removal
Preview · Notes prepared
What changed
Style Forget Scout learning buttons and the final confirmation in red, with a trash icon; keep Save settings unchanged.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.16.0 — Natural Scout voice and saved preferences
Preview · Notes prepared
What changed
Add separately approved natural AI voices with Sage, Coral and Alloy previews; remember AI audio, PDF and voice preferences until changed.
Cancel pending microphone capture and transcription on close; bind PDF approval to its exact source and attachment; preserve reviewed draft-only actions.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.15.1 — Scout Voice completion fixes
Preview · Notes prepared
What changed
Make saved-contact lookup reachable from forwarding controls and explicit forward requests; keep loading mail available at catch-up page boundaries.
Clearly identify microphone input as web-only in the current desktop wrapper, preserving typed sessions without weakening desktop permissions.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.15.0 — Scout Voice Ride Ahead
Preview · Notes prepared
What changed
Add opt-in spoken catch-up with reviewed saved drafts, owned-contact forwarding, selected PDF review and separate permissions.
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.14.2 — A clearer introduction to PonyXpress
Preview · Notes prepared
What changed
Explore a refreshed homepage and Features page explaining unified Google accounts, Scout review, Mailbags and Routes, and reviewed next steps from email.
See current fictional-demo product images, three worked examples and clear permission and availability notes before signing up.
Use improved public navigation on phones and keyboards, with readable product detail images and consistent browser/download guidance.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.14.0 — Inbox reliability and simple meetings
Preview · Notes prepared
What changed
Unified inbox paging now merges account timelines in order, retains older pages, and reports account-specific failures with retry.
Inbox and Spam unread badges use whole-folder totals, with explicit partial-count and expired-page refresh states.
Add a meeting from an email using Google Meet or an existing Zoom link, with reviewed participant suggestions and separate invitation consent.
Event details and upcoming agendas show validated provider-aware Join and Copy actions; pending or failed calls are not joinable.
Ordinary edits preserve existing conferences. Replacing or removing a call is explicit and reviewed, including in the persistent fictional demo.
Expanded synthetic paging, calendar safety, client persistence and desktop-link regression coverage; no live-provider or native-release verification claim.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.13.1 — Restore Xpress reliability checks and unblock builds
Preview · Notes prepared
What changed
Repair the synthetic Xpress pipeline checks for sender and Reply-To exclusions, cold-start example privacy, explicit queue approval and consent withdrawal without weakening assertions or enabling live AI policies. All 83 backend checks pass without skips.
Restore a passing root workspace typecheck. Make post-merge setup fail fast and non-interactive without forcing destructive database changes, and allow two minutes for dependencies and schema verification.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.13.0 — Control your PonyXpress data
Preview · Notes prepared
What changed
Download a private copy of your stored PonyXpress data and uploaded files from Account, even if you decline updated Terms.
Review permanent account deletion with explicit confirmation, safe queued-action cleanup and retryable failures. Gmail originals remain untouched.
Understand the separate retention limits for provider records, backups and logs; deletion notices remain drafts for legal review.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.12.0 — Combine and link contact cards across accounts
Preview · Notes prepared
What changed
Update all selected cards for a person once, including directly from unsaved contact edits, or combine their emails and labeled phone numbers and keep approved details synced both ways. Manually choose existing cards when emails differ; no contact is matched by name alone or deleted.
Review the exact combined card, account destinations and differing values before confirming. Addresses, birthdays and notes require explicit selection; photos and record identities remain account-specific. Scope links to 2–10 selected cards, never the entire address book.
Pause on conflicting independent edits or missing cards, stop syncing without deleting saved information, and show per-card results for partial or uncertain writes. Version checks and stored operation receipts prevent blind replay; live checks use the existing approximately five-minute worker cycle.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.11.1 — Contact photos and richer, account-aware cards
Preview · Notes prepared
What changed
Available Google contact photos, segmented account-color outlines and one list entry for exact email matches across accounts. Keep each Google card separately owned, with explicit account selection before edits or deletion.
Labeled emails, multiple phones with extensions, home/work/custom addresses and birthdays with optional year in both contact editors. New fields survive supported CSV round trips and older quick updates without broadening background sharing approvals.
Keep custom contact labels literal, including names such as constructor or __proto__, rather than looking up inherited object properties. Verified 33 focused checks and a desktop/phone/tablet demo editing journey, including persistence, untouched secondary-account records, image rendering and image-failure fallback. No real contacts were mutated.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.11.0 — Contact photos and complete contact cards
Preview · Notes prepared
What changed
Show matching contacts once across accounts, using exact email matches without merging Google records. Available Google photos replace neutral initials; segmented avatar outlines and named account cards identify where each contact is saved.
Add labeled emails, multiple phone numbers with extensions, structured home/work/custom addresses and birthdays with an optional year. Both the Contacts editor and the contact card opened from email support the fields; birthdays do not create calendar items automatically.
Preserve untouched Google fields and older quick-add updates, use Google contact-source etags, and reset incompatible incremental-sync cursors. New fields do not expand previously approved background contact-sharing permissions. Photos use approved Google image hosts with no referrer and fall back safely when unavailable.
Make contact cards accessible on phones, retain structured fields in bounded CSV import/export, and keep account-specific edits/deletion explicit. No live customer Google Contacts were changed during development checks.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.10.0 — Preview attachments without leaving your email
Preview · Notes prepared
What changed
Open PNG, JPEG, GIF, WebP, PDF and UTF-8 text/CSV attachments in the message reader. PDFs have page controls and a text alternative when available. The PDF viewer loads only when needed.
Preview uses the existing authenticated, mailbox-owned download endpoint. Attachment bytes stay in memory on this device; no external preview service or AI receives them. Closing or changing identity aborts reads and releases preview object URLs.
Preview validates format signatures, file size and image dimensions. Active HTML/SVG/scripts, Office documents, oversized or unsupported files stay download-only; previews are not malware scans. Original downloads retain file bytes and use bearer-aware authentication.
Demo previews and downloads are explicitly generated fictional samples. Updated the guide and corrected outdated rich-signature checklist entries without changing working compose/signature behavior. Verified 13 focused checks including actual PDF parsing/rendering, plus desktop PDF and phone image preview screenshots.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.9.0 — Explain recent calendar alerts
Preview · Notes prepared
What changed
Review recent alert history in Settings, including quiet hours, expired enrollment, push-service rejection and unconfirmed delivery attempts.
Alert history is encrypted, limited to seven days, and excludes calendar text. Push acceptance does not confirm a popup or sound.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.8.1 — Keep alert opt-outs available
Preview · Notes prepared
What changed
Turn alerts off or adjust settings even when a previously selected calendar is no longer accessible.
New alert calendar choices still require access through the correct mailbox account.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.8.0 — Choose your calendar alerts
Preview · Notes prepared
What changed
Choose alerting calendars separately from the calendars shown in your schedule, with choices kept separate for each mailbox.
Turn event notifications and private reminder notifications on or off independently while keeping quiet hours and private previews.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.7.0 — Drop files into your message
Preview · Notes prepared
What changed
Compose and formatting controls now use consistent 100 ms hover/focus tooltips, portalled above compose windows instead of relying on slow native title hints.
Drag files into compose or reply windows to attach them below. Drop PNG, JPEG or WebP images up to 2 MB into the body at the drop caret; plain-text bodies switch to rich text without losing surrounding text. GIFs and larger supported files use regular attachments.
Right-click an inline image, tap it on a phone or use image options to Send as attachment. The original file is used while available in the current edit session; reopened drafts use the saved optimized image. Linked remote images are never fetched automatically for conversion.
Images remain inline until attachment confirmation succeeds. Sending, closing, switching accounts and discarding are guarded during preparation; failed uploads and attachment limits show explicit errors. Documented the workflow and verified demo draft persistence, failure safety, tooltips and phone menu placement without sending live email.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.6.1 — A friendlier wrong turn
Preview · Notes prepared
What changed
Replaced the generic developer 404 with a playful PonyXpress missed-station page, an animated envelope and a clear route home. Reduced-motion preferences are respected.
Added Return to last page for known PonyXpress destinations, with Home fallback for direct visits and repeated missing links. Recovery replaces the missing-page history entry and never follows an external referrer.
Last-page memory is limited to safe static paths in the current tab, isolated by app base. Query strings, email identifiers and authentication callbacks are never retained; blocked storage has an in-memory fallback.
The missing page is marked noindex and provides Help & Support. Added recovery checks for direct entry, broken-link chains, unsafe destinations, sensitive URLs and storage limitations.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.6.0 — Help, how-tos and public FAQs
Preview · Notes prepared
What changed
Added Help & Support in Settings with local question search, example questions, documented answers, numbered how-tos and links to the full guide.
Added a public Help & Support page and fourteen grouped, collapsed FAQs. The marketing homepage includes six common questions and a link to all FAQs; site navigation and the guide expose both destinations.
Help search does not read mail, use cloud AI, save questions or create tickets. Email Support opens your email app with the question filled in for review and sending.
Added bounded-input, answer-ranking, guide-target and email-encoding checks. Blank and unmatched questions have explicit guidance; guide deep links navigate to the relevant section.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.5.0 — Thread quick actions and touch swipes
Preview · Notes prepared
What changed
Hover or keyboard-focus a thread on desktop for Archive and Move to Trash. Touch screens also have an accessible quick-actions menu.
Swipe right to archive or left to move a conversation to recoverable Trash. Deliberate horizontal travel and release are required; vertical scrolling, control taps and multi-selection do not trigger swipe actions.
Quick actions load the complete conversation in its own account, preserve unsent drafts, guard duplicate submissions and offer ten-second Undo. Undo restores original Inbox and archived locations without changing unrelated labels.
Uncertain or partial writes stop without automatic retry. Added guidance and safety tests; real-touch demo checks covered swipes, Undo, scrolling, selection guards, menu access and mobile overflow. Desktop hover was not browser-verified because the test browser reported no hover capability.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.4.0 — Routes from selected email
Preview · Notes prepared
What changed
Select multiple email conversations and create Routes for their specific senders or domains from the bulk action bar.
Review and edit deduplicated conditions, choose a Mailbag for each account, and keep or skip the inbox. Domain scope includes an explicit subdomain option.
Every Route requires a fresh preview and confirmation. Optionally file only selected matching incoming emails after all Routes are saved; other existing mail stays untouched.
Batch results preserve confirmed successes and identify unconfirmed outcomes without automatic retries. Demo checks covered mixed-account filing, preview invalidation, duplicate-submit prevention, persistence and phone/tablet layouts.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.3.0 — Rich email and signatures
Preview · Notes prepared
What changed
Compose new messages, replies and forwards with fonts, text sizes, colors, highlighting, alignment, lists, links and undo/redo.
Create formatted per-account signatures with logo uploads, alt text, image sizing and separate defaults for new mail and replies.
Uploaded logos travel as inline email images; saved drafts preserve signature and formatting snapshots without adding a duplicate on reopen.
Safe text formatting survives incoming mail normalization while incoming tracking images remain blocked.
Rich formatting and paste sanitization were verified in the demo, including draft recovery and phone/tablet layouts. Gmail signature-settings export requires hosted HTTPS logo URLs instead of uploaded embedded images.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.2.0 — Smarter email-to-calendar drafts
Preview · Notes prepared
What changed
Suggest meaningful event and reminder titles from the dated passage, sender and subject, including merchant deliveries and named meeting venues.
Prefill supported meeting locations and offer the sender as an optional guest. Invitations remain off until explicitly approved; delivery and no-reply senders are not meeting guest suggestions.
Offer explicit AM/PM choices for ambiguous clock times, and propose date-only delivery events as all-day without inventing a delivery time.
Use the same contextual drafting from the Create event toolbar, including a single clear plan in an earlier source message. Do not borrow other mailboxes or revive cancelled plans.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.1.1 — Reliable release build stamping
Preview · Notes prepared
What changed
Corrected the production build setup so automatic version and build metadata are generated reliably.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
0.1.0 — Ride Ahead and release tracking
Preview · Notes prepared
What changed
Added visible version and build numbers, a release notes page, desktop build identification and checks that prevent undocumented product updates from publishing.
Renamed Scout's inbox catch-up report to Ride Ahead, with the invitation “Let Scout ride ahead.”
Added first-use Ride Ahead setup, explicit Save settings, unsaved-change protection and separate Privacy and Terms links.
Added versioned account agreements, saved acceptance receipts, a Privacy Notice and a detailed Help guide.
Included the existing mail workspace, Mailbags and Routes, contact suggestions, linked calendar events and private reminders in this first tracked preview.
Known limitations
Legal documents are drafts for attorney review before public launch.
Cloud AI remains unavailable to ages 13–17 pending age-appropriate safeguards.
Desktop installers are not yet available; notification delivery depends on device permission, hosting and operating-system support.
