- 40+ security fixes across the daemon: shell-quoting, symlink race hardening, CLOEXEC, netlink bounds checks
- seccomp: block KSU magic-reboot fd install and neutralize GRANT_ROOT escape
- feat(systemd): unit inspection and override.conf editing
- fix(net): actually remove DS iptables rules on cleanup; stop phantom drop logs
- fix(net): re-base jump verdicts on raw iptables delete (fixes ELOOP), keep uplink route monitor alive across internal reboots
- fix: reinstall host network rules when netd flushes them
- feat(ui): swipe between home/containers/control panel and service filter categories
- app: drag to reorder upstream interfaces, launcher long-press shortcuts, validate tarball is a Linux rootfs before install
- refactor: unified Edit/Config and Procd/OpenRC/Systemd screens, extracted shared UI components, ~6,300 LoC nuked

- feat(ui): dedicated Terminal settings page - font size, custom font picker with live preview, dark mode toggle, manual keyboard toggle, optional confirm before closing a tab
- feat(app): install a container rootfs to any directory, with filesystem capability probing for the chosen path
- feat(app): experimental 64-bit backend toggle for 32-bit userspaces, plus an update-available notice fed by the latest GitHub release
- fix: restart now honors every CLI flag exactly like start; command locks left over from a previous boot are treated as stale
- fix: prefer busybox consistently for loop mounts and image tooling; drop sparsemgr's mkfs fallback and loop path length check
- fix: fail closed in the ds_peer_in_pidns peer namespace guard
- fix(app): Reinstall Backend runs more than once, RAM chip survives 0MB, SELinux row no longer flashes "Checking" on launch, one shared AppStateViewModel across Home/Settings/Requirements
- refactor(ui): full design-system pass - one dialog shell, one SectionHeader, one type scale, unified radii and spacing, legacy colour constants and dead components deleted
- app: no more container name length limit, NixOS rootfs tarballs accepted, swipe-to-dismiss snackbars, UIJ permissions and battery exemption helper, IME activation for 12-key terminal input