Release v0.35.1 - "Noble Lightning"

Release Date: August 29, 2026

Anonymous Purchase Carryover

• Accept a receipt whose anonymous owner the client can prove it held, so Pro bought before signing in survives first sign-in and reaches the account's other devices
• Require an anonymous account rather than merely an anonymous session, closing the path by which a linked identity could carry a purchase off another real account
• Revoke the abandoned account's grant as the claim moves, keeping one purchase on exactly one account
• Answer a store outage during carryover with a retryable 503 instead of a final ownership refusal
• Record every carryover in the shared rebind audit, including whether the claim ended up held by the destination

Account Lifecycle

• Open the account export gate for inventory 2026-08-27.1
• Delete the audit log with the account, but never export it
• Explain why a lifecycle job failed rather than failing silently

Reliability and Safety

• Absorb mobile entitlement request bursts
• Let repaired telemetry retries clear alarms
• Let an account comp grant app Pro
• Default the Play service-account secret ARN so a parameter-less deploy cannot silently un-wire purchase verification

Documentation

• Document prior_id_token in the entitlement contract shared by the iOS, Android, and private clients
• Refresh the entitlement doc's file inventory from an actual test run

← All Releases