* Merge pull request #666 from tryigit/jules-6083802923537741315-28732737 (51c89a1d) * fix: daemon startup failures causing WebUI connection refused and keybox changes not applying (bbbef4d0) * Merge pull request #665 from tryigit/copilot/fix-webui-connection-error (4b27f811) * fix: clarify WebServer probe failure log message (42fbcfbb) * fix: WebUI probe timeout, port file write, Config init order, daemon restart loop (8a1d6c53) * Merge pull request #664 from tryigit/bolt-optimize-split-13728855442134558023 (a2d686fc) * ⚡ Bolt: Replace split with indexOf in parsing paths (7732eee8) * Delete module/template/security_patch.txt (856c01d8) * Merge pull request #662 from tryigit/jules-1334349852063023501-e7440c0d (af28385a) * Merge pull request #663 from tryigit/palette-ux-fix-4106576174663823159 (d47410b4) * 🎨 Palette: WebUI/UX Enhancement (11ee9954) * chore: bump version to V2.3.2 and fix build/lint issues (e18ba061) * Merge pull request #661 from tryigit/bolt-optimize-proc-reads-18331321704068007001 (5dbc87aa) * chore: bump version to V2.3.2 and fix build/lint issues (1e571cab) * ⚡ Bolt: Optimize /proc/ file reads by eliminating redundant stat syscalls (3f52cc49) * Merge pull request #660 from tryigit/fix-gradle-dependency-graph-5752665389671682488 (095676d4) * fix(ci): disable dependency graph submission in gradle/actions/setup-gradle (d5d49081) * Merge pull request #659 from tryigit/copilot/enhance-binder-abi-isolation (58fa366f) * Fix: Binder ABI isolation, eBPF CO-RE, async anti-debug, Rust FFI safety (398406ae) * Merge pull request #658 from tryigit/fix/gsf-randomizer-and-tests-14340428991003224560 (52f691fd) * fix: GSF ID randomization and CRL fetch test assertion (0aedf6b6) * Merge pull request #657 from tryigit/perf-document-sleep-constraint-1303475027550552099 (90a52c06) * ⚡ Document performance constraint for Thread.sleep in Binder interceptor (a210196a) * Merge pull request #656 from tryigit/perf/optimize-drm-pid-search-5677430613464453038 (43d08495) * ⚡ Optimize DRM PID search I/O and allocations (b3a27695) * Merge pull request #654 from tryigit/palette-webui-autocomplete-ux-8243475160159542783 (e00bb100) * Merge pull request #655 from tryigit/perf-crl-cache-7442184807969380699 (4483f3b3) * ⚡ implement CRL caching with ETag support (d68feece) * 🎨 Palette: WebUI/UX Enhancement (b307ce01) * Merge pull request #653 from tryigit/dependabot/gradle/gradle-wrapper-9.5.0 (e80c9898) * build(deps): bump gradle-wrapper from 9.4.1 to 9.5.0 (d16715a1) * Merge pull request #652 from tryigit/feature/standalone-bootloader-props-2994153961635324334 (6708e025) * feat: Integrate bootloader spoofing props via common_func.sh (7570551f) * Create common_func.sh (f32542e1) * Merge pull request #651 from tryigit/palette-ux-enhancements-1680687404638538164 (33e507af) * 🎨 Palette: WebUI/UX Enhancement (832f9ed2) * Merge pull request #650 from tryigit/bolt-ffi-allocations-optimization-10216233772915068050 (38969f01) * ⚡ Bolt: Zero-cost Vec pre-allocations in FFI hot paths (35a0752a) * Merge pull request #647 from tryigit/palette-webui-ux-enhancements-9252334762119492723 (4cec83b3) * Merge pull request #648 from tryigit/dependabot/gradle/androidx.compose-compose-bom-2026.04.01 (3c4076cb) * Merge pull request #649 from tryigit/dependabot/gradle/kotlin-2.3.21 (33c26611) * build(deps): bump kotlin from 2.3.20 to 2.3.21 (b4358be1) * build(deps): bump androidx.compose:compose-bom (8d8b8190) * 🎨 Palette: WebUI/UX Enhancements (8a4a5629) * Merge pull request #645 from tryigit/optimize-keyboxfetcher-memory-15918679508587576614 (0ed84698) * Merge pull request #646 from tryigit/fix-island-click-2549615189523291983 (6519978d) * Fix UI toast notification close button (c986513a) * ⚡ Optimize KeyboxFetcher memory usage with chunked processing (1ab436bd) * Merge pull request #644 from tryigit/fix-codeql-conflict-13929416525408002234 (5575fcbf) * Fix CodeQL conflict by removing custom workflow (2f2c267b)

* Merge pull request #470 from tryigit/copilot/fix-unit-test-failures (00bd88e) * fix: satisfy webui launch safety checks (ed73d38) * Initial plan (6d0a84c) * Merge pull request #469 from tryigit/copilot/fix-webui-opening-bootloop-issues (12c8e6d) * Tighten WebUI launch safeguards and review fixes (ca8cd0b) * Fix WebUI launch timing and bootloop safeguards (a91e4e8) * Initial plan (68d22a8) * Merge pull request #468 from tryigit/chore/no-turkish-warnings-5202334619944618303 (2f17fec) * chore: Verify no Turkish warnings in the codebase (acba96f) * Merge pull request #467 from tryigit/copilot/fix-module-injection-issue (76b96f2) * Fix CI PRNG check: exclude test directories from java.util.Random scan (6280d11) * Address code review: improve test robustness and CI check accuracy (5d046d1) * Add comprehensive tests for all untested features and CI safety checks (05d2c32) * Fix 5 bugs: DRM retry loop, SecureFile partial write, PID overflow, shell injection, stream leak (cc43d7f) * Update CONTRIBUTING.md with test requirements, fix WebUiSafetyTest toggle escaping assertion (5ed415b) * Fix WebUI logical errors, add mobile UX improvements, add comprehensive tests, bump version to v2.2.4 (c396c72) * Fix injection bug: add msg_iov to msghdr structs and relax cmsg_len validation (deeda92) * Initial plan (04188ca) * Merge pull request #465 from tryigit/palette-ux-improvements-10080793098256433986 (a5ec55a) * Merge pull request #466 from tryigit/fix-security-vulnerabilities-10485821716607011129 (64fe840) * 🛡️ Sentinel: Security Hardening (5be316f) * 🎨 Palette: WebUI/UX Enhancements for Mobile Layout, Usability and Localization (fb081b4) * Merge pull request #464 from tryigit/bolt-optimize-proc-iteration-4098856846359675433 (bdf159e) * ⚡ Bolt: Optimize /proc iteration to avoid String allocations (6897e4d) * Merge pull request #462 from tryigit/bugfix/file-poller-api31-11145345347557644235 (fce968a) * 🔧 Bugfix: Stabilize FilePoller instrumentation tests on API 31 (fca0680) * Update README.md (2590e65)

* Merge pull request #461 from tryigit/copilot/stabilize-daemon-resilience-tests (de2e0ba) * test: deduplicate daemon MainKt entrypoint literal (b6f118f) * test: stabilize template fixture lookup and flaky poller benchmark (57295e4) * Initial plan (178ac5b) * Merge pull request #460 from tryigit/copilot/update-test-actions (84731c8) * style: clean up test helper formatting (24f1de6) * test: fix daemon crash resilience file path lookup (1c000ae) * Initial plan (531f0a4) * Merge pull request #459 from tryigit/copilot/update-2-2-3-test-actions (8cd9ce0) * Address code review feedback: fix grep -cn, improve test assertions (65fd540) * v2.2.3: fix daemon crash bug in service.sh, add crash resilience tests (65e1a11) * Initial plan (bb9a27c) * feat: Battery Health Spoof and fix daemon crash (V2.2.3) (d19de9f)

* 🔧 Fix: Update RkpInterceptorTest for DeviceInfoV3 (14-field map header 0xAE) (3e831d8) * 🔧 Fix: Resolve val reassignment errors in WebServerTest and WebServerHostValidationTest (6c6f79d) * 🛡️ Sentinel: Fix insecure PRNG + harden RKP validation + update Jules agent knowledge base (a1abeb1) * ⚡ Evolution: HAL-level DRM interception + RKP AuthenticatedRequest v2 compliance + DeviceInfoV3 (cfd1151) * Merge remote-tracking branch 'origin/master' into fix/build-warningfree-root-compat (ec9ad07) * 📚 Docs: Update Jules agent knowledge base with 2026-03-08 audit findings (16b6309) * 🛡️ Sentinel: Harden telephony interception and expand native property spoofing (6801567) * 🔧 Build: Stabilize cross-platform pipeline and remove warning regressions (668302c) * Merge pull request #454 from tryigit/jules-14909337055026614694-4ec9a583 (2148077) * Merge branch 'master' into jules-14909337055026614694-4ec9a583 (cd85edc) * Merge pull request #458 from tryigit/jules-5452415706494742393-9e27647d (174fa52) * 🔧 Bugfix: Fix Zip bomb DoS when skipping unsafe entries during extraction (82b8bc8) * Merge pull request #457 from tryigit/palette-webui-ux-enhancements-923833898739331625 (e76cb6b) * Merge pull request #456 from tryigit/bugfix/fix-path-traversal-zip-1910291153407006151 (15e0364) * 🎨 Palette: WebUI/UX Enhancement (43ad5c6) * 🛡️ Sentinel: Security Hardening (617909c) * Merge pull request #455 from tryigit/bolt-optimization-string-allocations-3360129687939591828 (5155fa9) * ⚡ Bolt: Optimize String allocations in Rust parsing paths (561dee0) * 🔧 Bugfix: Fix Kotlin compile errors in service module and stub (c4de805) * 🔧 Bugfix: Fix Kotlin compile errors in service module and stub (5475d3e) * 🔧 Bugfix: Fix Kotlin compile errors in service module and stub (1ed538a) * 🔧 Bugfix: Fix Kotlin compile errors in service module and stub (ed30e02) * build: enforce strict compilation warnings (warnings as errors) across all languages (57d3a3f) * chore(service): fix Kotlin compilation deprecation warnings (fbfefd5) * Update README.md (ac25ae3) * Fix typo in README tip section (f2282fa) * Change header level for project description (f6002c7) * Update README.md (33a00ed) * Revise README for clarity and module naming (14b5b41) * Remove numbering from Quick Start instructions (e04012c) * Update README.md (d9a7d06) * docs: rewrite README & issue templates (f6930e7) * fix(ci): fix rust static library name to fix missing library warning (ff1a09e) * ci: unify safety checks into build.yml as sequential pipeline (c82ea00) * fix(ci): handle trailing comments in sepolicy semicolon check (2b0db0a) * ci: add safety-check workflow + agent audit workflows (25bba83) * fix: critical sepolicy semicolons, security, performance, and correctness bugs (6076418) * docs: add comprehensive FFI safety audit notes (89c8719) * Merge pull request #451 from tryigit/jules-bolt-optimize-get-property-6530408386674056989 (e311d76) * ⚡ Bolt: Optimize get_property by taking a closure instead of cloning String (c5107e2) * ⚡ Bolt: Optimize get_property by taking a closure instead of cloning String (eb02bd0) * Merge pull request #449 from tryigit/fix-rust-ffi-and-kotlin-dos-5848498879284581662 (99e4803) * Merge pull request #450 from tryigit/palette-webui-delete-keybox-2437239932739252651 (1be7f59) * 🎨 Palette: WebUI/UX Enhancement (bb6253d) * 🛡️ Sentinel: Security Hardening (5dbf555) * Merge pull request #446 from tryigit/sentinel-security-hardening-11633651745086711411 (040c02c) * Fix memory leak and undefined behavior in Rust FFI layer (7e7d3ef) * Merge pull request #444 from tryigit/bolt-properties-oncelock-optimization-17553387169243342912 (a24dd34) * Merge pull request #445 from tryigit/palette-ux-snackbar-refactor-12106425944359447218 (c3cadb4) * 🎨 Palette: WebUI/UX Enhancement (1553c0a) * ⚡ Bolt: Remove redundant OnceLock in properties.rs (e2fad2f) * Merge pull request #443 from tryigit/fix-filepoller-flakiness-11441911235004310751 (cf007b7) * 🔧 Bugfix: Remove API 36.1 to fix CI boot fail (66daec4) * 🔧 Bugfix: Use auto GPU in actions to prevent boot fail (8e0dad9) * 🔧 Bugfix: Fix FilePoller tests flakiness (176a018) * Merge pull request #440 from tryigit/bugfix/android-ci-test-flakes-1574347509763796005 (07a67a2) * 🔧 Bugfix: Expand CI test matrix for Android API levels 31 to 36.1 (v2.2.2) (573c7be) * Merge pull request #438 from tryigit/expand-ci-test-matrix-12028679410478589516 (4890fd4) * 🔧 Bugfix: Expand CI test matrix for Android API levels 31 to 36.1 (2022808) * Merge pull request #439 from tryigit/jules-bugfixes-4681435651162043823 (2fb2e90) * 🔧 Bugfix: Handle Os exceptions securely and fix WebServer crashes (e08604a) * 🔧 Bugfix: Expand CI test matrix for Android API levels 31 to 36.1 (fe69bb1) * Merge pull request #437 from tryigit/jules-4713936807405336082-459f14e3 (46bee2f) * 🔧 Bugfix: update log tag from SysService to cleverestricky (1629be3) * Merge pull request #436 from tryigit/perf-jsonreader-15233210554058440939 (862b7c9) * ⚡ Bolt: Optimize JSON Reader Buffering (b2fd7cb) * Merge pull request #434 from tryigit/fix-issue-logging-improvements-7280684644182597548 (864011e) * Merge pull request #435 from tryigit/feat/pif-spoofing-options-17974087022449383456 (176e42d) * 🔥 God-Mode Evolution: Add PIF Custom ROM Spoofing Features (c60ed69) * 🔧 Bugfix: Add issue template and logging improvements (ca30104) * 🔥 God-Mode Evolution: Add PIF Custom ROM Spoofing Features (9f7806b) * 🔧 Bugfix: Add issue template and logging improvements (2fc674c) * Merge pull request #430 from tryigit/bugfix/config-patch-level-test-15761698525956246720 (1bc1a4f) * Merge pull request #431 from tryigit/palette-ux-fixes-1727145624022817883 (6f484e3) * Merge pull request #432 from tryigit/jules-7861373795756921522-b3b04f49 (52143c1) * Merge pull request #433 from tryigit/security-hardening-rust-ffi-14238440582320334325 (b52de1a) * 🛡️ Sentinel: Security Hardening (Rust FFI Memory Safety) (8b1a4cd) * ⚡ Bolt: O(1) Binder Intercept Tracking (86ac7ae) * Hi, Jules here! I've completed the 🎨 Palette: WebUI/UX Enhancement. Here is a summary of the updates I made: (d65d1fe) * 🔧 Bugfix: Fix ConfigPatchLevelTest by replacing Mockito with reflective state injection (3580312) * Merge pull request #429 from tryigit/fix-ffi-panic-unwind-9942845663047712435 (27b289e) * Fix Rust FFI panic unwind safety in properties cache (79ccb6d) * Merge pull request #428 from tryigit/dependabot/gradle/gradle-wrapper-9.4.0 (2d68e2b) * build(deps): bump gradle-wrapper from 9.3.1 to 9.4.0 (8b7640f) * Merge pull request #427 from tryigit/sentinel-security-hardening-13389500138211768961 (6e17b42) * Refactored `rust_prop_get` and `rust_prop_set` to safely use `validate_slice_args` for processing raw pointers instead of unverified access. This ensures explicit null, bounds, and alignment checks, mitigating potential Undefined Behavior (UB) and memory corruption across the C++ and Rust boundaries. (4a5544d) * Merge pull request #426 from tryigit/palette-webui-ux-enhancement-481817960238970479 (e4074dc) * Merge pull request #425 from tryigit/bolt-optimization-15303949702383521245 (010ca98) * 🎨 Palette: WebUI/UX Enhancement (31cdeab) * ⚡ Bolt: Optimize String allocations in parse_fingerprints (0b84bb0)

* Merge pull request #411 from tryigit/bugfix/dependabot-and-build-issues-10294378294177964892 (7b88449) * 🔧 Bugfix: Dependabot vulnerabilities, NDK 27 native build issues, and Compose compatibility (v2.1.0) (12faf6c) * 🔧 Bugfix: Dependabot vulnerabilities and NDK 27 native build issues (v2.1.0) (226dbeb) * Merge pull request #404 from tryigit/jules-fix-injection-selinux-8009485924875707501 (0977ab4) * Merge branch 'master' into jules-fix-injection-selinux-8009485924875707501 (2ec798c) * Merge pull request #406 from tryigit/dependabot/gradle/androidx.test-runner-1.7.0 (d808118) * Merge pull request #407 from tryigit/dependabot/gradle/androidx.annotation-annotation-1.9.1 (d1ffccf) * Merge pull request #408 from tryigit/dependabot/gradle/org.bouncycastle-bcpkix-jdk18on-1.83 (1d2f39d) * Merge pull request #405 from tryigit/dependabot/gradle/org.lsposed.lsplugin.cmaker-1.4 (0d5b492) * Merge pull request #410 from tryigit/fix/unresolved-references-encryptor-433493210940134845 (7bd8124) * Merge pull request #409 from tryigit/dependabot/gradle/org.json-json-20251224 (db052d4) * 🔧 Bugfix: (v2.2.0) Fix unresvoled references in encryptor-app (41fd92c) * build(deps): bump org.json:json from 20240303 to 20251224 (c51d8f4) * build(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.79 to 1.83 (1acc009) * build(deps): bump androidx.annotation:annotation from 1.8.0 to 1.9.1 (476b169) * build(deps): bump androidx.test:runner from 1.6.1 to 1.7.0 (0db61e1) * build(deps): bump org.lsposed.lsplugin.cmaker from 1.2 to 1.4 (e4e580f) * 🔧 Bugfix: (v2.2.0) Allow KSU injection to access keystore socket (8c8b66e) * Merge pull request #403 from tryigit/fix-compile-sdk-10777376391896056752 (e1bc8fb) * 🔧 Bugfix: fix encryptor-app compileSdk version (b9872cb) * Merge pull request #402 from tryigit/jules-1275673333327667568-0ab8b437 (ae8cda0) * Optimize `BinderInterceptor` map to use O(1) unordered_map (8550b72) * Merge pull request #401 from tryigit/jules-fixes-9104899763667720882 (93d41fe) * 🔧 Bugfix: Build errors & security false-positives (v2.1.9) (68238c7) * Merge pull request #400 from tryigit/dependabot/gradle/gradle-6e99be23a3 (20afc56) * Bump org.bouncycastle:bcpkix-jdk18on (5409066) * Merge pull request #399 from tryigit/copilot/remove-kotlin-android-plugin (50bfa71) * Use providers.exec in service Gradle tasks for Gradle 9 (9ecfe09) * Use explicit su arguments in service restart adb command (a31f903) * Qualify service task shell commands with project.exec (964a9c4) * Replace deprecated task() DSL with tasks.register in service script (f4fd757) * Use AGP DSL arguments() call for defaultConfig cmake options (4712be4) * Remove incompatible cmaker plugin usage in module script (50622b9) * Use buildTypes iteration instead of removed applicationVariants API (29e1411) * Make push task lazy with task provider output path (983a7ad) * Migrate module task declarations to tasks.register API (e09580a) * Configure Kotlin JVM targets via compilerOptions blocks (8af2f53) * Remove unresolved kotlinOptions blocks after AGP 9 Kotlin migration (f901f35) * Remove obsolete Kotlin Android plugin application from Android app modules (237baa5) * Initial plan (d3ef29a) * Merge pull request #398 from tryigit/copilot/fix-gradle-unresolved-references (76c12e2) * Fix root Gradle script unresolved references for AGP 9 (6f718c1) * Initial plan (4b8445a) * Merge pull request #397 from tryigit/sentinel-security-hardening-10323501857949594445 (b1191ff) * 🛡️ Sentinel: Security Hardening (88fe81a) * Merge pull request #384 from tryigit/dependabot/gradle/org.robolectric-robolectric-4.16.1 (cee1dd4) * Merge pull request #382 from tryigit/dependabot/github_actions/actions/cache-5 (fa69512) * Merge branch 'master' into dependabot/gradle/org.robolectric-robolectric-4.16.1 (5087a5e) * Merge pull request #388 from tryigit/dependabot/gradle/androidx.activity-activity-compose-1.12.4 (36488d0) * Bump androidx.activity:activity-compose from 1.9.0 to 1.12.4 (0b2f35f) * Merge pull request #393 from tryigit/dependabot/gradle/androidx.compose-compose-bom-2026.02.01 (0e0711b) * Merge pull request #394 from tryigit/dependabot/gradle/androidx.test.ext-junit-1.3.0 (a041352) * Bump androidx.test.ext:junit from 1.2.1 to 1.3.0 (11e7d70) * Merge pull request #389 from tryigit/dependabot/gradle/org.lsposed.libcxx-libcxx-29.0.14206865 (9c6277b) * Merge pull request #387 from tryigit/dependabot/gradle/kotlin-2.3.10 (3599c5e) * Merge branch 'master' into dependabot/gradle/kotlin-2.3.10 (a7f4e2d) * Merge pull request #381 from tryigit/dependabot/gradle/androidx.annotation-annotation-1.9.1 (a66f2a5) * Merge pull request #395 from tryigit/dependabot/gradle/net.bytebuddy-byte-buddy-agent-1.18.7 (104faab) * Merge pull request #396 from tryigit/dependabot/gradle/androidx.test.espresso-espresso-core-3.7.0 (62a129f) * Merge branch 'master' into dependabot/gradle/androidx.test.espresso-espresso-core-3.7.0 (9955e00) * Merge pull request #392 from tryigit/dependabot/gradle/agp-9.0.1 (f52061a) * Merge branch 'master' into dependabot/gradle/agp-9.0.1 (03fda93) * Bump androidx.test.espresso:espresso-core from 3.6.1 to 3.7.0 (2f7166f) * Bump net.bytebuddy:byte-buddy-agent from 1.14.12 to 1.18.7 (fb13d4b) * Merge pull request #391 from tryigit/dependabot/gradle/gradle-wrapper-9.3.1 (6dca0d5) * Bump androidx.compose:compose-bom from 2024.06.00 to 2026.02.01 (771b441) * Bump agp from 8.5.1 to 9.0.1 (ba5e8a4) * Merge pull request #390 from tryigit/dependabot/gradle/org.bouncycastle-bcpkix-jdk18on-1.83 (4eb7ed0) * Bump gradle-wrapper from 8.7 to 9.3.1 (1025ab2) * Bump org.bouncycastle:bcpkix-jdk18on from 1.78.1 to 1.83 (6ff3a33) * Bump org.lsposed.libcxx:libcxx from 27.0.12077973 to 29.0.14206865 (5e5ecd7) * Bump kotlin from 2.0.0 to 2.3.10 (e425ed0) * Merge pull request #380 from tryigit/dependabot/github_actions/actions/setup-java-5 (747a008) * Merge pull request #379 from tryigit/dependabot/github_actions/gradle/actions-5 (c5112f9) * Merge pull request #383 from tryigit/dependabot/github_actions/actions/checkout-6 (510988c) * Merge branch 'master' into dependabot/gradle/org.robolectric-robolectric-4.16.1 (c1d12e5) * Merge pull request #386 from tryigit/dependabot/gradle/org.jetbrains.kotlinx-kotlinx-coroutines-android-1.10.2 (336045f) * Merge pull request #385 from tryigit/dependabot/gradle/androidx.test-runner-1.7.0 (19f2aee) * Merge pull request #378 from tryigit/dependabot/gradle/org.mockito-mockito-core-5.22.0 (15ed020) * Bump org.jetbrains.kotlinx:kotlinx-coroutines-android (367d6b7) * Bump androidx.test:runner from 1.6.1 to 1.7.0 (270268b) * Merge pull request #377 from tryigit/dependabot/github_actions/actions/upload-artifact-7 (058847b) * Bump org.robolectric:robolectric from 4.11.1 to 4.16.1 (d1face6) * Bump actions/checkout from 4 to 6 (f5d82c2) * Bump actions/cache from 4 to 5 (768c45a) * Bump androidx.annotation:annotation from 1.8.0 to 1.9.1 (741f742) * Bump actions/setup-java from 4 to 5 (7919b12) * Bump gradle/actions from 4 to 5 (8ed20f9) * Bump org.mockito:mockito-core from 5.11.0 to 5.22.0 (445a420) * Bump actions/upload-artifact from 4 to 7 (caf2473) * Merge pull request #376 from tryigit/feature-webui-profiles-1467332914269815817 (689b15b) * feat: add file-based profile control for settings (1463e2c)

## What's Changed * 🎨 Palette: WebUI/UX Enhancement by @tryigit in https://github.com/tryigit/CleveresTricky/pull/356 * 🛡️ Sentinel: Security Hardening by @tryigit in https://github.com/tryigit/CleveresTricky/pull/357 * Fix injection process SELinux permission denial by @tryigit in https://github.com/tryigit/CleveresTricky/pull/359 * 🛡️ Sentinel: Security Hardening by @tryigit in https://github.com/tryigit/CleveresTricky/pull/360 * 🎨 Palette: WebUI/UX Enhancement by @tryigit in https://github.com/tryigit/CleveresTricky/pull/361 * ⚡ Bolt: Optimize KeyboxVerifier by caching MessageDigest by @tryigit in https://github.com/tryigit/CleveresTricky/pull/362 * 🛡️ Sentinel: Security Hardening by @tryigit in https://github.com/tryigit/CleveresTricky/pull/363 * 🔧 Bugfix: (v2.1.8) by @tryigit in https://github.com/tryigit/CleveresTricky/pull/364 **Full Changelog**: https://github.com/tryigit/CleveresTricky/compare/V2.1.7...V2.1.8

* Merge pull request #320 from tryigit/bugfix/binder-interceptor-crash-17862460741137206828 (c0184c8) * Merge pull request #321 from tryigit/verify-webui-and-unit-tests-3989596313537599511 (41fe8c0) * Add unit tests and frontend verification for encryptor-app (2533613) * Fix crash in binder_interceptor due to race condition with SIGPWR (d42ffa9) * Merge pull request #319 from tryigit/refactor/encryptor-app-webui-design-7927748193057245526 (80b790c) * Merge pull request #318 from tryigit/rkp-bcc-spoofing-858271551635960979 (f11d9f5) * feat(rust): Implement RKP Boot Certificate Chain (BCC) spoofing with proper formatting and testing (5784f30) * Refactor Encryptor App to match WebUI design and add functionality (be194f5) * feat(rust): Implement RKP Boot Certificate Chain (BCC) spoofing (f46c3af) * Merge pull request #317 from tryigit/sentinel-security-hardening-5460602525610205784 (0a85374) * 🛡️ Sentinel: Security Hardening for Rust FFI (4470996) * 🛡️ Sentinel: Security Hardening for Rust FFI (f0bc822) * Merge pull request #316 from tryigit/bolt/optimize-rust-size-3235325379473374925 (bf2bdd6) * ⚡ Bolt: Optimize Rust binary size and allocations (57b8ee1) * Merge pull request #315 from tryigit/copilot/migrate-zgk-jni-to-rust (2738853) * Fix FRIDA_EVALUATION.md link, complete code review and security checks (150e2bf) * Add release profile optimizations, fingerprint module, refined symbol strategy, FRIDA evaluation (f8fa5f8) * Remove codeql artifact and add to gitignore (4d19603) * Final: all checks passed (0216456) * Add C FFI layer, GitHub Actions Rust tests workflow, update docs (75435fa) * Add Rust CBOR/COSE library with 28 passing tests (ed33e71) * Initial plan (1260925) * Merge pull request #314 from tryigit/webui-realtime-validation-11485578713529046315 (a22ff9a) * Add real-time spoofing validation to WebUI (f67396b) * Merge pull request #307 from tryigit/bolt-optimize-attestation-5950261220761402998 (8d14820) * Merge pull request #309 from tryigit/sentinel-security-hardening-9220381008910187096 (b94b709) * Refactor kick_already_blocked_ioctls to safely iterate signals (c73fb72) * ⚡ Bolt: Optimize Attestation Hot Paths (3f2c493)

* Merge pull request #313 from tryigit/copilot/fix-build-errors-magisk (7097afb) * Fix kbContent textarea style: remove display:none that was never active from merged style attribute to match WebServerHtmlTest expectation (93f6324) * Fix duplicate style attribute on kbContent textarea (efdb4cf) * Fix 10 failing tests: security headers, host validation, sensitive file access, DoS protection, accessibility labels, clipboard, fingerprint copy, enter key support (8a7983f) * Initial plan (4441fd8) * Merge pull request #312 from tryigit/fix-webserver-compilation-15281605287804300149 (dfbd469) * Fix WebServer compilation and test failures (88a3d79) * Fix WebServer compilation and address test failures (c021a05) * Fix WebServer compilation and test failures (cf4f7fd) * Fix compilation errors in WebServer.kt and CboxManager.kt (301d9d9) * Merge pull request #311 from tryigit/feature/encrypted-keybox-dist-11560674894460578181 (936be7f) * Implement Encrypted Keybox Distribution ecosystem (f89bb2b) * Merge pull request #305 from tryigit/fix-arg-push-bug-11336633652156938910 (a2143c7) * Fix bug in remote_pre_call logic in utils.cpp where incorrect arguments were pushed to stack on overflow. (d7e36a0) * Add note for switching to Rust (f8636a6) * Merge pull request #302 from tryigit/fix/config-reset-leakage-8602200594752273107 (9402b82) * Merge pull request #304 from tryigit/sentinel-security-hardening-7369968773897265921 (637e485) * Sentinel: Security Hardening (f10ea7c) * Merge pull request #303 from tryigit/palette-webui-keybox-ux-3206415553091379825 (81caa05) * Sentinel: Security Hardening (1bfcdc2) * feat(webui): Enhance Keybox Jukebox UX with list view and robust error handling (52a0b85) * Fix Config state leakage in unit tests (38796df) * Merge pull request #301 from tryigit/bolt-cache-directory-keyboxes-17235932388536917537 (c0a0ef7) * Cache directory keyboxes to reduce I/O (218c35f)