Performance Improvements

This release includes 1 internal improvements for better reliability and performance.

Improvements

fix(ops): preserve legacy redaction placeholders

Ignore the exact legacy placeholder as well as canonical when counting generic credential candidates in scoped usage-tracking URLs.

fix(infra): verify trusted cron monitor freshness

The protected-source monitor digest is checked against the root-owned runtime bundle before and after the signed root-trust transaction.

fix(billing): contain non-deposit session-binding failures

Contain at the existing caller boundary across 34 non-deposit billing/support routes (38 token operations).

fix(auth): retry deferred session validation

Keep the session-validation success timestamp authoritative and separate from a bounded retry timestamp.

fix(api): return recoverable reauthentication on binding loss

Implements by wrapping all 79 strict session operations across the 58 admitted API routes in the shared typed session-binding boundary.

fix(auth): handle identity session-binding failures

Route typed session-binding failures through the existing controlled session-expiry boundary across the 25 assigned identity routes.

feat(ops): add scoped usage metadata credential redaction handler

- Add a fixed-scope, empty-schema irreversible handler that redacts credential-shaped values only from and in the fixed UTC window.

fix(backup): validate expected account pin

Fail early in the existing backup-restore-drill configuration preflight when the independently provisioned is missing or not 32 lowercase hexadecimal characters.

feat(auth): add typed session-binding caller boundary

Adds a typed reusable caller boundary that maps only to the canonical session-expiry response while preserving success values and rethrowing unrelated errors.

fix(backup): guard Netcup dual-restore cutover gate

Add an offline structural/source-contract regression test for the Netcup cutover runbook and actual encrypted base/WAL publisher and relay source paths.

General bug fixes and improvements

Plus 7 internal improvements for better reliability and performance.

Bug Fixes

cover percent-encoded usage tracking credentials

Fix the fixed-scope usage-tracking credential cleanup false negative for percent-encoded credential parameters and encoded nested URLs, and align its classification/verification with the shared redact.

stop Cloudflare publication after TERM

.

return controlled reauthentication from dashboard requests

Handle session-binding failures consistently across the affected dashboard and data API routes so missing bindings return the existing controlled session-expiry response.

stop thin real pages with optional scripts escalating to T4

Fix the platform-wide thin-page classifier that escalated real server-rendered responses to T4 merely because they contained an optional external script.

distinguish restricted login outcomes

Return a stable, neutral outcome after password verification and map only allowlisted login failures to fixed UI messages.

Plus 9 internal changes for stability and performance.