What we shipped.

• Menu bar icon now tints to white in the macOS menu bar (or to the system tint colour in custom appearances), matching every other system menu bar item. v1.6.5 set isTemplate = true on the output NSImage only — but the source SVG carried its blue fill through the drawing-handler composite, so AppKit saw a coloured bitmap and rendered it as-is. v1.6.6 marks the source as template *before* drawing, so the composite is alpha-only and AppKit applies the proper menu bar tint.
• Bumped the visual glyph size from 13pt → 16pt inside the same 18pt NSImage slot. Now fills the menu bar height the same way Wi-Fi / Battery / Control Center do.

• Menu bar icon now renders the real brand monogram from the SVG asset, not the simplified two-arc approximation introduced in 1.6.3. The SVG is composited at 13×13 into the 18×18 NSImage with isTemplate = true, so macOS auto-tints the brand silhouette to the menu bar's appearance (light/dark/accent/vibrancy) while still being a real, design-faithful CC monogram up close.

• Menu bar icon glyph shrunk ~25% — fills 13pt inside the 18pt slot instead of 17pt edge-to-edge. Matches the visual weight of system icons (Wi-Fi, Control Center, Battery) so it sits next to them without looking oversized.

• Menu bar icon rendered massive in the macOS menu bar. The v1.6.1 fix used a SwiftUI-drawn glyph that worked, but the v1.6.2 brand-mark vectorisation silently regressed the call site to the NetworkLogo image asset — and SwiftUI's MenuBarExtra label is a hostile environment for any image-backed view, regardless of .frame() and .fixedSize() modifiers. Replaced with a programmatically-drawn 18×18 NSImage with isTemplate = true — the route the platform was designed for. macOS now sizes and tints the icon natively, like every other system menu bar item. Locked behind a comment in CommonCommuteApp.swift warning future commits not to revert.

• Brand mark rendered oversized in some windows (sidebar brand chip, menu-bar popover header, others). Same SwiftUI intrinsic-size bug that affected the menu bar icon in 1.6.1 — the SVG's vector representation reported its viewBox (256) as the natural size and some layouts honoured that before .frame(...) clamped it. Fixed by adding explicit .aspectRatio(1, contentMode: .fit) and .fixedSize() to NetworkLogo and AnimatedNetworkLogo so the requested frame is now the ideal size, not a soft suggestion.

A polish-and-fix release. No functional changes to the network — same catalog, same pricing, same security envelope. The Mac app gained a batch of native polish, and the brand pipeline became fully vector.

• In-app feedback (Help → Send Feedback…, ⌘K → Send feedback). Replaces the bare mailto: link with a sheet that auto-attaches app version, chip, memory, connection status, optional 5-minute telemetry, and an optional recent-logs excerpt — every future support email now arrives with a complete repro.
• Diagnostics toggle in Settings → Advanced. Gates Apple MetricKit collection. Default-on, live-toggleable without an app restart.
• Security link in the About sheet (→ commoncompute.ai/security).
• VoiceOver labels on the dashboard utilization gauges, sidebar nav rows, menu-bar icon, status footer, and login fields.

• Menu bar icon now renders the real brand monogram from a true vector source, sized predictably regardless of display scale. The side status dot is gone — status reads as opacity on the glyph itself (earning = full, paused = 45%, offline = 35%).
• Brand mark is fully vector everywhere — apps/web/public/brand/*.svg and the Mac app's asset catalog now share a single 6 KB SVG traced from the canonical raster. The wordmark is also outlined-to-paths so it renders identically on machines without Inter Tight.
• Error copy for payouts, runner failures, rate-limits, and Stripe-shaped errors. No more "stripe: account_invalid" or "HTTP 429" in the UI.
• APIClient now stamps X-App-Version on every request, so the backend can attribute heartbeat traffic to the build that produced it.

• Menu bar icon rendered "massive" on some display configurations because the Mac asset was a 1254×1254 1x PNG. Switched to a vector asset with preserves-vector-representation: true; size is now consistent at any scale.

• New scripts/release.sh — local-Mac orchestrator that wraps build-dmg.sh, publish-appcast.sh, optional gh release create, and an optional Cloudflare deploy. No GitHub Actions required.
• New scripts/changelog-extract.mjs — single extractor that feeds both the local release flow and the GH workflow's release-notes body, sourced from this CHANGELOG.
• New scripts/trace-brand-mark.sh + scripts/outline-wordmark.py — reproducible vectorisation of the brand mark and wordmark from raster + bundled-font sources.

• New app icon — the interlocking-C monogram on a dark navy squircle, visible in the Dock and Finder.
• Wordmark refreshed to Inter Tight ExtraLight throughout the app — airier, more modern.
• Electric-blue accent rolled through the menu-bar UI, login flow, earnings panel, and toasts.
• First-launch animation now fades the new mark in instead of the old network-node reveal.
• commoncompute.ai redesigned to match.

Functional behavior is identical to 1.5.0 — same security hardening, same earnings, same workloads. Visual update only.

Security hardening release. Closes a class of attacks that could have let a malicious customer poke at your home network or run untrusted code on your Mac. None of these were ever exploited — we found and fixed them ourselves.

• Strict URL policy on every job input. Audio, image, and video downloads now flow through a single chokepoint that refuses anything except HTTPS to public hosts. Loopback, RFC1918 home networks, AWS metadata addresses, and link-local IPs are all rejected — even via redirect. Magic-byte checks confirm what arrived actually is the media type the runner asked for.
• Cryptographic proof of every task. The router now signs each task assignment with Ed25519. Your Mac refuses anything that doesn't verify against the pinned public key, with a 5-minute clock-skew window and replay protection.
• Hash-pinned model downloads. Models fetched via ModelManager go through a signed manifest. The Mac SHA-256s every byte and refuses any model that doesn't match what we published.
• Ownership check on the WebSocket connect. Your Mac can no longer be impersonated by another logged-in user — the device id is bound to the authenticated account at the gateway.
• Tighter Keychain protection. Your session token now requires the screen to be unlocked and never syncs via iCloud Keychain. Existing entries are upgraded automatically on first launch.
• App Transport Security defaults restored. The blanket "allow plaintext" exception is gone. All outbound traffic is TLS 1.2+.

• Sign-in and signup views now fill the whole window with the brand background — no more grey bezel around a floating card.
• Email and password fields advertise the right content types so Edit → AutoFill Passwords… and the right-click menu surface the Passwords app directly. Return signs you in; Tab moves between fields.

• Associated Domains entitlement and the apple-app-site-association file at commoncompute.ai. Once the app is Developer-ID signed, the Passwords app will automatically suggest credentials stored for commoncompute.ai web login.

• Command palette (⌘K). Jump to any page, open docs, check for updates, or sign out — from anywhere in the app, without reaching for the mouse.
• Keyboard shortcuts reference (⌘/). A tidy sheet lists every binding, grouped by category.
• About sheet. Version, build number, release notes, terms, and privacy — all one click away.
• Toast notifications and skeleton loaders — small touches that make actions feel finished and first loads feel faster.

• Duplicate "View" menu in the menubar; page-jump shortcuts now live where you'd expect them.

• Design system tightening — new spacing, radius, and motion scales brought the Mac app pixel-for-pixel in sync with the web dashboard.

• The app now identifies itself with a stable hardware fingerprint, so restarting no longer creates duplicate "devices" on your dashboard.

• Auto-updates. New versions install in the background via Sparkle. No more DMG downloads after this one.
• Email verification in the app and web dashboard — resend the code without restarting.
• Settings → Updates. Manual "Check Now" and toggles for automatic download and install.
• Payout estimator on commoncompute.ai/providers — chip, RAM, idle hours → expected earnings.

• Updates are signed with an EdDSA key we hold. Anything that isn't signed by us will be rejected.