This update includes security and dependency maintenance while retaining verified Handshake browsing, ordinary HTTPS browsing, and the native wallet.

Ordinary HTTPS pages now open while Handshake headers synchronize. The address bar and security status stay in sync with the loaded page. Handshake names continue to use verified proofs and DANE.

Improves initial wallet peer connections and automatic swap-peer reconnects. Resumes Bitcoin synchronization after app restarts and reuses verified filter data. Makes BTC/HNS swap keys reproducible from the recovery seed and public agreement for both offer directions. Keep local swap records until settlement: automatic contract rediscovery after app-data loss remains incomplete.

Reuses Wallet peer connections for browser sync, connects reserve peers concurrently, resumes saved wallet scans, and restores compatibility with saved ShakeScape offers. Includes updated published wallet dependencies.

Refreshes name-proof timing after peer discovery to improve Handshake name import reliability. iOS also refreshes direct HNS synchronization timing at each stage and adds protected signing support for explicitly selected archival wallet recovery.

Uses one hsd/Bob-compatible account-zero receive chain for ordinary HNS and Handshake name ownership. The iOS wallet, native binding, and receive interface now share that single address contract. This update retains protected wallet storage, direct peer discovery, board replication, swap recovery, matched swap notifications, automatic FINALIZE tracking, accessible controls, iPad and compatible Mac support, and direct browser-link handling.

Aligns the iOS wallet and direct ShakeScape swap flows with Android, including automatic HNS and Bitcoin watch refresh, durable funding and settlement recovery, clearer reserved-funds errors, swap-stage notifications, and notification-to-wallet navigation. Adds iPad and Apple-silicon Mac compatibility, Dynamic Type, VoiceOver and Voice Control descriptions, reduced-motion and contrast accommodations, accessible wallet and name navigation, hardware-keyboard browser commands, and direct handling for browser-app-installation links. Strict DNSSEC, DANE, native approval, and wallet-isolation protections remain enforced.

Adds native Bitcoin compact-filter synchronization and guarded sends, direct ShakeScape offer exchange, and durable noncustodial BTC/HNS atomic-swap progress. Also improves Handshake wallet synchronization, birthday-based restore, Unicode name tracking, raw resource records, transfer/finalization, peer discovery, lifecycle status, browser connection diagnostics, and transient navigation recovery while retaining strict DNSSEC, DANE, native approval, and wallet-isolation protections.

Fixes authenticated CNAME and CDN resolution for sites that previously produced an indeterminate namespace result, including sites behind same-owner CDN aliases. Also improves recovery from transient navigation timeouts while retaining strict DNSSEC, DANE, navigation, and wallet-isolation protections.

Improves direct HNS wallet synchronization, new-wallet birthday selection, pending-send recovery, and browser header freshness when returning from the wallet. Also clears a stale recovery message after authenticated browsing resumes and keeps bounded wallet catch-up presented as one continuous operation.

Adds device-local native wallet lifecycle controls and read-only balance, receive, history, names, and status fields, which remain unavailable without a scoped indexed backend. Also adds ECH for supported HNS origins, clearer sync/reset recovery, and code-split asset-burst handling without raising the total proxy limit.

Fixes secure-browser startup on fresh iOS installs when the default protection policy is already active. Safe page loads now recover from brief connection losses during validated Handshake header maintenance. Authenticated ICANN TLSA absence now remains valid when DNS replies contain compressed negative records or resolution spans a clock tick. This update also keeps browsing responsive during sync, publishes header and peer state atomically, and adds hardened recovery for confirmed DNS interception.