Boxing 2026.9.20

One-time data integrity closure: bookmark removal truly takes effect (re-entry/sync does not revive), Pages release sync is included in access control.

• Deleted bookmarks will no longer be revived — Single deletions in bookmark pop-ups are now going through the official submission channel and written on the tombstone; After reopening the browser or pulling WebDAV to sync, deleted bookmarks will not reappear
• Double-click Zoom Mistaken Small Box Creation — The issue where double-clicking to scale under a specific signature (Firefox) may repeatedly create a small box has been fixed

• Write path consistency: Add bookmarks and delet/rearrange unified change entry points (commit)
• layout Auditable: Rewrite exemption with all names + due date + ticket path; Deleting classes keeps zero immunity
• Test Governance: Expired Flaky exemption from zero (2 cancellations + 1 observation, renewal prohibited)
• Pages distribution chain: Allows v* tag to trigger deployment; The deployment tail automatically verifies that the demo version matches the release tag (outdated but 200 deployments will turn red).
• Test hardening and contrast access control access to the local pretest chain

| Browser | Install |
|---|---|
| Firefox | [Firefox Browser ADD-ONS] (https://addons.mozilla.org/zh-CN/firefox/addon/boxing-newtab/) |
| Edge / Chromium | [Edge Add-ons] (https://microsoftedge.microsoft.com/addons/detail/inkgieheaiifkkdmlpggihjplkkgpepi) |

This release **no longer provides ** '.xpi' / '.crx' downloads. Signatures and updates are handled by the store.

• Source code can be found in this repository; Local build: 'npm ci & npm run build'
• Attachments include the store source code review package and Chromium/Firefox zip (for sideloading/debugging); Check 'SHA256SUMS.txt'
• Privacy Policy: https://xxx91n.github.io/boxing/privacy-policy.html

• This version is 2026.9.20. For data security-related access control background, see Warehouse ADR-0017; Publish the checklist in the documentation section.

Boxing 2026.9.15
A stability closeout: cross-tab star-sync fix, dark-mode contrast to WCAG targets, and WebDAV layout merge upgraded to three-way.

What you will notice
Fixed
Cross-tab star / parent sync no longer flakes in multi-window use.
Dark empty-state “add bookmark” controls meet contrast targets (text and border).
WebDAV concurrent edits merge by box id — both sides keep their new small boxes; conflicts become browsable copies instead of silent loss.
Boot theme: if init fails early, the temporary content mask always clears (no permanent blank page).
Improved
Search input debounce (fewer full rebuilds while typing).
Settings: WebDAV private-host opt-in documented; credentials are per-install.
Version strings all read the same CalVer source (2026.9.15).
Internal
New CI guards: calver surface, onboarding dismiss, locale README claims, contrast pairs, docs links, waiver revocation criteria.
Release zip no longer ships .scratch working notes.
Install
Prefer official store listings once 2026.9.15 is published. GitHub Releases track the same notes for local testing.

Known notes
Store listings may still show 2026.9.12 until review completes.
Release gates: G-A (CI) + G-B (user golden path) + G-C (Pages). See docs/release-status.md.

A more stable and user-friendly new bookmark tab: Infinite Canvas + Layered Box, arrange bookmarks according to your own ideas.

• New tabs with zero flashing — Opening the first frame of a new tab already shows your theme and brightness, no longer flashing the default beige
• Conflict copies can be viewed — Set up → data areas to list conflict archives and export individual JSONs
• WebDAV Private Network Switch — By default, still rejects intranet/local addresses; You can explicitly allow your NAS/self-hosted services in the settings
• Search Stabilization — Canvas search no longer rechecks every key

• Change backup credentials to Install Random Key wrapping (static obfuscation level, not password-level encryption; See the privacy page for details)
• Stricter data write paths: layout and writing are unified and stored under the facade, reducing cross-tag/synchronization pitfalls
• The main pop-up button uses the design system's accent color
• Documents and release notes changed to User-Oriented; Official installation guide to the store

• If a tab closes too quickly, a newly deleted connection or a box that has just been planted may not be placed
• Cross-tag synchronization/snapshot-related consistency issues
• The interface version number follows the manifest calendar version