v0.9.81

ShadowBroker v0.9.81 establishes signed auto-update from this version forward and fixes the admin_session_required race that made the in-app Update button error out for everyone on v0.9.79 and v0.9.8.

Highlights

- **Signed auto-update finally works.** Every prior release (v0.9.79, v0.9.8) shipped without latest.json or .sig signatures because the matching private key for the embedded pubkey was lost. v0.9.81 rotates to a fresh keypair and ships signed installers + a signed latest.json. From v0.9.81 onward, every release is a one-click in-app upgrade.
- **Fixes the "admin_session_required" race in the Update button.** Desktop installs now correctly detect Tauri at React-init time and default the update action to manual_download, so a click on Update opens the GitHub release page in a browser instead of POSTing to /api/system/update and throwing the cryptic admin_session error.
- Carries forward everything from v0.9.8: cumulative fuel/CO2 per flight, AIS resilience (outage banner + AISHub fallback), UAP cutoff repair, GPS jamming threshold tuning, per-flight source attribution, cross-node DM mailbox replication, and the Infonet HTTP 429 retry fix.
- Carries the v0.9.8 desktop-build fix that bundles defusedxml + PySocks into the venv (fixes the managed_backend_exited_early crash from #319 and #296).

One-time cost for current installs

If you are on v0.9.79 or v0.9.8, your existing install has the OLD pubkey baked in and cannot auto-verify v0.9.81's signed artifacts. Click MANUAL DOWNLOAD in the update dialog, grab the .msi or .exe below, and run it. After that one manual hop, every future release will install seamlessly via the in-app Update button.

This is unavoidable: it is the security property of signed updates — rotating the signing key requires a single manual bootstrap to roll the new pubkey onto every install.

Notes

- Windows installers are unsigned public builds (no Windows code-signing certificate), so SmartScreen may still warn until that is added. The Tauri-updater signing is independent of Windows code-signing and is fully in effect here.
- Assets include SHA256SUMS.txt, release-manifest.json, latest.json, and .sig files for both installers. backend/data/release_digests.json keeps the v0.9.79 and v0.9.8 blocks alongside v0.9.81 so operators still on those versions continue to validate cleanly during the rollout.
- The Tauri auto-updater endpoint (https://github.com/BigBodyCobain/Shadowbroker/releases/latest/download/latest.json) now resolves to a real signed manifest for the first time.