v0.9.8

ShadowBroker v0.9.8 ships cumulative fuel/CO2 tracking per flight, AIS maritime resilience with an upstream-outage banner and a slow REST fallback when AISStream is offline, and repairs to two long-broken data layers (UAP sightings and GPS jamming detection).

Highlights

- Cumulative fuel & CO2 per flight — the aircraft tooltip now shows how much fuel each plane has actually burned in the air, not just the per-hour rate. Running totals accumulate from first observation, reset on a 15-minute gap between sightings (treated as a new flight), and survive trail-rendering cache pruning so cumulative counters never reset mid-flight.
- AIS maritime resilience — when stream.aisstream.io is unreachable (as it has been upstream since 2026-05-23), the ships layer no longer goes silently empty. A dismissible amber banner explains the outage end-to-end, and an opt-in AISHub REST fallback polls every 20 minutes when the WebSocket primary is disconnected so the layer stays populated. Configure via the AISHUB_USERNAME env var.
- Data-layer repair — UAP sightings no longer serve 3-year-old NUFORC reports via the Hugging Face fallback (60-day cutoff applied to the fallback path too, scheduler moved daily → weekly). GPS jamming detection now counts nac_p == 0 (the actual GPS-lost signal) instead of filtering it out, with thresholds lowered so genuine hotspots clear the bar.
- Per-flight source attribution — every aircraft record now carries a source field (adsb.lol, OpenSky, airplanes.live, adsb.fi) so consumers can attribute the data provider. Pre-fix, adsb.lol records were unmarked while OpenSky records were explicitly tagged, making it look like adsb.lol was unused even though it is the primary source.
- Cross-node DM mailbox replication & Infonet sync HTTP 429 honoring — direct messages now replicate across mesh nodes when one party is offline, with a per-(sender, recipient) anti-spam cap enforced as a network rule. Infonet sync now honors HTTP 429 Retry-After exactly instead of retrying every 60 seconds and keeping the upstream rate-limit bucket permanently full.

Notes

- Windows installers are unsigned public builds, so SmartScreen may warn until code signing is added.
- Assets include SHA256SUMS.txt plus release-manifest.json for integrity verification. backend/data/release_digests.json keeps the v0.9.79 block alongside v0.9.8 so operators still on 0.9.79 validate cleanly during the rollout transition.
- The Tauri auto-updater on installed desktop clients will pick this release up from the latest-release endpoint once latest.json is published; until signed updater artifacts are added, the public builds remain unsigned-public.