Browser-owned workspaces and encrypted sharing

[lightsofapollo]

Summary

• completes the browser-owned stable sharing lifecycle and real Share sheet
• publishes native-compatible encrypted workspace snapshots and supports browser/native reviewer interoperability
• renews and reconciles durable shares, recreates missing epoch rooms, and drains authenticated offline reviewer mail
• hardens ZIP import limits and records the browser workspace security review and parity evidence

Validation

• cargo fmt --check
• cargo check -p attn
• cd web && npm run check — 0 errors, 0 warnings
• cd web && npm test — 79 test files, 0 failures
• live browser-owner/native-reviewer, folder sharing, WebRTC, relay, staging route, mobile, and accessibility evidence is recorded in planning/web-authoring/validation-03.md

Remaining release gates

This is intentionally a draft. Production attn.sh cutover has not been performed and still requires explicit approval. Physical current-device iPhone/iPad Safari validation also remains open; automated staging and WebKit coverage are documented in the parity matrix.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
attn	Ready	Preview, Comment	Jul 11, 2026 7:51pm