Ghost FTP v0.90.0 — controlled premium release train, privacy and parser safety

This release continues the existing Windows, Linux, Android and macOS codebases from the verified published v0.30.21 commit. It is an intentional minor-line migration, not a project reset, and not an assertion of completed 1.0 production readiness.

Implemented code improvements

• Desktop Windows/Linux diagnostic redaction now hides FTP and SFTP URL usernames with or without a password, reducing exposure of private account identities in UI and logs. Existing bounded diagnostic handling, credential/token redaction and non-secret query parameters remain protected by regression tests.
• macOS FTP Preview refuses unexpected EPSV protocol/address fields from untrusted responses. Swift XCTest now asserts both correct alternate delimiter handling and malformed-reply rejection. macOS FTPS/SFTP operations remain disabled while identity verification is unimplemented.
• CI introduces a testable release-version policy: feature releases progress sequentially through 0.90.0 to 0.99.0; fixes increment the patch; 1.0.0 has a separate readiness gate; the 1.x train follows semantic minor/patch progression. Root version metadata and platform packages must agree.
• No replacement README artwork or fictitious transfer/server entries were introduced.

Verification and release boundaries

Before publication: the same six workflows must be successful for the last PR commit, then again for the merged main commit. The canonical release workflow must succeed with verified Windows (portable, NSIS and MSI), Linux (AppImage/DEB/RPM), Android and macOS Preview artifact inventory.

Visual 1:1 acceptance of all 75 reference screens is still open until installed application screenshots at matching resolution and every real UI action are checked. Do not claim all-platform full production feature parity where macOS FTPS/SFTP and notarization remain incomplete.