Ghost FTP v0.95.34 — FTP listing limits and SSH host-key trust hardening (development preview)

Published predecessor: v0.95.33.

Changes

• FTP and explicit FTPS listings reject inventories over 100,000 server records, 32 MiB raw listing bytes or 16 MiB total UTF-8 filename bytes. Directory reads remain fail-closed rather than publishing misleading partial listings.
• FTP existence and overwrite checks inspect the complete strictly parsed directory inventory; malformed or duplicate later records can no longer hide behind an earlier matching name.
• SSH trust prompts deduplicate request IDs, prevent simultaneous contradictory decisions and remove only the acknowledged prompt.
• Changed SSH fingerprints require the user to confirm independent verification with a server operator over a trusted channel before allowing acceptance.
• Add Rust boundary regressions and UI interaction hardening contracts.
• Retain seven genuine historical Windows native screenshots; they are not captures from this version.

Verification

• Final exact-SHA Rustfmt, Rust tests, Clippy, TypeScript, UI checks and dead-code reachability
• Real FTP, explicit FTPS and OpenSSH SFTP protocol E2E
• Windows native NSIS/MSI and Linux AppImage/DEB/RPM builds
• macOS/Android cross-platform compatibility
• Real native 1290×852 and smaller-window visual comparison to approved design references

Known limitations: the FTP and SFTP clients materialize directory contents before application inventory checks, so earlier transport allocations are not fully bounded. FTP LIST -a support varies by server. Multi-file operations are not atomic. Pixel-perfect reference parity and complete FileZilla feature parity remain unverified.