Ghost FTP 0.95.52 — Recovery and safety Preview

Source channel: Preview. This release is not stable/FINAL. Do not rely on v0.95.51's initially incomplete public entry as an installable binary until its exact-source recovery has passed remote SHA256 asset verification.

• Release publication resolves drafts by immutable release ID, verifies asset digests and count before marking public, and refuses replacement of existing non-draft assets.
• Recovery of v0.95.51 uses the pinned merge SHA, exact CI artifacts and protected tag; provenance is not rewritten.
• Windows README screenshots must be exact real WebView2 QA captures from a successful native build, with SHA256 manifest and CI source linkage.
• Enforce consistent and byte-counted local file streaming on macOS; fail closed on modified upload source rather than reporting a successful transfer.
• A separate conservative latest-ten edition retention procedure may delete old public releases and matching tag refs only after last ten verified releases and screenshot provenance no longer require removed tags.
• Known blockers: native macOS FTPS/SFTP implementation, Developer ID notarization, Android Play signing identity, full Fedora/Ubuntu real-device acceptance and cloud E2E.