Ghost FTP 0.99.1 — Preview package and release-integrity repair

Channel: PREVIEW (not stable/FINAL). Production signing and macOS FTPS/SFTP protocols have not been certified.

Changes

• Fix GitHub's incorrect post-publish release classification without modifying binary artifacts, immutable tags or prior releases. A source-pinned metadata workflow verifies at least 21 release assets, the source SHA, and each GitHub-hosted SHA-256 digest, then corrects Preview metadata if necessary.
• Include a safe one-time repair of previously published v0.95.53 and v0.99.0, preserving all release packages, original tag refs and original source SHAs.
• Update official Windows, Linux, Android, macOS, updater, CLI, Cargo.lock and documentation metadata to 0.99.1.
• Clarify native macOS FTP UI busy status, disable unavailable actions while a transfer or listing is active, and preserve local/remote file integrity.
• Continue full static security/dead-code audit and real native installation/transfer CI checks.

Production-readiness limitations

• Native macOS FTPS and SFTP are not yet implemented; there is no plaintext fallback for secure site selections.
• Windows Authenticode, Play Android signing/upgrade, Apple Developer ID notarization, physical-device signed upgrades, >4 GiB checksum roundtrips, and full 75-screen UI and performance acceptance remain unverified.
• A successful source CI run alone does not certify production readiness or a security penetration test.

Release policy

All six exact-source workflow families must complete successfully; auto-publication verifies every package digest. Never remove existing GitHub Releases or tags. Continue 0.99.2, …, 0.99.20, then 1.0.0 subject to independent production gates.