Ghost FTP 0.99.25 — Agent Bridge revocation (development Preview)

Status: Development candidate only. No release, signing or production certification is implied. Previous public version: v0.99.24.

Candidate changes

• Restore Security settings controls for the localhost Agent Bridge listener, per-session authorization and automatic approval policy.
• Add a two-step, explicit Revoke all control. Native Rust clears persisted and runtime profile grants, resets approval flags, stops listening and checks the saved configuration before returning success.
• Keep saved profiles, passwords, commands and Skills intact during permission revocation.
• Add a native Rust state regression test and a source-graph regression check.
• Extend the immutable Preview metadata policy to cover the already-published v0.99.24 SHA and 25 artifacts, without changing the tag or binaries.

Verification and release restrictions

The candidate must pass quality, protocol E2E, supported OS builds, security checks, and real device tests before merge. Do not claim immediate cancellation of commands already running when permissions are revoked. Production signing, notarization and store acceptance remain unverified. Public v0.99.24 artifacts must never be rewritten.