Phase 301 — Per-user DNS limit + ownership fix
- 5 subdomains per member (admins/operators exempt). Enforced at both the manual create path (throws at cap) and the auto-install path (skips gracefully — never breaks an install).
- Closed a privilege-escalation hole: any authenticated user could previously modify/delete another user's subdomain by appId. Owned subdomains now reject non-owner / no-identity callers (admins bypass; legacy/global entries stay editable for back-compat).
- App page shows an "N/5 DNS used" counter and disables creation at the limit.
Phase 300 — Clock centering regression
- The centre (Aurora) clock and the digital clock widget were top-yanked by a v44.84
items-start(worst in 24-hour mode with no AM/PM badge). Restored vertical centering (items-baseline).
Gates: livinityd tsc 385 (zero net-new) · vitest 129/129 · ui build 0 · adversarial 4-lens review.
Full Changelog: v44.85...v44.86