aegis_guardian 3.6.2

Native Android and iOS security, device signing, screen privacy, App Attest, and independent AegisPulse event analytics for Flutter.

3.6.2 - 2026-10-16

• Documentation only: README no longer links to non-public pages. No code changes; native dependencies stay at 3.6.0.

3.6.1 - 2026-10-16

• Documentation only: generic example bundle ID and test device wording. No code changes; native dependencies stay at 3.6.0.

3.6.0 - 2026-10-16

• AegisPulse push notifications (PulsePush): token registration for FCM, Huawei Push Kit and the iOS APNs token, open/dismiss reporting, and Android rendering of data-only pushes with action buttons (PulsePush.show, also from a background handler). Uses the analytics identity; security APIs and telemetry are unchanged. Native pins now resolve 3.6.0.

3.5.0 - 2026-10-15

• Android: scanAndMonitor() works with only the dashboard URL and Client ID through the native enrolled device key (Android key attestation): automatic enrollment, no Google Play Services required (e.g. Huawei). The manual Play Integrity flow is unchanged.
• Fix: 3.4.0 still resolved native 3.3.0 on Android (Gradle) and iOS SwiftPM. All native pins now resolve 3.5.0 (id.aegis-sentinel:aegis-guardian:3.5.0, AegisGuardian 3.5.0).
• iOS VPN false positive fixed (ignore always-up ipsec*/utun*; use CFNetwork __SCOPED__).
• Blank expected signature / bundle identifier is treated as not configured, not as tampering.
• Dart API unchanged.

3.4.0 - 2026-10-15

• Resolve matching native 3.4.0 artifacts: Android id.aegis-sentinel:aegis-guardian:3.4.0 (Maven Central) and iOS AegisGuardian 3.4.0 (CocoaPods / SwiftPM binary).
• Android native hardening flows through to Flutter: obfuscated Frida-scan needles and a behavioural code-integrity signal (CODE_INTEGRITY_VIOLATION / rasp.has_code_integrity_violation), advisory and non-gating.
• iOS VPN false-positive fix (ignore always-up utun interfaces; detect tunnels via CFNetwork __SCOPED__). Dart API is unchanged; telemetry stays backward/forward compatible.

3.3.1 - 2026-10-02

• Android: resolve the native SDK from its new Maven group, id.aegis-sentinel:aegis-guardian:3.3.0. The native code, Dart API and iOS dependency are unchanged.

3.3.0 - 2026-10-02

• Add PulseConfig, PulseAnalytics and PulseDelivery through a dedicated analytics channel.
• Use independent native Android/iOS queues, identity, lifecycle and HTTP clients.
• Add purchase/refund and login/logout examples, unit tests and an opt-in native integration test.
• Require matching native 3.3.0 artifacts; provide local source-build overrides for development.

3.2.0

• Add optional appAttestEnabled: true for automatic iOS App Attest enrollment and verified Sentinel telemetry.
• With App Attest disabled, URL + Client ID send iOS telemetry as UNVERIFIED, including on simulators.
• Expose verification and app-signature status without interpreting missing attestation as a modified app.
• Add explicit App Attest enrollment reset; preserve existing manual integrations and Android behavior.
• Update native Android and iOS dependencies to 3.2.0.
• Confirm production App Attest telemetry on a physical iPhone and signed Android telemetry on physical Android devices.

3.1.4

• Include the Android build fingerprint in signed Sentinel telemetry.
• Omit the fingerprint when it is unavailable from the native bridge.
• Keep native dependencies at Android 3.1.0 and iOS 3.1.3.

3.1.3

• Update the native iOS dependency to 3.1.3: fixes a missing dSYM in the xcframework that failed App Store Connect archive validation. No API changes.

3.1.2

• Update the native iOS dependency to 3.1.2 for CocoaPods and SwiftPM.
• Refresh version and installation documentation. Android stays on 3.1.0.
• Flutter monitoring retains its current evidence/enrollment contract; the new Client-ID-only telemetry API is available through the native Swift SDK.

3.1.1 (published 2026-09-27)

• Depend on AegisGuardian iOS 3.1.1 (CocoaPods and SwiftPM); Android stays on 3.1.0.
• Ship the complete Apache 2.0 license text so pub.dev can detect it.
• README: current versions, Xcode 27 requirement for the iOS binary, the Sentinel enrollment limitation of this Flutter API, and absolute documentation links.

3.1.0 (published 2026-09-25)

• Accept Sentinel challenge and verification expiries up to 60 seconds beyond five minutes, so a device clock running behind the server no longer fails with an invalid challenge.
• Return Sentinel telemetry failures as SentinelResult values so ignored network, URL, enrollment, and Client ID failures do not escape as unhandled errors.
• Defer Sentinel URL and Client ID validation to the telemetry request result.
• scanAndMonitor() and premium boolean helpers now return SentinelResult; update callers to inspect .fold() or .isSuccess.
• Normalize the security report check names and statuses across Android, iOS, and Flutter; derive isSecure from the normalized status list.
• Requires Android native SDK 3.1.0 and iOS native SDK 3.1.0.
• Expose stable SentinelResult.failureCode categories and verify the shared check contract.

0.3.0

• Require Sentinel v2 server verification for premium monitoring results.
• Bind reports to fresh server challenges and Android Play Integrity / Apple App Attest evidence.
• Add Flutter Android and iOS native evidence bridges and fail-closed response validation.

0.2.0

• Show Device ID independently in the example, including native error handling and retry.
• Add native identity persistence checks across app processes and an Android emulator proxy transition test with settings restoration.
• Add optional Aegis Sentinel telemetry and server-validated device blacklist results.
• Gate Frida, modified-app identity, and blacklist APIs behind an active Sentinel Client ID; missing entitlement now fails explicitly.
• Accept Android signing-certificate SHA-256 fingerprints with or without colons.

0.1.0

• Initial Android/iOS native bridge, typed security reports and fail-closed policy evaluation.
• Device identity/signing, screen privacy and iOS App Attest helpers.
• Example application, channel tests and device integration tests.