5 Commits (cd9b8e88eb644bd9f788efe9eb57b93c358e3c3f)

Author	SHA1	Message	Date
Strycher	3b7c52655c	docs(#164): fix fabricated 'per-channel mute'; channel block is per-user, global ... Remove the invented whole-channel-mute (never specified; already exists in notification settings). Repurpose §6 to the real spec: blocking a channel sender who can't be resolved to a pubkey adds a GLOBAL name-fallback (hides them in every channel, not one at a time), which promotes to a pubkey block once the identity is learned via advert OR DM (§7). Single/invisible-char rename evasion explicitly out of scope. A4/#171 closed not-planned; behavior lives in A3/#170 + A5/#172 + A7/#174. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 week ago
Strycher	79c1579e92	docs(#164): blocked contacts stay visible with a blocked indicator ... Ben's UX call: do NOT hide blocked contacts to a settings-only list. Keep them in Contacts/Discovery with a red block icon + muted styling + inline unblock. A 'hide blocked entirely' toggle is a post-implementation follow-on. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 week ago
Strycher	c2346e88d7	docs(#164): close block contract gaps from PearlMeadow as-built reply ... Reply-shape [0xC2][sub][ok] (result byte, not ack/err frame); generic error frame [0x01][0x06] is NOT 0xC2-prefixed. Overflow at MAX_BLOCKED_KEYS=32 returns ok=0 (not error) + already-stored returns ok=1 (dedup short-circuit). BLOCK_LIST truncation detect via START count vs key-frames -> re-request on APP_START early-END; never derive removals from LIST. DM-drop is silent (no notif/frame) -> no firmware block counts for UX. No unsolicited pushes. Design confirmed by PearlMeadow; app half locked to shipped firmware, no open discrepancies. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 week ago
Strycher	ff28eb3c80	docs(#164): reconcile block contract to firmware as-built ... Align to firmware PR #247 (merged): cap OFFBAND_CAP_BLOCK=0x02, FIRMWARE_VER_CODE 15, 0xC2 CMD_OFFBAND_BLOCK (ADD/REMOVE/LIST/CLEAR), MAX_BLOCKED_KEYS=32, BLOCK_LIST streamed-dump framing (0xFF count / index / 0xFE end) + APP_START early-END. Switch sync model to union / always-retain-local (app-local never wiped; portable across Offband clients, local-only on non-Offband). Global (by-pubkey) app store. Fold in channel all-matching-pubkeys rule, dual name-key index sourcing (0x8A vs 0x80), promote-and-prune age-out, gaps G1/L1/L2/L3, interop invariant. Feature #164 / Epic A #165 / Epic B #166; firmware doc #244. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 week ago
Strycher	4939a769ff	docs(#164): block/ignore design-of-record contract (app-local + fw offload) ... Two-layer, app-authoritative design: Layer 1 app-local block (DMs+adverts by key, channel name-key resolution, per-channel mute); Layer 2 capability-gated Offband firmware offload [TO LOCK with PearlMeadow, meshcore-firmware]. Feature #164 / Epic A #165 / Epic B #166. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 week ago