vpn-egressctl (0.2.0) unstable; urgency=medium

  * Target sing-box 1.14.0 and add the fixed HY2XS Gecko profile.
  * Preserve the established DNS and routing contract explicitly.
  * Reject in-place upgrades and legacy rollback state.
  * License the 0.2 release under MPL-2.0.

 -- Flamy Studio <dev@flamy.studio>  Tue, 08 Sep 2026 00:00:00 +0500

vpn-egressctl (0.1.0) unstable; urgency=medium

  * Initial release for sing-box 1.13.19.
  * Require the nftables guard before starting sing-box.
  * Enforce QUIC and gVisor build tags and remove the unsafe render command.
  * Tighten URI parsing and protected filesystem diagnostics.
  * Document local healthcheck and forwarded workload acceptance separately.

 -- Flamy Studio <dev@flamy.studio>  Thu, 27 Aug 2026 00:00:00 +0500