FixedPlatformRich Q
Matrix uploads cannot exceed the file download cap
In the BETA 0.3.27 source, Matrix uploads enforce a 100 MiB per-file limit on both the proposal and the automatic system-write routes, so no accepted file can exceed the content-download cap.
- A larger file returns HTTP 413 `matrix_file_too_large` before it is staged or counted against the team quota, and the size is checked before the Base64 text is decoded.
- Downloading a file through `GET /v1/matrix/files/<file-id>` is never capped below what uploads could have accepted, so files stored before this limit existed remain readable.
- Operators can tighten the per-file limit with `ONE_MIND_MATRIX_FILE_MAX_BYTES`; the separate response-cap variable is gone.
FixedPlatformRich Q
Restore authenticated macOS update checks
In the BETA 0.3.28 source, the macOS updater accepts the versioned Singapore receipt contract, including the required Mind Check provider proof from 0.3.20 onward. It still verifies the pinned signature, exact checks, and artifact hashes.
- Affected 0.3.19 and 0.3.27 installations need the verified 0.3.28 installer once, because their old update checker cannot obtain its own repair.
FixedPlatformRich Q
Incomplete Safe Check responses cannot become a pass
Safe Check now rejects every malformed findings value as an incomplete check.
- Text, objects, numbers, booleans, missing values, and null cannot be mistaken for an empty list of risks.
- Only a valid findings array proceeds through normal review, so an unreadable report never grants approval.