Changelog

• 🔏 The Pasiv program itself is now signed on Windows, not just the installer. Up to 0.6.11 the installer carried Pasiv’s signature but pasiv.exe inside it did not. Both are signed from this release (DRAGON HEDGE PTY LTD, timestamped). Nothing changes in how Pasiv behaves; Windows and antivirus now see a signed program where they used to see an unknown one.
• 🐚 GPU engine 0.1.1. Same engine as 0.1.0; the archive now ships the licences of everything it links (NVIDIA CUTLASS, BLAKE3, the crates vendored by CPPminer, the CUDA runtime) next to CPPminer’s own MIT text. Rigs already on Pearl pick it up on their own, checksum-verified, with no prompt.
• 🖥️ A Windows rig whose CPU lane still needs its one-time permission now mines Pearl on its own anyway. An unattended start (boot, auto-update, a restart from the phone) used to be refused outright when the CPU miner was not yet set up, and that took the GPU down with it even though the signed engine needs no permission. The CPU lane is now held, says why, and Pearl runs; the next Start at the keyboard sets the CPU lane up as before.
• 🔁 A rig whose network blocks the pool no longer restarts its miner every minute. The ten-minute spacing now holds when Pasiv’s own probe can reach the pool but the miner can’t (a per-program firewall or antivirus rule).
• 🧹 Crash reporting drops two kinds of browser noise it could never act on: a promise rejected with no value at all, and the wallet library’s relay socket failing to connect.

• 🐚 Pearl mines on Pasiv’s own signed GPU engine — no more Windows prompts. The GPU lane now runs an engine Pasiv builds from source and signs itself (built from CPPminer, MIT), in place of SRBMiner-Multi. SRBMiner was closed, unsigned and quarantined by Windows Defender on sight, which is where every Windows prompt came from: the one-time Defender exclusion, the UAC elevation and Smart App Control refusing to run it. The signed engine needs none of that. The first Start that wants Pearl downloads it (checksum-verified, about 20 MB) into an ordinary folder, and a rig already mining Pearl picks it up on its own after this update. Measured on the lab’s RTX 4060s and RTX 4070 SUPER: 89–97% of SRBMiner’s rate, zero rejected shares, zero Defender detections.
• 💸 The engine’s developer fee is switched off, so the 2% that SRBMiner took from the Pearl lane now stays with you.
• 🧹 The old GPU miner is cleaned up. On a rig that had SRBMiner, Pasiv deletes it once the engine is in place. The Defender folder exclusion it needed is left as it is (removing it would need an administrator prompt, and the folder it covers is now empty); instructions to remove it by hand are on Support.
• ⛔ Ravencoin and Ergo (direct route) retire a week early. They only ever mined through SRBMiner and were already set to stop on 1 November. Pearl, Monero, Zephyr, Salvium and Verus are unaffected.
• 🟥 AMD Radeon GPUs (beta) are paused. The new engine is CUDA-only for now, so Radeon cards are not offered Pearl until an AMD card has been measured on it. NVIDIA GTX 16 / RTX 20-series and newer are unchanged.

• ₿ Get paid in USDT or BTC. Wallets → Get paid now asks what you want: USDT — paid fast (daily from $1.50, the default) or BTC — for holding, paid to your own Bitcoin address. unMineable pays Bitcoin only once the balance reaches its BTC minimum (0.00075 BTC, about $60 today), so Pasiv shows that minimum and how long the first payout would take at your computer's rate, and asks you to confirm first. Pasiv's 4% is unchanged.
• 🎮 Game Mode comes back sooner. Mining restarts about 90 seconds after you close a game (it was five minutes, with the app still saying a game was open), and the pause now has Mine anyway.
• 👛 “Connect a wallet” is a button again beside Save in Wallets.

• 🪪 One spelling for your payout address. A BNB Smart Chain address pasted in lowercase is now sent to the pool in its standard mixed-case form, the same on every computer. unMineable asked for identical capitalization after its automatic payouts skipped some days for addresses mined from several computers.
• 🐢 Slow computers stop restarting their miner every hour. Pasiv restarts a miner that goes too long without an accepted share; the wait now scales with how often that computer actually finds one (15 to 60 minutes).
• 📶 New installs report that they’re running from the first launch (with usage data on), instead of looking switched off.
• ⌨️ A computer that needs the one-time Windows permission says so once — open Pasiv there and press Start — instead of retrying all day.
• 🔗 The wallet QR screen’s “Copy link” button now looks like the rest of Pasiv.

• 🛡️ Windows Defender no longer flags the CPU miner’s settings file. Since 9 October Defender had been removing it as Trojan:Win32/Bearfoos.A!ml; Pasiv now keeps the file small and read-only, so there’s nothing to flag.
• 🔒 Security hardening: the GPU miner’s stats page is blocked from other devices on your network (Windows), Linux updates are checked against Pasiv’s signing key before they install, a remote command can only reach the machine it was sent to, pairing codes can’t be guessed, and deleting your account deletes your diagnostics too.
• 💸 Payout fixes: changing your payout address while mining takes effect at once, the backup pool can’t hide a wrong address, a USDT address is checked before it’s saved, and one unreadable setting no longer wipes your payout address.
• ✋ Your unMineable auto-pay choice sticks. Pasiv switches auto-pay on once per address; if you turn it off on unmineable.com, it stays off.
• 📈 Wallets reads right over the threshold — a balance above $1.50 now says it’s ready and paid at the pool’s next daily payout.
• 🍎 Mac: moving Pasiv while it runs now says to quit and reopen, instead of blaming your antivirus.

• ▶️ Pasiv now mines by default once setup is finished with a payout address — at sign-in, after an update, after a crash. Pressing Stop is remembered until you press Start. A machine with no payout address never mines.
• 📋 Getting paid starts with pasting your USDT address, from your exchange’s deposit page or your wallet app, on BNB Smart Chain (BEP20) or Tron (TRC20). It’s checked as you paste.
• 🚧 Networks that block the mining pool are handled. The backup connection on port 443 is actually tried now; if no pool answers for ten minutes, Pasiv says your network is blocking it and resumes by itself on another network or a VPN.
• 🖥️ Launch at login and keep running are on by default, and Settings says what that means.
• ✅ A one-time “GPU mining is fixed” note for graphics-card rigs stopped on 0.6.2 or earlier. It never starts mining for you.

• 👛 Get paid to the wallet you signed in with. Signed in to Pasiv Cloud? Wallets → Get paid offers your account’s address in one tap.
• 🔄 Windows: Pasiv comes back by itself after an update, within a minute, if the relaunch didn’t.

• 🧹 Windows: uninstalling removes everything Pasiv set up — the keep-alive task, the login entry, the miner programs and (on an interactive uninstall) the Windows Security exclusions.

• 🩺 Windows: a miner that won’t start explains itself. Pasiv checks whether Windows Security or another antivirus blocked it, whether the folder exclusion is missing, or whether a file rule is in the way — and shows the fix. Mining resumes on its own once the cause is gone.

• 🎮 GPU mining on the USDT route finally starts, and the GPU lane has its own Enable / Repair button.
• 🚀 Setup ends by starting mining, showing each step through to the first accepted share, with the fix and “Try again” on any failure.
• 🔁 Windows: the keep-alive task is actually created, so a stopped Pasiv comes back within minutes. The Defender exclusion is read back to make sure it took.
• ⏱️ A miner earning nothing for 15 minutes is restarted and says why, instead of showing “mining” forever.
• 📨 Send diagnostics in Settings uploads a scrubbed report to Pasiv only and gives you a reference to quote. Crash reports are scrubbed the same way and follow the usage-data switch.

• 🔌 Mining starts even when Windows has reserved Pasiv’s usual local port (Hyper-V, WSL and Docker do this).
• 💱 Switching to USDT payouts moves the miners to the new pool straight away.
• 👛 “Connect wallet” uses a wallet that’s already connected.
• Replaces 0.6.1, which was withdrawn within 15 minutes after Windows Defender wrongly flagged it.

• ♻️ Pasiv keeps itself running. With Launch at login on, it comes back within a minute after a crash or a kill, on Mac, Windows and Linux. A deliberate Quit stays quit.
• 🌐 Faster recovery from pool outages, and every coin gets a backup pool on port 443.
• ☕ The computer stays awake while mining (Settings; the display may still sleep).
• 🧱 Sturdier everywhere: no rig sits “warming up” or idle forever, settings survive a crash mid-write, and a wedged graphics driver can’t hang the app.

• 🤝 Share & earn pays your friend fairly however you use your PC — their slices count over the life of the install, not per launch.
• 🧾 What a code pays is decided by Pasiv’s server, checked daily; your own code is refused. Friend codes are for the USDT route only, and the app says so.

• 🚪 Signing out on one machine no longer disconnects your others.
• 📱 A rig stays on your phone even if its sign-in lapses, using its own device key.
• 🔁 Wallet sign-in retries a lost request by itself.
• 🔗 Share & earn is easier to find — top of Settings, and in the header.

• ⚖️ Fairer fee on short sessions. Pasiv’s 4% slice now comes at the end of each window, so no session ever pays more than 4%.
• 🍎 Mac: Pasiv comes back after an update, every time.
• 🐧 Linux: the updater restarts Pasiv for any username, and Game Mode can’t freeze if the display server hangs.

• 🐧 One line to install on Linux: curl -fsSL https://pasiv.network/linux.sh | sh — a signed .deb or .rpm that updates itself from inside the app.
• 🎮 Game Mode on Linux, with Feral GameMode or any fullscreen app on X11.
• 🩺 Linux says why your GPU isn’t mining, and miners stop when Pasiv stops.
• 🖱️ Mac: one click on the menu-bar icon opens Pasiv.

• 🤝 Share & earn. Everyone who sets up Pasiv with your code sends you 1% of their mining for 12 months (2% for creator codes), paid by the pool to your own address. It comes out of Pasiv’s own 4% — they pay nothing extra. Terms in the public fee document.

• 🎮 Game Mode on Windows. While a game or fullscreen app runs, Pasiv pauses mining and stops the GPU miner so the whole card is yours, then starts again by itself. No game names are ever recorded, and there’s no fee while paused.
• 🪟 No more console window flashing on Windows.

• 💵 USDT payouts arrive by themselves. Pasiv switches on unMineable’s auto-pay for your address, so you’re paid once a day at 13:00 UTC whenever your balance is over 1.5 USDT.

• 🖱️ One click on the tray icon brings Pasiv to the front.
• 🧾 The fee ledger names where each fee slice really went. The fee itself was always right.
• 🖥️ Headless nodes update themselves (pasivd 0.1.6), installing only releases signed by Pasiv.

• 👛 The Coins tab is now called Wallets. It leads with where you’re paid.
• 🌅 Zephyr, Salvium, Verus, Ravencoin and Ergo end on 1 November 2026. They earn a fraction of what Pearl and Monero do, and the USDT route can’t carry them. If you mine one, Wallets shows a notice with a one-click switch to USDT payouts, and you’ll get one desktop notification. Nothing changes before 1 November, and nothing is switched for you.
• ✍️ The last setup screen now describes 0.5.0 correctly: your graphics card mines Pearl, your processor mines Monero, and the pool pays you in USDT.

• 💵 Get paid in USDT, straight to your own wallet. New installs mine on unMineable’s pool, which converts what you mine to USDT and pays your own address once a day from $1.50. Pasiv still never holds your money. Connect wallet fills in the address your wallet already has (nothing is signed), or you can paste a USDT address from your exchange (BNB Smart Chain or TRON). The network is checked before mining starts, because the pool can’t change the address afterwards. Already paying a coin address directly? Nothing changes until you choose Switch to USDT payouts.
• 🧾 Fees on the USDT route: Pasiv’s 4% of mining time now applies to every coin mined there (it was Monero-only), and unMineable takes 0.75%. unMineable also pays Pasiv a 0.25% referral out of its own fee — not from your earnings. Everything is in the public fee document.
• 🔔 Payout notifications: “Your first payout just landed”, one each time you’re paid, and a weekly summary of what Pasiv earned you (≈, gross).
• 🧭 “Where should we pay you?” during first-run setup, with Connect wallet and Skip.
• 🔗 Share at the top of every screen opens your system’s share sheet.
• 🟥 AMD graphics cards (beta): Radeon RX 6000, 7000 and 9000 with 4 GB or more can now mine Pearl.
• 👤 Signed-in users are counted as one person across desktop and phone, using an anonymous id made from their account — never a wallet address. Everyone else stays anonymous, and analytics can still be switched off in Settings.

• 🔗 Share from any screen. A small Share button next to the status chip copies a short message and a link. If your computer has an NVIDIA RTX card, the link opens that card’s own page on pasiv.network.

• 💬 Tell a friend. A new Settings card copies a short message and a link for someone with a gaming PC or a spare machine. No earnings figure, no referral code, nothing that ties your friend’s install back to you — and it only runs when you press it.

• 📐 The Status screen fits the window. While mining, the main screen ran past the bottom and cut off the pearl. Every state now fits with no scrolling, and the window won’t shrink below the height where it still fits.

• 🩺 A miner could hash for hours while Pasiv showed “starting” and $0. After a restart, the new miner could start before the old one released the port Pasiv reads stats from — so the pool saw your hashrate while the app saw nothing. Pasiv now waits for the old miner to be gone, refuses visibly rather than run a miner it can’t see, and restarts one whose stats stay unreadable for two minutes.
• ⚪ The mark draws one ring in every state, and Paused and Error carry a small mark on the pearl so you can tell them apart without colour.

• 🔁 A rig that stops now starts itself again. When mining hit an error, Pasiv used to stop and wait for someone to press Start. It now retries on its own — after 30 seconds, then 1, 2, 5, 10 and every 15 minutes — for as long as the machine is meant to be mining. If you pressed Stop, it stays stopped.
• 🛡️ Windows no longer loses the miner to Defender. Nothing miner-shaped ships in the installer; the first time you press Start, Pasiv asks Windows for one permission — to skip its own miner folder — then downloads the miner there. A machine already mining keeps mining exactly as before; the move only happens when you press Start at that machine, and an unattended rig never raises the prompt on an empty screen.
• 🔎 A crash loop now says what happened (antivirus removal vs. the miner stopping on its own), and the paused and error menu-bar icons draw the right shapes.

• 📱 Starting a rig from your phone no longer shows an error when it was already mining. A start that genuinely can’t happen still says so.
• 🔄 Auto-update reports itself again, so updates no longer look like they stopped happening.

• 🛡️ Pasiv tells you when antivirus removed the GPU miner, instead of telling you to try again. The install and support pages explain the detection, including that CPU mining is unaffected.
• 📊 Anonymous measurement is more honest: Idle Compute earning days are recorded wherever they happen, and mining errors are recorded in real categories instead of one bucket. Nothing new is collected.

• ⚡ A fresh install now starts in Full power and launches at login. Eco and the login toggle are still one click away in Settings and the tray menu, and nothing changes for an install you already have — these are first-run defaults only. Nothing mines until you press Start, as before.
• 🧹 The Earnings & fees card is gone from the Coins tab. The per-coin "Verify on pool" links stay, every fee slice is still listed in Diagnostics, and the fee mechanism is documented in the whitepaper.

• 🧮 Idle Compute's "/ day" figure was reading about a third of the real rate. The estimate is projected from Darkbloom's record of your recent paid jobs, and 0.4.52 clamped that window to a minimum of 30 minutes to damp bursts — but under ordinary steady demand the last fifty jobs arrive in ten minutes, so the clamp divided the real rate by three (Pasiv said ≈ $0.42/day while Darkbloom's console showed $1.23 for the last 24 hours). The clamp is gone: the Mac now reads the last thousand paid jobs, reports the exact last-24-hours total when they reach back that far, and otherwise projects the hours they cover. This flows through to the Companion's fleet figure, the Status headline and the menu bar.

• 💻 The Status headline and the menu-bar figure now include Idle Compute. Since 0.4.52 the Companion's fleet figure has been mining plus Idle Compute; this Mac's own "≈ $/day" still said mining only, so the two disagreed about the same machine. Now they match: the headline is what the Mac earns across both, the line beneath shows the Idle Compute share, and a Mac earning only through Idle Compute shows that figure even with the miner stopped. The menu bar reads the rate on its own clock, so it stays right with the window closed.

• 📱 Idle Compute now reports what it's earning per day, so the Companion can add it to your fleet total. The Mac already read the account's total earned from Darkbloom; it now also projects the current rate — from Darkbloom's own record of what your last jobs paid and when, never from tokens served — and shows it on the Idle Compute row beside the total. The Companion folds that rate into the one "/ day" figure at the top of Your rigs, instead of showing a lifetime total underneath a daily one. When there are too few recent jobs to project honestly, no rate is shown rather than a made-up one.

• 💵 The Status screen and the menu bar now lead with what you're earning, not a hashrate. A hashrate says nothing to most people and can't be compared across coins; the estimated dollars-per-day is the number you actually came for, so it's now the headline — the coin and hashrate move to a smaller line underneath, and the menu-bar title shows the same figure. When there's no coin rate yet, the hashrate stands in so nothing is ever blank, and a fabricated "$0.00" is never shown. A fresh miner no longer reads "0 accepted", which looked broken, but "Warming up", then "Earning" once the first share lands.

• ☁️ Your Idle Compute earnings now reach the Pasiv Companion app. The Mac already read them from Darkbloom; it now also reports them to Pasiv Cloud, so the Companion's fleet view shows what a Darkbloom account has earned — read, never estimated, and de-duplicated so two Macs on one account never double the figure. Only the total and job count leave the Mac; the balance breakdown stays local. A rig with no linked Darkbloom account reports nothing.

• 🧠 Idle Compute now shows what your Mac has actually earned on Darkbloom. Until now the row said "Darkbloom shows your earnings — Pasiv can't read them", and it was true: the provider's command-line tool had no way to ask. Darkbloom now documents one, and its account endpoint answers the same device token the provider already holds — so Pasiv reads the figure straight from there and shows it the way it shows mining, gross, with a button to verify it on Darkbloom's own console. It is a number we read, never one we worked out from tokens served, and if the read fails the row says "unavailable" rather than showing a zero that would be a claim.

• ✉️ The feedback panel now tells you clearly that your message went through. After sending, the form stayed on screen with a thank-you so faint it read as disabled text, as though nothing had happened. Sending now closes the form and shows the confirmation properly, with a button to send more if you want to. The rating buttons also show which number you picked, and the box you type into is styled like the rest of the app.

• 💬 You can now tell us how Pasiv is doing, from Settings. One rating, one optional line, one Send — it sits at the bottom of Settings and opens only when you click it. It is never a pop-up, never timed, and it never interrupts mining. What you send is anonymous: the rating, the words you typed, and nothing else. We can read it; we cannot reply to it, and the app says so next to the box. If you have analytics switched off, the button still works — pressing Send is you choosing to tell us something — and nothing is created to identify you either way.

• 🚦 Idle Compute now tells you when the provider is turning work away, instead of showing an unexplained zero. A Darkbloom provider that cannot fit a model into memory declines the job rather than failing — the right thing to do, but it keeps full trust and stays online while doing it, so the panel read "Serving" above "0 requests served" and looked exactly like a quiet night with no demand. Our own Mac sat that way for sixteen days. Pasiv now reads the provider's own state and says what it is refusing and why — "needs 20 GB free, this Mac has 14.2 GB" — next to the two things that actually change it: free some memory, or use a smaller model. When the provider is serving one model and merely cannot also fit a larger one, that is a note rather than an alarm, because the Mac is earning.
• 📦 Idle Compute now offers the model your Mac can actually run, instead of refusing everything that can't run the biggest one. The check applied a single memory floor — the one belonging to the highest-earning model — to every machine, so a Mac with 24 GB free was told it had insufficient memory even though it could serve a smaller model comfortably. Pasiv now reads the provider's catalogue, picks the best-earning model that fits the memory and disk actually free, and quotes that model's own download size and memory floor beside its name. Download sizes are rounded up rather than down, so the figure is never flattering.
• 🧪 Experimental: Ethereum Classic on the GPU, off by default. Staged in pasiv-core as a spike lane and not offered in the app. It runs on the same engine as Pearl, Ravencoin and Ergo and pays to an ordinary 0x address. The reason to add it is that it can reach AMD and Intel cards — and we still own no AMD card to prove that on, so nothing in the app claims AMD support.

• 📊 Anonymous measurement now counts every day a machine earns, not only the day it was launched. The once-per-day "this machine had a share accepted" marker was only evaluated at the first share after a launch, so a rig left mining for a week reported a single day and looked like it had churned. It is now evaluated on every accepted share and de-duplicated per local day.
• 🎮 The install marker now carries the graphics-card class. It fired before the hardware probe had answered, so the "installs by GPU class" view had nothing to cut on. It now waits for the probe, and each launch registers the class remembered from the previous run so the first events of a session are classified too.

• 💵 A rig now reports what it earns even with its window closed. The desktop computed its $/day figure in the interface and handed it to Pasiv Cloud, while the rest of a rig's report came from the app's core — so a machine mining perfectly with no window open published everything except the money, and the fleet total was quietly short rather than visibly wrong. The figure now comes from the core, the way the headless node has always done it, using the same shared formula.
• 🔢 The Verus lane is priced as Verus. It was valued at the CPU coin's rate, and VerusHash and RandomX hashrates are not the same kind of quantity, so the result was meaningless rather than slightly off. Only affected machines mining Verus alongside a CPU coin.
• 📱 The phone says when it can't value a rig. A mining rig with no coin rate used to render as a missing line, indistinguishable from a healthy one. It now says "earnings unavailable — no coin rate", and the fleet total says how many rigs it excludes.

• 📊 Anonymous measurement that can answer whether Pasiv is worth running. A once-ever first-open marker, a once-per-day marker recorded only when a machine has actually had a share accepted, and a bucketed graphics-card class (none / low / mid / high) from the best eligible card. No model names, no serials, nothing that identifies a person or a machine — and the single opt-out in Settings governs all of it.
• 🧠 The Idle Compute beta is measured too — consent, the toggle, and a once-per-day marker when the machine actually served requests. It previously emitted nothing, so uptake of the beta was invisible.
• 🔒 A Secure Boot machine no longer reports a CPU boost it did not get. The diagnostic used to call the boost script's presence a pass; with Secure Boot on, the kernel forbids the writes the boost depends on. The check now reads kernel lockdown first and reports the truth, and the Linux warning names a fix you can act on.
• 🪟 Windows builds are built unsigned and signed in a separate, verified pass. Shipped installers remain Authenticode-signed and timestamped, and the updater signature is regenerated over the signed installer.

• 🖥️ A headless node now shows its CPU in the companion. A rig run by pasivd reported no hardware, so its tile showed no processor while every desktop rig did. It now publishes the same capability summary the desktop does — CPU model and thread count, no serial or identifier.
• 🐧 A Linux .deb rig can be updated from the phone. The Update button used to refuse on a .deb install and tell you to fetch a package by hand. It now triggers the machine's own signed updater, which verifies the download before installing. A rig installed before this needs its next update run once by hand to pick up the change.
• 🔗 Pearl's in-app wallet link stays on pasiv.network, pointing at its mine guide like every other coin, rather than a bare code-hosting page.
• 📱 The Android companion now comes from Google Play only. The signed APK download is retired now that Play is live worldwide — one distribution path, with Play's own update and integrity checks. Releases up to v0.4.41 keep their APK attached, so existing links still resolve.

• ⛏️ A GPU rig could mine for hours and earn nothing while the app said it was mining. Pearl's August hardfork made the previous miner's every share invalid, and a rig that still had that miner on disk kept submitting shares the pool threw away — on our own test rig, 5.5 hours, 587 shares, none accepted, with the app reporting Mining and an earnings estimate the whole time. The app had trusted a note about what it last installed rather than the miner actually present; Windows Defender's quarantine recovery had put the old one back and left the note untouched. Pasiv now checks the miner itself on every start.
• 🔏 Windows builds are code-signed. Installers and the app are signed with a Certum certificate and timestamped, so Windows can name the publisher instead of warning about an unknown one. Unsigned builds are what got the previous release quarantined by Defender on sight.

• 🔐 The headless installer now always checks its signature. pasivd.sh used to verify the minisign signature only if minisign happened to be installed, and otherwise fell back to a checksum served from the same place as the binary — which proves the download arrived intact, not that we published it. It now installs minisign from your distribution's own repositories when it's missing, and refuses to install rather than fall back to the weaker check.
• 📱 The sideloaded Android APK can be verified. It ships a signature made with the same key the desktop updater trusts, and it shipped alongside a one-line minisign check. Android pins an app's signing certificate only on upgrades, so a first sideload previously had nothing to check against.
• 🔑 The release pipeline no longer exposes its signing key. The key was passed on the command line — readable by anything else on the build machine — and dependency install scripts ran in the same step that held it. Both fixed, and every third-party build action is now pinned to an exact revision.
• ⛓️ A tampered update to the open core can't silently redirect mining. The app already pinned the fee address, the pool and the billable states; it now also pins the miner-control contract itself, so a change there fails the build rather than shipping.
• 🐧 Linux auto-updates work again. The updater's own sandbox made /usr read-only — the very place a package install writes — so every attempt failed quietly and the machine simply stayed on its current version. Machines already on 0.4.38 need one manual sudo /usr/lib/pasiv/pasiv-update.sh, because the fix arrives inside a package the old updater can't install; automatic updates are self-sustaining from then on.

• 🔓 This is the first release built from the open core. The 4% fee engine, the enforcement that stops mining rather than leave you parked on the fee address, the coin and pool roster, every payout validator, the profit ranking, the $/day estimate, and the entire in-process Verus mining engine are now public GPL-3.0 code at github.com/hash-rate/pasiv-core — and this build pins the exact revision it was compiled against. The pasivd binary attached to this release is built from that repository.
• 💵 One formula for $/day, everywhere. The interface used to carry its own copy of the earnings estimate; the desktop app, the headless node, and the open crate now share a single open implementation.
• 🧠 Idle Compute now recommends Qwen — the model that actually earns. The old default was the smallest download, not the best outcome: the provider's own catalogue rates Qwen at roughly eight times the usage of it. The quoted figures moved with the change and are honest about the cost — a 21 GB download and a 32 GB memory floor, stated up front.
• 🍎 Switching to Settings no longer freezes the app on macOS. The tab ran a slow status check on the interface thread; it now runs in the background and the switch is instant.

• 🔓 The code that touches money is now open source. The fee engine (the published fee address, the structural 4% time-slice schedule, the append-only ledger), the coin/pool roster, every payout validator, the mining state machine, the take-home profit-ranking math, and the entire pasivd headless daemon are public at github.com/hash-rate/pasiv-core under GPL-3.0 — readable, buildable, and pinned by tests anyone can run.
• 📜 One canonical never-list. The binding commitments now live versioned in the open repository (docs/FEES.md); the whitepaper mirrors the same eight items.
• 🖥️ pasivd builds from source — and its cloud endpoint and pool are overridable by environment, so an auditor (or a fork) can point it anywhere. The binaries attached to releases are built from this repository at a pinned revision.
• What stays private, said plainly: the desktop GUI, the Pasiv Companion apps, the cloud, and release signing — the product. Open core, not open everything.

• 📱 Pasiv Companion is on Google Play — worldwide. Watch every rig live — per-lane hashrate, state, and estimated $/day — and start, stop, or update any of them from your phone. Headless pasivd nodes are approved from the same screen.
• 🔑 Signs in with your wallet, not a password. The same Sign-In with Ethereum as the desktop, performed in your own wallet app — non-custodial, and Pasiv never sees your keys. No wallet handy? "See a demo" shows the whole product on a sample fleet.
• 🚫 Nothing mines on the phone — ever. It's a remote for machines you already run. Remote control is deliberately limited to start, stop, and update: nothing can change a rig's coin, pool, or payout address from anywhere.
• 🍏 iOS: available via TestFlight, where it stays for now — it is not on the App Store. Android without Play services can still sideload the signed APK.

• 🧠 Idle Compute (beta) — earn from AI inference instead of mining, on Apple Silicon Macs. Serve private AI workloads through a Darkbloom provider you install yourself. It's off unless you turn it on, and it tells you the cost first: about 12 GB downloads before it earns anything, and it needs 20 GB of free memory to serve at all. Mining and inference compete for the same memory, so on most Macs this is a choice between them, not an addition.
• 🧭 Setup walks you through it. Every step that's blocking you is a button — get the provider, link your account (the code appears in the app), choose a model. Each model shows its real download size and memory floor; the smallest is 12.1 GB, and there's no smaller option hiding behind a vague "download".
• 📈 It says why staying online matters. Work goes to providers that stay up: leaving the Mac running and trusted builds its reputation and brings more offers — while being eligible still never guarantees a job.
• 💸 And it says what it can't tell you. Darkbloom counts your earnings in its own console and gives Pasiv no way to read them, so Pasiv shows the work your Mac has done and points you at the right place rather than inventing a figure.

• 🍎 macOS: the app comes back after updating. It used to install the new version and then simply vanish — the update landed, the app never restarted, and your phone showed "Updating…" until you opened it by hand. It was relaunching by re-running its own file, which the update had already replaced. It now restarts in about two seconds.
• 🐧 Linux: a .deb install updates itself. It couldn't before — a .deb is owned by the system, so the app can't replace itself, and rigs sat on old builds until someone ran dpkg by hand. A background timer now does it daily, verified against a published checksum before installing, and it won't move you backwards.
• 🩺 A diagnostic that finished but never exited — pasiv --doctor ran all its checks and then hung, so anything scripting it waited forever. Fixed.

• ⛏️ Ergo (ERG) — a third GPU coin. Autolykos2 on the same engine as Pearl and Ravencoin. ASIC-resistant, with a measured 6 GB memory floor. (Its guide has since been retired along with the coin.).
• 🎛️ A start control that says what a press will do. Start, Stop and Retry are labelled for the action available right now, and warm-up shows its real phases with an honest expectation instead of a spinner that could mean anything.
• 🛑 Stopping is a real state. Press stop and the app says Stopping, and keeps saying it until the miner has actually exited — no more claiming Idle over a process that's still running.
• 📊 Two miners, two rows. When CPU and GPU are both running you see a rate per lane. They're never added together: the two algorithms differ by eleven orders of magnitude, so a total would be a lie.
• 🚫 A coin your GPU can't run is now listed and disabled, with the reason — "needs 6 GB" — instead of silently vanishing from the picker.

• 🖥️ Headless nodes now show their hashrate and est. $/day in the companion. A pasivd server used to appear on the phone as just "Mining" with no numbers; it now reports its per-lane hashrate and an estimated daily value like every other rig, computed from the same public price and network data the desktop uses.
• 🔧 Fixed a fresh node that mined nothing (0.1.1). The daemon launched its miner in a mode that blocked its own fee-return step, so a safety check stopped mining rather than risk sticking on the fee address. Both fixes are live on the one-line installer — new nodes get them automatically.

The headless node versions independently of the desktop app.

• 🩺 A built-in doctor. Settings → Diagnostics → Run checks answers in one pass what used to need detective work: is the hardware up to it, is every payout address the right shape, can this machine reach each pool, are the price feeds up, and what exactly failed last. The same checks run from a terminal — pasiv --doctor on any machine, pasivd doctor on headless nodes — exiting non-zero on failure so scripts can watch a fleet.
• 🛑 A stop is now proven, never assumed. "Stopping…" holds until the miner process has actually exited; if it won't die, the app force-kills it after a few seconds, and if even that fails you're told the truth instead of shown a fake "Not mining".
• 💡 Every idle state says why — "Stopped" when you stopped it, "Stopped after repeated crashes" when the app gave up — and the idle screen now tells you exactly what Start will do: your coin, how many threads, and where it pays.
• ⛏️ Mining on CPU and GPU at once now shows both lanes, one line each with its coin, state, and speed — and if one lane breaks while the other keeps earning, the status says so plainly.
• 🎛️ Coins your graphics card can't handle say so up front, with the real numbers ("needs about 6 GB of GPU memory; the largest GPU here has 4.0 GB") instead of a start that fails mysteriously. Plus: "Mine anyway" on a battery pause, honest warm-up progress from the mining engine itself, and errors that show the miner's actual words.

• 🐦 Ravencoin — a new coin for graphics cards. Alongside Pearl, you can now mine Ravencoin (KawPow) on the GPU: Settings → "Also mine on the GPU" → Ravencoin. It's an ASIC-resistant coin, so an ordinary graphics card still earns a real share of the network, and the app shows its live estimated $/day like every other coin. Hardware-verified on our own rig before shipping. No Pasiv fee on RVN — the 4% applies to Monero only.
• 🔘 The Start button tells the truth. The pearl is now a clearly labelled control — Start mining when idle, Stop mining while running. Starting shows honest warm-up steps instead of pretending to earn before the first share lands, and if something goes wrong the app says what to do and the pearl becomes a Retry.
• 🌀 Smoother, calmer mining animation that pauses entirely when the window is hidden — a tray-resident miner uses no extra power drawing an animation nobody's watching.

• 🔒 Pasiv no longer sends your payout addresses anywhere. With Pasiv Cloud switched on, earlier versions included your payout addresses in the status each machine reported — even though nothing ever read them. They have been deleted from the server, this version stops sending them, and the server now discards them whatever version sends them. Payout addresses belong on your machine and at your pool, which is what our privacy policy always said.
• 🧾 Headless nodes keep a fee ledger too. A pasivd node now writes every fee slice to fee-ledger.jsonl in the same format the desktop uses, so a rack of screenless machines can be audited exactly like a desktop one. A fee is only auditable if it is auditable everywhere it is charged.

• 🪪 Signing in with MetaMask no longer looks unsafe. The address-normalising fix in 0.4.8 had a side effect we missed: it wrote the wallet address in a form that is not valid under the sign-in standard, so wallets could not read the request as a sign-in at all. Instead of a clear "sign in to Pasiv" card you were shown a raw message and a warning. Fixed properly — the sign-in card is back, and one wallet still means one account. Signing in only ever proves you own the wallet; it cannot move funds.
• 🛡️ GPU mining blocked on Windows is now explained. Smart App Control — on by default on new Windows 11 installs, and separate from antivirus — can block the bundled GPU miner. Pasiv now detects this and says so instead of appearing to do nothing. There is deliberately no button to switch Smart App Control off: it cannot be re-enabled without reinstalling Windows, and that is not a trade worth making for a few cents a day. CPU mining is unaffected.
• 🔐 Security. Closed a hole that let a stranger claim someone else's wallet address and lock the real owner out of signing up; removed a wallet component carrying four high-severity advisories on a path that never worked; tightened what the app may load at runtime; and the headless daemon now verifies the miner it downloads before running it.

• 📦 One-line installs. brew install --cask hash-rate/pasiv/pasiv on macOS, and a single command to turn a Linux server into a mining node. Downloads and updates now come from a project-owned home; existing installs are unaffected.

• 🪪 A second computer no longer vanishes from Pasiv Companion. A capitalisation difference in how wallets report their address could split the same wallet into two accounts, so rigs signed in on one machine never appeared alongside the other. Sign-in now normalises the address, and every machine lands on the same account. If a machine went missing: update, sign out, and sign in again.

• 📱 Your rigs' earnings, on your phone. The desktop now publishes its on-screen earnings estimate (USD/day) to Pasiv Cloud alongside the rig's state, so Pasiv Companion shows — and totals — the same number you see on the desktop. Rides the existing opt-in uplink; nothing new leaves your machine if Pasiv Cloud is off.

• 🔗 "Verify on pool" opens your Monero wallet stats. The link needed MoneroOcean's full wallet route, not just your address — it now lands on your wallet overview.
• 🐧 Linux: a large-pages CPU boost. The same one-time, opt-in RandomX speed-up already on the other platforms. The Linux tray now reflects the whole fleet, and Full power no longer oversubscribes the CPU — it runs the right number of threads and says how many.
• ☁️ Groundwork for Pasiv Companion. An opt-in remote monitor you can turn on in Settings — it publishes your rig's live state to your account and can accept start/stop. It's off by default and changes nothing until the companion app ships, so this is just the foundation for what's next.

• 🐧 Linux tray fixes. The menu-bar icon is white now (it was black on the dark GNOME panel), so the miner's state shows clearly, and the tray menu gained a Hide window item so the window can be tucked back to the tray.

• 🐧 Linux is fully dark now. GNOME drew a light title bar across the top and the language dropdown was light-on-light; Pasiv now runs without the system title bar on Linux (its own dark header is the top, draggable) and native controls are drawn dark to match. macOS and Windows are unchanged.

• ⛏️ It says "Mining" as soon as it's actually mining. After you pressed Start, Pasiv used to sit on "warming up" with a blank hashrate until the pool credited your first share — minutes, at a laptop's hashrate — so a working machine looked stuck. It now switches to "Mining" the moment the miner is producing hashes, showing the live hashrate and earnings right away.

• 🪙 "Need a wallet?" points at the right wallet per coin — each coin links to its own guide, and Pearl links only to the official Pearl Research Labs wallet, with a note to avoid the look-alike "Pearl wallet" sites in search.
• ✅ Clearer payout-address feedback — instead of a blank "invalid", Pasiv tells you what's wrong: an email or exchange entry, a Verus VerusID where the pool needs your R-address, or an integrated Monero address where a standard 4… or subaddress 8… is what pays.

• ⚙️ Change settings while mining — auto-pause (battery / fullscreen) and Auto / Max-Profit now apply live, so toggling them no longer makes you stop mining first.

• 🎮 GPU mining on Windows — Pearl (PRL) mines on an NVIDIA card, set up on demand, with its earnings shown in the Coins tab and on the status screen.
• 🚀 Boost CPU mining — a one-time action in Settings turns on large memory pages for a meaningful RandomX speed-up.
• 🔎 Verify on pool, per coin — every coin in the Coins tab links straight to its own pool dashboard.

• 🪙 A dedicated Coins tab — the main screen is just Start/Stop and what you're earning; coin choice, Auto mode and wallets moved to their own tab, with Auto the default.
• ✨ Onboarding asks for nothing — no forced wallet address, no sign-up; you're dropped straight in on Auto and add a wallet in the Coins tab when you're ready.
• 🔗 Working links — "Verify on pool" and the fee check now open pages that actually show data.

• ⛏️ Mine Monero and Pearl at the same time — your CPU mines RandomX while an eligible NVIDIA GPU mines Pearl, in parallel, neither slowing the other down.

• 💎 Pearl (PRL) GPU mining — a modern NVIDIA card mines Pearl on Windows and Linux via the bundled SRBMiner engine, detected automatically.
• 🐧 A real Linux governor — pause-on-battery and thermal backoff now work on Linux, not just macOS.

• 💰 See what you're earning — the status screen shows what your hashrate is worth per day, from live prices and network difficulty.
• 🪟🐧 Windows and Linux builds — both mine Monero, Zephyr and Salvium on your CPU; Verus stays macOS-only, and each build only offers what it can actually mine.

• ⛏️ Verus (VRSC), native to Apple Silicon — a second algorithm your Mac is genuinely great at. VerusHash is AES-accelerated, so an M-series chip does far more of it per watt than RandomX. Mined in-process, no extra binary.
• ⚡ Auto / Max-Profit mode — opt-in: Pasiv mines whichever supported coin is most profitable for your machine, re-ranking every 15 minutes from live price and difficulty, and shows you what it picked and why.
• 🌍 Now in seven languages — the whole app is localized (English, Español, Português, Deutsch, Français, 日本語, Русский), auto-detected from your system with a picker in Settings.
• 🎛️ Simpler Settings — the old Pro and Settings tabs are one clean, grouped Settings tab; live logs tuck into a Diagnostics section.
• ♿ Accessibility — full keyboard focus states and screen-reader announcements for mining state and errors.
• 💎 Transparent fee — a time-sliced fee that accrues only while you're actively mining, to a published fee address you can check on its pool. Nothing else leaves your machine.

• New tabbed interface: Status / Tokens / Pro.
• Mining toggle in the menu-bar tray.
• Signed auto-update: the app now verifies and installs releases itself.

• First release: one-button RandomX mining on Apple Silicon, signed and notarized.
• Multi-coin roster — Monero (XMR), Zephyr (ZEPH), Salvium (SAL) — with per-coin payout addresses and address validation.
• Direct pool payouts (non-custodial), thermal/battery governor, menu-bar tray, optional wallet sign-in.