release: prepare 0.1.0-testnet hardening milestone (version bump, changelog, release note)

Author: CalorieApp Maintainer

CHANGELOG.md

@@ -1,3 +1,36 @@
+## [0.1.0-testnet] - 2025-11-19
+
+### Hardening & Compliance Milestone
+Initial public testnet stabilization introducing:
+- Repository privacy reduction (removed premature build/run instructions)
+- Canonical multi-clause legal disclaimer + cross-links (LICENSE, CONTRIBUTING, TRADEMARK)
+- Feature flag isolation for deferred Web3 browser & CalorieDB (`src/core/feature_flags.py`)
+- Security audit (no secrets; wallet backups purged)
+- .gitignore refinement (narrow sensitive patterns; added CalorieDB data dirs; avoided blanket *.dat/*.bak/*.dir)
+- Deferred XRPL ↔ CalorieDB sync service clarification
+- Legacy branches `CalorieAppV11-2`, `CalorieAppV11-3` deleted (fully merged)
+
+### Added
+- Extended legal disclaimer (`docs/LEGAL_DISCLAIMER.md`)
+- Deferred components directory (`src/_deferred/`)
+- Feature flags module
+
+### Changed
+- README deferred components section & sync wording
+- `FoodTrackScreen` gating CalorieDB recording behind flag
+- `app.py` removal of unreachable preload block
+
+### Removed
+- Duplicate active Web3BrowserScreen (kept deferred stub only)
+- Temp analysis & test artifacts; wallet backup files
+
+### Security / Compliance
+- Confirmed absence of hardcoded secrets or mnemonic phrases in tracked code
+- Wallet data ignores scoped to explicit filenames
+
+### Notes
+This tag is a baseline for future visual polish and optional feature activation; experimental modules remain disabled.
+
 ## [1.1.2] - 2025-11-19
 
 ### Added

docs/RELEASE_NOTE_0.1.0_TESTNET.md

@@ -0,0 +1,46 @@
+# Release 0.1.0-testnet
+
+Hardening & Compliance Milestone (2025-11-19)
+
+## Summary
+Initial testnet stabilization establishing privacy boundaries, legal clarity, and deferred experimental feature isolation.
+
+## Key Changes
+- Canonical extended legal disclaimer (`docs/LEGAL_DISCLAIMER.md`) + cross-links (LICENSE, CONTRIBUTING, TRADEMARK)
+- Security audit: no secrets/mnemonics; wallet backup artifacts removed
+- Feature flags: `ENABLE_WEB3_BROWSER`, `ENABLE_CALORIE_DB` default False
+- Deferred components relocated under `src/_deferred/`
+- .gitignore narrowed (added CalorieDB data dirs; removed overbroad binary patterns)
+- XRPL ↔ CalorieDB sync service explicitly deferred
+- Legacy branches `CalorieAppV11-2` / `CalorieAppV11-3` deleted (fully merged)
+
+## Active Core
+- Mnemonic (BIP39) wallet flows
+- Multi-server XRPL failover connectivity
+- Modular KV loading & responsive scaffolding
+- Accessibility shortcuts framework (conditional)
+
+## Deferred / Flagged
+- Web3 Browser (Android WebView integration pending)
+- CalorieDB prototype (public/private/IPFS sync pipeline)
+- XRPL ↔ CalorieDB linking service
+
+## Security & Privacy
+- No hardcoded API keys, seeds, mnemonics, or passwords detected
+- Wallet data persistence restricted to explicit filenames
+- Experimental modules non-importing when flags disabled
+
+## Upgrade Path
+1. Visual polish & spacing normalization
+2. Optional activation workflow for CalorieDB (post model review)
+3. CI enforcement of PR-only modifications
+4. Accessibility contrast audit & token metadata enhancements
+
+## Usage Notice
+This is a **beta testnet** release. Not suitable for production value transfer. Verify issuer addresses before interacting with tokens.
+
+## Contact
+info@calorietoken.net
+
+---
+Refer to `CHANGELOG.md` for historical context.

src/VERSION.py

@@ -1,63 +1,36 @@
 # CalorieApp Version Information
 
-__version__ = "1.1.2"
-__build__ = "visual-refinement"
+__version__ = "0.1.0-testnet"
+__build__ = "hardening-milestone"
 __date__ = "2025-11-19"
-__status__ = "stable"
+__status__ = "beta"
 
 # Release Notes
 """
-Version 1.1.2 - Visual Refinement & Social Assets
-================================================
-
-✨ Highlights:
-- Edge-to-edge social image generator with dynamic font fitting
-- Consolidated multi-platform social copy asset
-- Visual audit checklist and PR body template added
-- Global Telegram community link updated across docs/configs
-
-Version 1.1.0 - Production Ready Release
-========================================
-
-🎉 Major Features:
-- ✅ Mnemonic (BIP39) 12-word recovery phrase system
-- ✅ Generic token system for custom XRPL tokens
-- ✅ Modern unified UI with visual transaction indicators
-- ✅ Conditional Navigation System - Intelligent drawer management
-- ✅ Multi-Server XRPL Failover - Robust connectivity with automatic failover
-- ✅ Trustline management for XRPL tokens
-- ✅ Enhanced Password Fields - Eye icon visibility toggles
-
-🎨 UI/UX Improvements:
-- ✅ Unified header layout across all 25+ screens
-- ✅ Centered titles with visible CalorieApp logo (light circular background)
-- ✅ Transaction history visual indicators (↑ sent, ↓ received, • other)
-- ✅ Short peer addresses (first 6...last 4 characters)
-- ✅ Bottom-left floating action button for menu access
-- ✅ Decoded currency display in transaction history
-
-🔧 Technical Improvements:
-- ✅ Removed all deprecated MDTopAppBar components
-- ✅ Professional project structure for APK building
-- ✅ Comprehensive documentation and setup guides
-- ✅ Enhanced launcher with dependency checking
-- ✅ Organized assets and cleaned up development files
-- ✅ Clean codebase with no test scripts or backup files
-
-📱 Platform Support:
-- ✅ Android APK building with Buildozer
-- ✅ Desktop development environment
-- ✅ Cross-platform launcher scripts
-
-🛡️ Stability:
-- ✅ Zero deprecation warnings
-- ✅ Robust error handling and crash prevention
-- ✅ Encrypted wallet storage with backup systems
-- ✅ XRPL testnet connectivity with multi-server redundancy
-
-🚀 Ready For:
-- ✅ GitHub repository management
-- ✅ APK building and distribution
-- ✅ Production deployment
-- ✅ Team development
+Release 0.1.0-testnet - Hardening & Compliance Milestone
+=======================================================
+
+Scope:
+ - Repository privacy hardening (removal of build/run instructions; deferred experimental modules)
+ - Comprehensive legal disclaimer infrastructure (multi-tier + canonical file)
+ - Feature flag system isolating Web3 browser & CalorieDB prototypes
+ - Security audit (no secrets; wallet backups purged; narrowed .gitignore patterns)
+ - Deferred XRPL ↔ CalorieDB sync service clarification
+ - Branch cleanup (legacy V11 branches retired)
+
+Highlights:
+ - ✅ Multi-server XRPL failover layer retained
+ - ✅ BIP39 mnemonic flow intact & gated
+ - ✅ Screens modularized; KV loading improved
+ - ✅ Accessibility & responsive scaffolds preserved
+ - ✅ CalorieDB + Web3 features explicitly deferred & non-importing
+
+Risk & Status:
+ - Testnet-only beta; not production hardened for value transfer
+ - Experimental components behind False flags to prevent accidental exposure
+
+Next Targets:
+ - Tag follow-up release for visual polish
+ - Optional activation path for CalorieDB after security model revision
+ - Add CI enforcement for PR-based changes
 """