Roadmap

The nine functional gaps identified in the 2026-10-14 Design v2 review are implemented: changed-source download recovery, independent risk/overwrite confirmations and batch results, editable save-time split Diff, scoped RAM presets/results, auto-saving settings, object thumbnails/details and actions, structured metadata, diagnostic controls and staged automatic update downloads. See the implementation record for code and regression evidence. In-app FLV playback remains a separate scope decision; external-open/download fallback is retained.

The 1,040 UI fixture checks do not replace real OSS/RAM/SMTP, Windows/Linux, native media, keyring or signed-distribution acceptance in the release checklist.

Text editing supports UTF-8 up to 5 MiB; remote preview reads are limited to 8 MiB and image decoding to 20 megapixels. Edited copies are the default. Explicit original replacement preserves headers, tags, metadata, ACL and storage class after an ETag preflight; this check and the write are not atomic. Images support zoom; audio/video use the native WebView; documents, FLV and unsupported codecs offer external-open/download fallback. Metadata replacement supports objects up to 1 GiB. Recursive plans are bounded to 100,000 keys and copy/move/delete queues are session-only. MyGo signed installation/restart is wired, but requires a publisher key and update feed; development builds provide manual release downloads.