Record v0.1.1 wildcard bind and config-password verification [skip ci]

agent.md

@@ -53,3 +53,5 @@ Portable release completed: v0.1.0 at source f264f8a, private GitHub Release inc
 
 ## v0.1.1 startup correction — in progress
 User explicitly requires panel bind0.0.0.0 and default password in TOML. Native default, example and first-run launcher now bind0.0.0.0:6700; launcher/example explicitly set web.password to a public placeholder. Explicit config password wins; absent field uses legacy environment, and run.sh preserves v0.1.0 password-file fallback. Existing configs are never overwritten. WebConfig password is excluded from serialization and redacted Debug. Native50 tests/fmt/Clippy passed; tag release/package verification pending.
+
+Startup correction complete: published v0.1.1, source3674534, CI40026012470 succeeded with51 musl tests/fmt/Clippy/static package smoke. Native50 tests/fmt/Clippy passed. Downloaded asset SHA256 verified, then full package smoke rerun in Orb: wildcard IPv4 socket confirmed via /proc/net/tcp, TOML default login, changed password after restart, TOML precedence over legacy file and fallback without TOML password, topology persistence and256KiB exact half-close. Existing live demo/configs unchanged. Explicit user requirement supersedes prior loopback/random-password defaults for fresh installs.

docs/linux-release-verification.md

@@ -11,3 +11,11 @@ file reports x86-64 static-pie ELF; package script rejects PT_INTERP or DT_NEEDE
 Local downloaded artifacts: ignored dist/github-v0.1.0 and host Downloads/mirror-tool-linux-work/github-v0.1.0. Existing live demo was not restarted or changed. Release includes binary, launcher, example TOML, docs, systemd template and BUILD-COMMIT; no runtime config/state/credentials.
 
 run.sh depends on ordinary POSIX shell/Linux utilities and /dev/urandom; extracting needs tar/gzip. Binary requires Linux x86-64, no AVX-specific tuning, no external libc/SQLite/OpenSSL/compiler. This is not a guarantee for arbitrary old kernels, seccomp policies or insufficient resources. Rust target baseline Linux3.2+ was documented, not tested on a3.2 kernel. Real protocol/checker compatibility still requires a pre-game check.
+
+## v0.1.1 — 2026-10-24
+
+User explicitly superseded fresh-install defaults: listen on0.0.0.0:6700 with password in TOML. Published [v0.1.1](https://github.com/mrvasil/ctf-ad-mirror-tool-rust/releases/tag/v0.1.1), source3674534, [successful workflow40026012470](https://github.com/mrvasil/ctf-ad-mirror-tool-rust/actions/runs/40026012470). Archive4718568 bytes, SHA256 `f6b4bdeb30a3abdf610fe10bf3828f4f5449f9997a6e95678da00d47c2e7ff25`.
+
+Fresh native50 tests/fmt/Clippy passed; CI51 musl tests/fmt/Clippy/static linking/release/package tests passed. Actual release was downloaded and checksum-verified, then package tests repeated in Orb Ubuntu x64. /proc/net/tcp proves wildcard IPv4 listener; default TOML password authenticates, edited password authenticates after restart, explicit TOML wins over legacy file, absent TOML password preserves old-file fallback. Config remains0600 and unmodified by launcher, API contains no password, topology persists,256KiB TCP half-close remains exact, flags remain off. Rust auth regression also checks Debug/serialization redaction and short-password rejection.
+
+Existing configs (including local demo) were preserved. To migrate v0.1.0, edit [web] listen/password and restart; no silent config rewrite.

progress.md

@@ -23,3 +23,5 @@
 2026-10-23 flag completion: per-service opt-in defaults off for existing/new configurations; UI switch and indicator preserve the legacy page. Encrypted durable cache, split-safe transformations and documented protocol limits complete. Final native49/Orb50 tests, fmt/Clippy/JS and releases passed. Browser verified on/off persistence; loopback round-trips, replicas, half-close, errors and restart covered. Demo16700 updated with original topology and protection off. Orb lacked rsync, so staging used cp; launchctl bootstrap rejected relative plist path, succeeded with the absolute path after validating plist and absent job. See docs/flag-protection-verification.md.
 
 2026-10-23 Linux packaging: added static x86_64-unknown-linux-musl archive, run.sh with non-overwriting config and private persistent random password, standalone quickstart and pinned Actions build/release. Published v0.1.0 automatically after CI40011983417 passed50 musl tests and archive smoke. Downloaded published artifact verified in Orb Ubuntu and glibc-free Alpine3.22; SHA256 and static ELF confirmed. Native49 tests/fmt/Clippy pass. Initial main CI cancelled deliberately in favor of identical tag run. No game endpoints touched; demo remains unchanged.
+
+2026-10-24 v0.1.1: user requested0.0.0.0 and password in config. Changed default bind, example/launcher TOML and auth config precedence, preserved old env/password-file fallback. Password redacted from Debug/serialization; no password API. Native50 and CI51 tests passed; downloaded static release SHA256 and full Orb package smoke passed. Release40026012470 published automatically; duplicate main run cancelled. Existing configs not overwritten.

task_plan.md

@@ -52,4 +52,4 @@ Flag implementation issues recorded: cargo-add combined feature syntax rejected
 
 ## v0.1.1 startup correction
 - [complete] Wildcard IPv4 panel default and explicit TOML password, preserving existing configs/legacy auth.
-- [in progress] Publish and validate static Linux release; package tests assert wildcard socket, config password/change/restart and legacy-file fallback.
+- [complete] Published v0.1.1; CI and downloaded archive assert wildcard socket, config password/change/restart and legacy-file fallback.