Version 1.2 — provable by design. AUDIT TRAIL • A record of what happened: when something was recorded, which model transcribed it, which endpoint the transcript went to, and how it ended • The trail never contains the transcript, the summary, the prompt or an API key — metadata only • Every line carries a hash of the previous one and a Secure Enclave signature; tampering shows • Outgoing calls store the provider's request ID, so an event can be traced on their side • Retention 30–365 days, whole days are removed at once; export to JSONL or CSV • Everything stays on the device; nothing is sent anywhere • Verification also reports what is missing — deleted oldest or newest days now show up on the Integrity screen • Deleting the trail leaves a signed `audit.wipe` entry stating how far the deletion went • Reinstalling or restoring from a backup no longer invalidates old signatures — every line names its key, a rotation is written as `audit.keyRotated`, and the export header lists every key used and the signature scheme • The chain state is rebuilt from the last written entry, so deleting the helper file no longer restarts the trail from zero • The export is ordered by event sequence, not by file name WHERE YOUR DATA GOES • A new Settings screen: what runs on device, what leaves for summarisation, to whom, and under which consent — generated from the current configuration • Consent applies to a specific recipient, not to a provider — a second gateway or a different address asks again • Settings → Sending consents lists every approved recipient with a Revoke button; after revoking nothing is sent there • The app also asks for consent in a recording's detail, right before sending • The "Own infrastructure" flag is only suggested from the address of a new endpoint; turning it on is the administrator's decision AI CONTENT LABELLING • Notes carry `generated_by` in the frontmatter and a note under the summary stating that a model wrote it SHORTCUTS • Find Notes — searches transcript text, not just titles • Get Note Text — summary, transcript, tasks, or the whole markdown note • Get Tasks from Note — a list to feed the next step of an automation • Stop Recording and Transcribe Audio File — a recording from another app straight into the queue • The read actions work even when the app is not running • The app licence unlocks Shortcuts too; there is nothing else to entitle RECORDING RELIABILITY • Recording keeps going when a headset connects or disconnects mid-meeting — it used to stop silently and lose the rest of the meeting • Opening another set of minutes while recording no longer ends the recording • A recording cut short by a crash or a shutdown comes back whole; it used to show up as zero seconds with an empty transcript • The Live Activity disappears after a crash instead of counting up on the lock screen forever • Audio imported from another app is no longer lost when a second import is already running NOTES AND QUEUE • If a note cannot be written to your chosen folder, the app says so — the failed write used to pass silently • "Try again" after a failed write only repeats the write; the transcript and summary are not recomputed • A transcript the system killed halfway can be finished with "Finish transcription" • The transcription queue keeps going in the background even after the system terminated the app • Edits made during a long transcription or summary (title, speaker names, the confidential flag) are no longer overwritten by the result ALSO • The "Interview" template is now "Conversation" and only records what was said — no assessment of people • New MDM keys: `auditLogEnabled`, `auditRetentionDays`, `lockAuditSettings`, `organizationID` • MDM profile changes take effect immediately, not after the app is restarted • `lockAuditSettings` both enables and locks the trail; retention deletion runs even when the trail is off, and `auditRetentionDays` is clamped to 30–365 days