TinyRustLM updates

Simplifies startup around a verified cached composition or a small MiniModel.org server seed, with technical acquisition controls in Advanced.

• changedRestores an admitted cached composition first; otherwise automatically starts the smallest eligible MiniModel.org server-seeded composition, with visible progress and cancellation. Hugging Face, files, conversion and manual peer settings remain in Advanced.
• addedAdded strict six-member catalog admission, bounded direct-peer streaming, browser OPFS persistence, restart verification, cancellation, and atomic activation.
• changedRoutes a qualified local-conversion result through the authenticated companion into the same verified browser cache and activation path.
• securityKeeps inference and prompts local, allows MiniModel.org to supply the initial verified seed, and distinguishes signed listings from current peer reachability. An unavailable or unqualified model is shown honestly.

Makes model selection more compact by removing the duplicate Edit Model command while preserving the single model chooser.

• removedRemoved the duplicate Edit Model button from the model toolbar.
• changedKept Choose model as the sole command for opening model selection and reduced the toolbar to one row at supported desktop widths.

Publishes the sole worker-owned SLM2 browser runtime and authenticated local Companion control path without legacy execution code.

• addedAdded the canonical SLM2 WebAssembly runtime, bounded loader, dedicated worker, typed runtime client, and Prompt2 request boundary.
• changedChanged the browser app to one worker-owned SLM2 execution path and removed the obsolete in-page runtime implementation instead of retaining compatibility code.
• addedAdded an authenticated, origin-bound Companion capability client with bounded model acquisition, conversion, verification, and activation operations.
• fixedClosed the deployment inventory over every current runtime dependency so the published shell cannot reference missing worker, loader, capability, or WebAssembly files.
• securityKept prompts, responses, model bytes, composition bytes, credentials, and private evidence outside TinyRustLM project servers and public release records.

Publishes the clean-slate SLM2 browser shell while keeping model acquisition local or direct P2P and withholding unavailable companion claims.

• changedChanged Get model to prefer an exact verified peer and otherwise request reviewed local source acquisition and conversion through the companion.
• removedRemoved TXT, PowerShell, request JSON, conversion-kit, share-kit, package URL, and install-command handoffs from the browser experience.
• fixedReplaced stale companion availability language with exact Public package pending and Deployment blocked states.
• securityKept prompts, responses, source tensors, model bytes, and composition bytes off TinyRustLM and related project servers.
• documentationUpdated companion and browser-runtime guidance to distinguish implemented source from unavailable packages, deployment, and live proof.

Makes the public desktop companion immediately discoverable from TinyRustLM and replaces private-feed installation guidance.

• addedAdded a Get companion action that opens a version-pinned install page linked to the public NuGet.org tool package without creating browser handoff files.
• changedChanged the canonical install guide from a private folder feed to the public signed 0.2.0 library, tool, and symbol packages.
• changedRecorded clean public package installation, repository-signature verification, payload verification, and companion doctor evidence.
• documentationKept unpublished self-contained archives out of public availability claims until independent distribution evidence exists.

Replaces model handoff downloads with direct P2P-first acquisition and companion-managed local conversion.

• addedAdded one-action acquisition that imports a complete verified MiniModel P2P offer before considering source conversion.
• addedAdded protocol-v2 companion download, resume, review, Rust conversion, validation, and direct browser loading for immutable supported Hugging Face sources.
• addedAdded receipt-bound streaming and activation of both the converted `.slm` model and its immutable `.acg1` composition graph.
• removedRemoved model-acquisition and P2P-sharing README, TXT, PowerShell, request JSON, conversion-kit, and share-kit downloads from the browser.
• securityKept prompts, responses, source tensors, model bytes, and composition bytes off TinyRustLM and related project servers.

Completes the release-readability deployment and hardens publication recovery.

• fixedCompleted the app and update-history surfaces left inconsistent by the interrupted 0.1.1 publication attempt.
• fixedMade the current-release JSON the final publication commit marker after all site content and release history.
• fixedReconciled ambiguous FTPS rename responses through bounded read-only observations before rollback.
• changedPreserved the publicly observed 0.1.1 identity and advanced recovery as a distinct version.

Makes the TinyRustLM release record fully readable and reachable across app viewports.

• fixedRemoved desktop footer truncation from the version, release date, and last-published facts.
• addedAdded a compact release summary and updates link for narrow-desktop and mobile layouts.
• fixedAligned the initial no-model status with the authoritative browser model-admission state.
• changedExpanded browser release verification to require visible, in-viewport, unclipped release facts on every published app and history view.

Introduces a verifiable public release record and update history for the TinyRustLM dogfood site.

• addedAdded a visible site version, release date, last-published status, and human-readable update history.
• addedAdded strict machine-readable current-release and release-history records under .well-known.
• changedBound web publication to clean source identity, exact release metadata, secret scanning, and HTTPS readback evidence.