New release v.0.4.3
## v0.4.3 (12)
### 🚗 Navigation
- **Speed limits actually work now.** The root cause: `annotations=maxspeed` is a Mapbox-only extension — vanilla OSRM (including the FOSSGIS server we use) never returned it. Speed limits now come from Overpass, with class-based inference (motorway/trunk/residential/living_street) for the many roads that have no explicit `maxspeed` tag, 3 rotating mirrors for reliability, and support in free-roam driving (not just active navigation).
- **Recenter button** now pulls a fresh one-shot GPS fix instead of reusing the last stream sample, so it snaps to your *actual* current position.
- **Compass/heading button** is a real toggle in both navigation and free-roam — free-roam heading-up mode now rotates the map with the magnetometer instead of doing nothing.
- **Secondary instruction panel** (next-turn preview) enlarged ~100% — bigger icon, bigger text, easier to read at a glance.
### 🔊 Voice
- Turn instructions and hazard/ZTL alerts no longer cut each other off mid-sentence. Maneuvers are priority (interrupt immediately); ambient alerts queue and wait their turn, keeping only the most recent one.
- Fixed a race in audio ducking where a stale utterance could release focus meant for a new one, breaking the "duck other media" behavior.
### 🔒 Security
- Nostr events are now cryptographically verified (event hash + BIP-340 signature) before being trusted — a malicious relay could previously fabricate road reports or confirmations under any pubkey.
- One vote per identity per event confirmation (was previously unlimited/re-countable).
- Local settings (favorites, search history) are now AES-256 encrypted at rest, key held in the Android Keystore.
- `debugPrint` is silenced in release builds — no more street names/coordinates/TTS phrases in logcat.
- Event comments capped at 500 chars to prevent relay-side payload abuse.
### 🎬 Onboarding
- Welcome page now shows the real app logo and a privacy notice recommending a VPN (Mullvad, Bitcoin-payable) given that road reports propagate over Nostr.
- nsec login page now shows the same security disclaimer as the profile screen.
- Fixed the Kokoro voice download completion indicator — it was implemented but never actually triggered (listener was waiting on a stream event that never fires); now shows a white check on a green circle when the download finishes.
- GrapheneOS guidance now mentions setting location permission to "Allow all the time," not just "while in use."
npub1cw…65mmc
2026-07-11 23:34:32 UTC
Author Public Key
npub1cwft0dmtw5gtwhmu5r2f8fjpw0l5f006egs8fmltdc3jrxxcpe6q965mmcSeen on
wss://nos.lolPublished at
2026-07-11 23:34:32 UTCEvent JSON
{
"id": "b9001ad6e5a3c62e1352e6a70f173af5d04eebde54af7cecdb32b9263684c5db",
"pubkey": "c392b7b76b7510b75f7ca0d493a64173ff44bdfaca2074efeb6e232198d80e74",
"created_at": 1783812872,
"kind": 1,
"tags": [
[
"r",
"wss://nos.lol/"
],
[
"r",
"wss://indexer.coracle.social/flint-yonder-zulu"
],
[
"r",
"wss://relay.damus.io/"
],
[
"r",
"wss://offchain.pub/"
],
[
"client",
"Primal Web"
]
],
"content": "New release v.0.4.3\n\n## v0.4.3 (12)\n\n### 🚗 Navigation\n- **Speed limits actually work now.** The root cause: `annotations=maxspeed` is a Mapbox-only extension — vanilla OSRM (including the FOSSGIS server we use) never returned it. Speed limits now come from Overpass, with class-based inference (motorway/trunk/residential/living_street) for the many roads that have no explicit `maxspeed` tag, 3 rotating mirrors for reliability, and support in free-roam driving (not just active navigation).\n- **Recenter button** now pulls a fresh one-shot GPS fix instead of reusing the last stream sample, so it snaps to your *actual* current position.\n- **Compass/heading button** is a real toggle in both navigation and free-roam — free-roam heading-up mode now rotates the map with the magnetometer instead of doing nothing.\n- **Secondary instruction panel** (next-turn preview) enlarged ~100% — bigger icon, bigger text, easier to read at a glance.\n\n### 🔊 Voice\n- Turn instructions and hazard/ZTL alerts no longer cut each other off mid-sentence. Maneuvers are priority (interrupt immediately); ambient alerts queue and wait their turn, keeping only the most recent one.\n- Fixed a race in audio ducking where a stale utterance could release focus meant for a new one, breaking the \"duck other media\" behavior.\n\n### 🔒 Security\n- Nostr events are now cryptographically verified (event hash + BIP-340 signature) before being trusted — a malicious relay could previously fabricate road reports or confirmations under any pubkey.\n- One vote per identity per event confirmation (was previously unlimited/re-countable).\n- Local settings (favorites, search history) are now AES-256 encrypted at rest, key held in the Android Keystore.\n- `debugPrint` is silenced in release builds — no more street names/coordinates/TTS phrases in logcat.\n- Event comments capped at 500 chars to prevent relay-side payload abuse.\n\n### 🎬 Onboarding\n- Welcome page now shows the real app logo and a privacy notice recommending a VPN (Mullvad, Bitcoin-payable) given that road reports propagate over Nostr.\n- nsec login page now shows the same security disclaimer as the profile screen.\n- Fixed the Kokoro voice download completion indicator — it was implemented but never actually triggered (listener was waiting on a stream event that never fires); now shows a white check on a green circle when the download finishes.\n- GrapheneOS guidance now mentions setting location permission to \"Allow all the time,\" not just \"while in use.\"",
"sig": "781a3a900e2adc39eb91208b4901e89780f6e1dcf07d41f1ad6b955be94b1fe62563f77c86618bdb84fa3869487da2acb3665a09208f1254d95d4115f233b096"
}