CipherBoard 0.4: universal compact and word presentations - #26

Summary

• add strict Compact, Russian-word, and English-word ciphertext presentations over unchanged canonical CB1/Olm messages
• remove the SMS selector and use one universal fragmentation profile for all new sends
• persist presentation metadata atomically with pending ciphertext and auto-detect all formats on every decrypt path
• add a localized Message format screen, large-font/status-bar fixes, pinned 4096-word dictionaries, license provenance, SBOM data component, and v0.4.0 documentation

Security properties

• Olm/Double Ratchet and authenticated message bytes are unchanged
• word output is documented as recognizable camouflage, not steganography or plausible deniability
• strict dictionary parsing, canonical padding, checksum, size/allocation limits, and canonical CB1 revalidation
• typed IME publication boundary requires an atomically committed pending operation
• no INTERNET, Google Play Services, analytics, crash reporting, advertising, Contacts, or SMS permissions

Verification

• native Rust: 43/43; JNI: 3/3; fmt, Clippy -D warnings, Cargo audit pass
• ASan/libFuzzer: 236,453 runs / 61s / 0 crashes / 0 timeouts / 0 artifacts
• Gradle unit suites and debug/release lint: pass
• API 36 AOSP no-Play instrumentation: crypto-core 1/1, app 7/7
• source security scan, Kotlin format gate, Python release tooling 28/28: pass
• manual RU portrait/landscape at font scale 2.0: no status-bar overlap; settings remains scrollable/reachable with locked Vault

This is internal automated and source-review evidence, not an independent applied-cryptography or Android security audit.