CHANGELOG

Account isolation & privacy hardening

This release significantly strengthens how Hogmatix keeps every user's data private and separate. Highlights:

• Stronger account isolation. Your connected X, TikTok, and YouTube accounts — and your scheduled posts, captions, and analytics — are now strictly accessible only to you. Every account is bound to its owner end to end.
• Fail-closed authentication everywhere. Every data and action endpoint now requires a valid, approved session before it returns or changes anything.
• Hardened account connections. Connecting a social account now cryptographically binds that connection to the signed-in user who initiated it, and your session credentials are never placed in a URL.
• Defense in depth. Added request rate limiting, a strict Content-Security-Policy, additional HTTP security headers, and stricter error handling so internal details are never exposed.