**Safer by default.** This release fixes three serious security findings: a web page open in your browser could talk to the local AI tool connector, and two file tools could be pointed at files outside your vault. Web pages are now refused, and the file tools stay inside your vault folders.

**Network access is now a setting.** On a new install only your own computer can use the connector; turn on **Allow network access** (Agents → Connect) if an agent on another device needs to reach it. If you installed an earlier version, nothing changes until you choose to turn it off. When network access is on, other devices still need the pairing code.

**Agents are told why they can't get in.** When the connector is turned off, or a device isn't allowed in, an agent now gets a clear message: Sovereign Drive is running, why the agent can't use it, what to ask you to do, and not to retry until you confirm. Turning the connector off no longer closes the port; the app answers with that notice and serves nothing from your vault. Anything on another device sees only a bare status on the health check.

**The Windows installer now works on a fresh PC.** It installs the Microsoft Visual C++ runtime when a machine doesn't have it (you may see an administrator prompt), so a clean Windows no longer fails with a missing `MSVCP140.dll`. The `.msi` does not do this: install the Microsoft Visual C++ Redistributable first if you use it.

**Smaller changes.** Ingesting a structured data file under a name that already exists now keeps the old version next to it as a `.before-overwrite` copy instead of replacing it silently.

**Known limits.** Windows and macOS installers are not code-signed or notarized: expect a SmartScreen warning on Windows, and on macOS run `xattr -cr "/Applications/Sovereign Drive.app"` if it says the app is damaged. The in-app "newer version available" check doesn't work yet; check the download page. Only the first watched folder syncs between devices. Agent names are still self-declared unless you give an agent a token.

Built from `af2ff94` (GitHub Actions run `37165220923`) on the project's own machines. Verify a download against `SHA256SUMS.txt`.