Mac 26.10.2 (Intel and Apple Silicon) and Windows 26.10.2 are the current stable releases. Mac builds are signed by Apple Developer ID, notarized and Gatekeeper-verified on both architectures, and the Windows installer is signed by Frame the Change LAB through Azure Trusted Signing. 26.10.2 fixes course codes and saving for signed-in teachers.
proxy-addr to 2.0.8 (the patched release) and bundled shell-quote so it no longer ships as a separate module.12026819880, Connect this device builds wa.me/12026819880. Prior 443 staging chrome is not this release.14434205396, Connect this device builds wa.me/14434205396?text=LINK …. Old 202 number removed from live product paths.One signed-in master account now enters the Teacher, Learner, Parent, Training Provider, and Participant doors in a single session, without creating many accounts. The role wall is unchanged for everyone else: every role still sees only what its role permits, and only the master login bypasses the per-door sign-in.
Student-facing defects found in 26.9.1 are fixed so the app is genuinely ready to be tested with students. This build is prepared, not stamped: a clean Hakiki Deep test decides whether the student pilot is ready.
The three gaps found in 26.9.1 were closed in 26.9.2 and stay closed. WhatsApp is no longer parked on the download page — it stays a live channel, it is simply not advertised there.
The Codex, Claude, and Grok audit findings are folded into 26.9.2, including the three known 26.9.1 gaps, plus the low-risk improvements that were safe to include.
The 26.8.10 local-admin API hardening stays in place. Untrusted origins still get no CORS header, and admin and developer routes still require a console session or a signed-in account.
Core course analysis can run locally after setup with a Qwen model that fits the computer's memory and storage, without a paid cloud AI account. The default analysis model is unchanged.
26.9.1 shipped the local-API hardening and Qwen-first setup but carried three open gaps. 26.9.2 closes those gaps and adds the master login and the student-ready fixes.
26.8.10 closed the wildcard CORS hole from 26.8.9 and kept Study on WhatsApp live. Its fixes are carried into 26.9.2; update to 26.9.2 for the new master login and student-ready work.
Study on WhatsApp remains on for teachers, training providers, and learners. 26.9.2 stops parking that door on the download page without removing the channel — it is still a live way to study, it is simply not advertised there.