shroominic · Sep 18, 2026
@@ -10,6 +10,8 @@ expectations are defined in [docs/compatibility.md](docs/compatibility.md).
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-09-18
+
 ### Added
 
 - Add the `cgm_cbio` GS1 live driver and app surface: `FF30` discovery mapping,
@@ -76,6 +78,13 @@ expectations are defined in [docs/compatibility.md](docs/compatibility.md).
   and capture readiness. Reader loss publishes a closed retry state; reopening
   or retrying waits for a fresh native state instead of inventing readiness.
 
+### Security
+
+- GS1 vendor link material is no longer compiled into the package. The link
+  resolves it from an injected source, the platform registry omits the driver
+  when a build does not supply it, and a self-proving guard rejects the material
+  and clears the checked-out tree.
+
 ## [0.1.6] - 2026-08-31
 
 ### Added

@@ -0,0 +1,59 @@
+# OpenGlucose 0.4.0
+
+OpenGlucose 0.4.0 carries a second sensor family next to AiDEX/LinX, and it
+states plainly what that support is and is not.
+
+## What's new
+
+- SIBIONICS / CBio GS1 support. The app can match a GS1 sensor's `FF30`
+  advertisement, authenticate the vendor link, read live values, and ingest
+  stored history that resumes from where it stopped.
+- GS1 readings are provisional. Every value the app shows from a GS1 sensor is
+  `raw / 10` behind the marker `Provisional reading. Sensor raw / 10, scale
+  unverified.` No surface publishes a mg/dL or mmol/L value for this family, and
+  no reference measurement has confirmed the scale yet.
+- GS1 is offered only in a build that supplies the vendor link material. The
+  published `openglucose-0.4.0+29.apk` is built without it, so it registers
+  AiDEX/LinX and not GS1. See
+  [supported sensors](../supported-sensors.md) for the full matrix.
+- Discovery no longer reports an absent sensor for a scan that never ran.
+  Android pauses unfiltered Bluetooth scans while the display is off, so a
+  sleeping phone used to look exactly like a missing sensor. A declined pass is
+  now its own state with its own message, and the scan window holds the display
+  while it runs.
+- English and Simplified Chinese copy for the new sensor surfaces, following
+  the app's existing language selection.
+
+## Fixed
+
+- GS1 stored history finishes ingesting across a hole in the sensor's record
+  counter, and the stored-value range names both the covered window and the
+  positions that never arrived.
+- The GS1 record counter is shown as a position rather than a wall clock.
+- GS1 connection failures show plain sentences instead of internal codes, and
+  automatic reconnect stays bounded and never retries behind a refused
+  credential.
+- The GS1 reading field is now the sensor's payload word. The field this line
+  previously read is a firmware value that is zero in every capture, which made
+  an empty field look like a measured zero.
+
+## Not in this release
+
+- No verified GS1 unit. The `/10` scale stays an unverified engineering scale
+  behind the provisional marker until a reference measurement settles it.
+- No GS1 sensor support in the published artifact, which is built without
+  vendor link material.
+- No Libre 2 (Gen2 or Libre 3) or Yuwell Anytime 5P support in any published
+  build. Their private bench work stays in explicit debug capture builds.
+- No activation, reset, shelf-mode, threshold, calibration, or clear-storage
+  command on any family.
+
+## Download
+
+On Android, expand **Assets** and download `openglucose-0.4.0+29.apk`.
+
+OpenGlucose is wellness/reference software, not a medical device. Do not use it
+for diagnosis, medication or insulin dosing, treatment decisions, or emergency
+monitoring.
+
+App version: `0.4.0` (build `29`)