[ur1el0]

Summary

• Replace the unbounded image fallback with a streamed HTTPS downloader that caps response bytes and decoded dimensions, validates image responses, and rejects insecure redirects.
• Schedule verified SQLite snapshots with retention and an isolated backup container.
• Add a release workflow that verifies backend and iOS before publishing versioned GHCR images, and document digest-based rollback.
• Clarify that publisher-only licensed chapters open in Fable’s in-app browser.

Verification

• Backend suite: 66 passed in the rebuilt Python 3.11 container.
• Docker image build, Compose validation, packaged backup CLI, and a restricted backup-container smoke check passed.
• Native Xcode tests and Release build will run in macOS CI; this Fedora workspace has no Xcode toolchain.

Operator setup

The backup profile is opt-in. Configure FABLE_BACKUP_HOST_DIR to a durable off-host mount and provision it for the configured Fable UID/GID. Publisher-only chapter text remains hosted by the official publisher; the app does not scrape licensed content.