# iOS Hardening Notes

Phase 6 real-device validation is blocked on this machine until full Xcode is selected.

Current local blocker:

```text
xcode-select: error: tool 'xcodebuild' requires Xcode, but active developer directory '/Library/Developer/CommandLineTools' is a command line tools instance
```

Implemented hardening hooks:

- `SessionLifecycleCoordinator` suspends polling while the app is backgrounded.
- Account switches increment a session generation counter.
- Events are accepted only when both account id and generation match the active session, preventing stale events from a previous account from reaching view models.

Manual smoke still required after Xcode/TDLib device setup:

1. Auth with real Telegram credentials.
2. Load chats, open multiple chats, send/edit/delete/reply/forward/react.
3. Background and foreground during history load and media download.
4. Switch accounts rapidly while receiving updates.
5. Confirm no stale events from the previous account mutate the active account.