# iOS Hardening Notes

Phase 6 real-device validation is blocked on this machine until the Xcode license is accepted.

Current local blocker:

```text
You have not agreed to the Xcode license agreements. Please run 'sudo xcodebuild -license' from within a Terminal window to review and agree to the Xcode and Apple SDKs license.
```

Implemented hardening hooks:

- `SessionLifecycleCoordinator` suspends polling while the app is backgrounded.
- Account switches increment a session generation counter.
- Events are accepted only when both account id and generation match the active session, preventing stale events from a previous account from reaching view models.

Manual smoke still required after Xcode/TDLib device setup:

1. Auth with real Telegram credentials.
2. Load chats, open multiple chats, send/edit/delete/reply/forward/react.
3. Background and foreground during history load and media download.
4. Switch accounts rapidly while receiving updates.
5. Confirm no stale events from the previous account mutate the active account.