telegram-tui/docs/ios/hardening.md

iOS Hardening Notes

Phase 6 real-device validation is blocked on this machine until the Xcode license is accepted.

Current local blocker:

You have not agreed to the Xcode license agreements. Please run 'sudo xcodebuild -license' from within a Terminal window to review and agree to the Xcode and Apple SDKs license.

Implemented hardening hooks:

• SessionLifecycleCoordinator suspends polling while the app is backgrounded.
• Account switches increment a session generation counter.
• Events are accepted only when both account id and generation match the active session, preventing stale events from a previous account from reaching view models.

Manual smoke still required after Xcode/TDLib device setup:

1. Auth with real Telegram credentials.
2. Load chats, open multiple chats, send/edit/delete/reply/forward/react.
3. Background and foreground during history load and media download.
4. Switch accounts rapidly while receiving updates.
5. Confirm no stale events from the previous account mutate the active account.