RishaVPN 0.3.1: adds Trojan/gRPC/TLS with h2 ALPN, serviceName, authority and multiMode.
RishaVPN 0.3.1 - Windows 10/11 x64

- Bundles pinned Xray 26.9.9 for VLESS TCP/REALITY (Vision), gRPC,
  WebSocket, XHTTP and Trojan TCP/TLS. Hysteria2 and TUN use sing-box 1.14.0.
- Imports all supported subscription profiles, including the Netherlands-2
  Trojan and TCP REALITY entries. No desktop-only gRPC header filter.
- Honors per-profile TLS fragmentation parameters; no global forced change.
- Checks actual HTTPS through a temporary SOCKS tunnel with the same engines
  and configuration builder as the live connection. No ICMP or port-only badge.
- Connected status requires verified HTTPS; periodic checks detect stalled traffic.
- Physical Wi-Fi/Ethernet binding prevents accidental testing through another VPN.
- Saves the subscription and cached profiles with Windows DPAPI, preserves
  the selected location, reports unsupported profiles and failed refreshes.
- Preserves the existing Windows device identity and account/device credentials.
- Cleans up both cores and temporary configurations; a Windows job ties core
  lifetime to the application. One application instance per Windows session.
- Adds a credential-free current-state diagnostic file and explicit core errors.

Administrator permission remains necessary for TUN. Installer does not launch
VPN; it blocks while this installation is running, preserves user settings and
allows unrelated VPN engine installations to keep running. Unsigned release.

Local tests cover profile parsing, physical/loopback routing, forced tunnel
health checks and live transfers on the owner's Windows/Wi-Fi. This is not a
claim that every carrier or location is reachable at all times.

All existing runtime license texts/notices are included unchanged under
licenses/ and THIRD-PARTY-NOTICES.txt. Their references to an unpublished
candidate describe the earlier audit, not the current download status.
Publication at the owner's explicit request does NOT resolve license gaps.
Collected third-party source inputs (INCOMPLETE):
https://risha.vip/static/downloads/0.1.0/RishaVPN-0.1.0-ThirdParty-Sources-INCOMPLETE.zip
Notices and residual-issues report:
https://risha.vip/static/downloads/0.1.0/RELEASE-NOTES.txt
https://risha.vip/static/downloads/0.1.0/THIRD-PARTY-NOTICES.txt

Unresolved: exact Chromium/NaiveProxy DEPS and generated linked-component
credits; Qt external inputs/options; WinLibs r4 patches/build provenance;
complete corresponding source including embedded assets/drivers outside Go
modules; application/brand/asset distribution rights confirmation. The
archive is not claimed to be complete corresponding source or evidence of
GPL/LGPL compliance. No written source offer or fulfillment promise is made.

Not tested in a clean Windows VM: install/upgrade/uninstall, UAC behavior,
Qt/GCC ABI compatibility, live VPN, DNS/IPv6 leaks. Static verification is
not a runtime or security guarantee. This is an experimental MVP.
