Bump to 0.3.0 with the audit, brand and command-rename changelog

Phase 2 of the audit follow-ups, the Hellion Online Media brand
sweep and the rename of the slash commands all land in one release.
The slash command rename is breaking for users who had macros bound
to /chat2, /chat2Viewer or /clearlog2, which is the main reason
this is a 0.3.0 rather than a 0.2.1.

csproj, plugin manifest yaml, custom-repo repo.json (assembly
version, testing assembly version and the three download links)
and the README version banner are all moved over together so the
Dalamud plugin list, the manifest and the install instructions
agree. The README project status checklist is updated to reflect
that Phase 2 is closed; Phase 3 holds the remaining backlog
(MySQL backend, encryption, libnotify, etc).

The yaml and repo.json changelogs gain a 0.3.0 block that walks
through the four substantial groups of changes (slash command
rename, audit hardening, brand sweep, About tab) in plain prose.
The 0.2.0 block stays underneath in chronological order.

Build (Release) verified — ChatTwo/bin/Release/HellionChat/latest.zip
(~17.5 MB) and HellionChat.json regenerate cleanly with no warnings.
The tag itself is created by hand alongside the GitHub release.

ChatTwo/ChatTwo.csproj

@@ -4,7 +4,7 @@
              0.1.0 is our bootstrap release; the underlying Chat 2 base is
              called out in the yaml changelog so users can see what it
              derives from. -->
-        <Version>0.2.0</Version>
+        <Version>0.3.0</Version>
         <ImplicitUsings>enable</ImplicitUsings>
         <!-- HellionChat fork: assembly is renamed so Dalamud uses
              pluginConfigs/HellionChat instead of pluginConfigs/ChatTwo,

ChatTwo/HellionChat.yaml

@@ -40,6 +40,67 @@ tags:
   - Replacement
   - Privacy
 changelog: |-
+  **Hellion Chat 0.3.0 — Audit hardening, brand sweep and rebrand of slash commands**
+
+  This release closes the remaining audit follow-ups from the
+  0.2.0 cleanup and finishes turning Hellion Chat into a properly
+  branded fork rather than a Chat 2 with a different name.
+
+  Slash commands have been renamed across the board so they no
+  longer collide with the upstream plugin and tell you which
+  plugin owns them at a glance:
+
+  - /chat2          becomes /hellion
+  - /chat2Viewer    becomes /hellionView
+  - /clearlog2      becomes /clearhellion
+  - /chat2Debugger  becomes /hellionDebugger (internal)
+  - /chat2SeString  becomes /hellionSeString (internal)
+
+  This is a breaking change for anyone with macros bound to the
+  old command names. The upstream Chat 2 commands keep working
+  if you also have that plugin installed.
+
+  Privacy and storage hardening based on the post-0.2.0 audit:
+
+  - Privacy filter master switch now states explicitly that the
+    filter only governs storage, not the live chat log
+  - Emote cache refuses to write outside its own directory if a
+    third-party API ever returns a path that escapes
+  - Retention sweep is serialised so the 24h auto-sweep and the
+    manual button cannot launch in parallel and race for the
+    SQLite connection
+  - DbViewer paging uses an int constant and the matching SQL
+    parameter name (the upstream code passed a float and a name
+    without the parameter prefix; both worked in practice but
+    were inconsistent)
+
+  Visual identity now matches the Hellion Online Media website:
+
+  - Theme palette switched to Arctic Cyan plus Ember Orange,
+    matching the website's BRANDING.md tokens
+  - Active tabs and window title bars use a brand-color-dark teal
+    variation as identity colour, replacing the previous slate
+    violet that did not appear in the brand
+  - Resize grips and scrollbar grabs picked up Ember Orange
+    instead of industrial amber on hover and active states
+
+  About tab rewritten and properly localised:
+
+  - New "Why this fork exists" block sets out the mission in
+    neutral terms, framing Chat 2's full-history default as the
+    right one for most users while explaining the narrower
+    default footprint this fork chose
+  - All Hellion-specific About copy now lives in HellionStrings
+    in EN and DE, so German users see the Hellion sections in
+    German rather than the upstream English fallback
+  - Webinterface absence is described as a focus mismatch
+    (different use case, substantial rebuild) rather than as
+    a security issue with the upstream code
+  - Translator list at the bottom of the About tab is reachable
+    again on smaller settings windows
+
+  Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
   **Hellion Chat 0.2.0 — Webinterface removed**
 
   The upstream webinterface has been removed in its entirety. It

README.md

@@ -1,6 +1,6 @@
 # Hellion Chat
 
-**Version 0.2.0** — DSGVO-bewusste Erweiterung von [Chat 2](https://github.com/Infiziert90/ChatTwo) für FINAL FANTASY XIV / Dalamud.
+**Version 0.3.0** — DSGVO-bewusste Erweiterung von [Chat 2](https://github.com/Infiziert90/ChatTwo) für FINAL FANTASY XIV / Dalamud.
 
 Hellion Chat baut auf Chat 2 auf und ergänzt es um Datenschutz- und Daten-Handling-Kontrollen, die mit den Datenschutz-Regeln in der EU, den USA und Japan im Einklang sind. Alle Chat-2-Funktionen, Befehle und Tastenkürzel funktionieren unverändert. Eigenständiger Plugin-Slot, eigene Konfiguration, eigene Datenbank.
 
@@ -231,7 +231,7 @@ Konflikte in Upstream-Sprach-Ressourcen (`Language.<lang>.resx`) kommen häufig
 
 ## Projektstatus
 
-**Version 0.2.0** | Stand: Mai 2026
+**Version 0.3.0** | Stand: Mai 2026
 
 Alle Bootstrap-Phasen abgeschlossen:
 
@@ -244,11 +244,13 @@ Alle Bootstrap-Phasen abgeschlossen:
 - [x] About-Tab im Hellion-Branding mit License + Disclaimer
 - [x] AI-Disclosure dokumentiert (Pair-Klassifikation)
 - [x] Webinterface entfernt (Phase 1.5, Audit-Konsequenz aus 2026-05-02)
+- [x] Audit-Hardening Phase 2 (Path-Traversal, Retention-Race, DbViewer-Konsistenz, Privacy-Filter-Help-Text)
+- [x] Slash-Commands auf `/hellion`-Familie umbenannt
+- [x] Theme auf Hellion-Online-Media-Brand-Palette aligned (Arctic Cyan + Ember Orange)
+- [x] About-Tab vollständig lokalisiert (EN + DE) mit Mission-Statement und neutraler Tonart
 
-Phase 2 (offen, kein festes Datum):
+Phase 3 (offen, kein festes Datum):
 
-- [ ] EmoteCache Path-Traversal-Hardening (`Path.GetFullPath` + StartsWith-Check)
-- [ ] Race-Hardening für `RetentionLastRunAt` (CompareExchange / Lock)
 - [ ] MySQL/MariaDB-Backend mit Drei-Stufen-Bestätigung
 - [ ] PostgreSQL-Backend
 - [ ] Encryption für sensible Channels (AES-256, lokaler Key)