[oratis]

Apple rejected Lisa Pocket 1.2 (1790567703) on October 5 because consumable-credit restore invoked Apple authentication and AI data sharing was insufficiently clear. Replace AppStore.sync with an authenticated LISA ledger refresh, and present explicit AI permission from an immutable sheet payload with separate sharing and age confirmations. The new binary also includes already-merged account-lifecycle fixes absent from the rejected build.

Rewrite both READMEs around actual personal-assistant entry points, separating v0.27.1, current main, open PA PRs and planned capabilities. Record the authenticated rejection and product/code review in docs/REVIEW_2026-10-07.md. Update four vulnerable production dependencies within existing compatible ranges after the baseline failed CI audit.

Validation:

• 73 XCTest cases pass on iPhone 17/iOS 26.3, iPad Air M2/iOS 18.2 and iPad Air M3/iOS 26.3.
• Native cloud review-account walkthrough: named Gemini recipients, cancellation preserves draft, both confirmations required, actual AI reply, consent withdrawal, and server balance refresh ($20.00) without Apple authentication.
• Backend: 2521 passed, 1 skipped, 0 failed; typechecks, API contract, build, format and Markdown checks pass. Lint: 0 errors / 70 existing warnings. Production npm audit: 0 vulnerabilities.
• Final CI 37570811764 passes Node 22/24, coverage, E2E, iOS and audit; docs passes. Unchanged Mac/website jobs are skipped.
• Signed upload 37570589103 succeeded: 1.2 (1791346539). Apple processed it and the version page selects it. Native sources match this PR; the subsequent lockfile update only affects the backend.

Real StoreKit sandbox settlement, interactive Apple/Google OAuth and Apple revocation-key setup remain separate unverified gates. No App Store approval or production backend deployment is claimed.