# ArchForge External Status 1.0.6

- Fixed admin login compatibility with privacy-preserving browsers using same-origin Fetch Metadata, without disabling CSRF, TOTP, Secure cookies, or cross-site request restrictions.
- Added running application version to public `/healthz` to prove deployments are active.
- Added Git-based `repair-admin-login.sh`, preserving installed configuration and database, verifying the deployed version and login CSRF behaviour without real credentials.
- Added security and origin tests for privacy headers, cross-site requests, and invalid CSRF tokens.
- Existing Debian 13, Caddy, SQLite and Git install/update flows remain unchanged.