docs: correct Studio .11 profile validation evidence

FORK-CHANGELOG.md

@@ -90,10 +90,24 @@ For the dated review of newer upstream changes, see
   startup; a second click received "already running". Retrying later recorded
   and exported MP4. `.11` blocks overlapping start requests and
   shows a localized "Starting…" spinner while waiting for the native helper.
-  The clean `.11` Windows package passed CI and was installed on the owner's PC
-  after a verified `.10` backup. The owner confirmed a successful test recording,
-  MP4 export and an installed-app "up to date" check. A real future-version
-  updater download/install remains unverified. This `.11` release is Windows-only.
+  The clean `.11` Windows package passed CI and was installed on the owner's PC.
+  The owner confirmed a successful test recording, MP4 export and an installed-app
+  "up to date" check. A real future-version updater download/install remains
+  unverified. This `.11` release is Windows-only.
+
+### Validation correction · 2026-09-28
+
+The pre-`.11` copy of 2,868 profile files was mistakenly taken from an older
+`openscreen` profile. It was **not** a backup of Studio's active
+`openscreen-subscription` profile. The claim that six active project/recording/
+AI-config files remained hash-identical across the `.11` upgrade is withdrawn.
+The `.10` installed directory and rollback installer were backed up, but no
+immediately pre-`.11` active-profile snapshot exists. A verified pre-`.10`
+active-profile backup is retained: all 19 checked critical files are still
+present, 18 have unchanged hashes and one now differs (timing and cause unknown). The
+post-`.11` active profile has seven projects; a new backup matches 5,628 relative
+file paths and sizes and 29 critical file hashes. This does not prove no file
+changed during the `.11` upgrade. The public release notes carry this correction.
 
 ## 1.10.0-subscription.7 — 2026-09-27
 

docs/purpleprint-studio-identity.md

@@ -55,7 +55,7 @@ separate workstream.
 | Profile continuity | Installed OpenScreen Subscription `.7` created an isolated-profile project with synthetic H.264 media. Studio `.8` reopened its clip, light theme and preferences, then exported a decodable MP4. On the owner's live profile, three project documents and the AI configuration were hash-identical to the verified pre-install backup. The installed `.8` binary separately loaded copies of all three real project documents and opened the editor without outputting their contents; private footage was not exported. |
 | Windows native capture | Packaged WGC recorded a generated QA window with microphone, system audio and camera disabled. The saved project reopened and exported a decodable MP4. Control was automated below the OS hit-test. Installed `.8` and `.9` were also recorded by the owner with a physical mouse; `.9` exported MP4 successfully. On installed `.10`, the owner reported that the first attempt showed "already running" after clicking Record again while the native helper had not acknowledged startup; retrying recorded and exported MP4. `.11` blocks this overlap and shows "Starting…" while the helper starts. The owner reported a successful `.11` test recording and MP4 export; visibility of the brief starting label was not separately confirmed. |
 | Silent-recording transcription | The `.8` recording contained video but no audio stream. Automatic transcription showed "Failed to fetch" because its WASM URL resolved outside packaged `dist/wasm`. Installed `.9` corrected the URL: another video-only recording produced no error toast, and its saved asset carries the expected `no-audio` verdict. |
-| Installation upgrade | Owner-approved `.8` NSIS upgrade reused the per-user uninstall registration and created a product-named child folder under the previous custom root. Subsequent `.9`, `.10` and `.11` upgrades reused that exact folder. Before `.11`, 2,868 profile files, 188 installed files and a `.10` rollback installer were backed up and verified; six critical project/recording/AI-config hashes remained unchanged after upgrade. `.10` fixed release discovery for the fork's `subscription` prereleases; the installed `.11` manual update check reports "up to date". A real future-version updater download/install remains unverified. |
+| Installation upgrade | Owner-approved `.8` NSIS upgrade reused the per-user uninstall registration and created a product-named child folder under the previous custom root. Subsequent `.9`, `.10` and `.11` upgrades reused that exact folder. Before `.11`, the `.10` installed directory and rollback installer were verified, but the copied profile was the obsolete `openscreen` directory rather than Studio's active `openscreen-subscription` profile. The pre-`.11` active-profile hash-continuity claim is withdrawn. All 19 checked critical files from the earlier verified pre-`.10` active-profile backup remain present (18 hash-identical; one now differs, with timing and cause unknown). A post-`.11` backup verified 5,628 active-profile files and 29 critical hashes. `.10` fixed release discovery for the fork's `subscription` prereleases; installed `.11` reports "up to date". A real future-version updater download/install remains unverified. |
 | macOS | [CI run 36358715037](https://github.com/PurplePrintAI/openscreen-subscription/actions/runs/36358715037) built `.9` Apple Silicon and Intel DMGs from commit `f81a8b9d`. Both passed bundle ID, architecture, native payload, ad-hoc signature structure, CLI boot and mounted-DMG checks; downloaded SHA-256 values matched the workflow report. Real Mac recording/edit/export, Developer ID signing and notarization remain unverified. |
 
 The source selector failed to list the QA window on the first automated attempt