Accounts and sign-in 0.18.0
- The account service's disk is backed up every hour instead of daily, each backup still kept for 7 days, and the deletion page says so. A snapshot made by hand before a release now expires after 7 days as well, if a newer backup exists. `deploy.sh backups` sets this up without touching the machine, the machine's account may read the project's disk and snapshot settings for the health panel, and the Terms and Privacy versions move to 2026-10-30.
- On the open network, a long post's link to the whole post on Pages keeps the underscore its address can end in, where it lost that last character and opened no post (about one long post in 64).
- The CRM's Home and its activity reports take far less time and memory on a full CRM, so other people's requests wait less for them.
- The CRM's statements, and the service's start-up, no longer depend on what only SQLite understands. Nothing changes on SQLite, which is what the service runs on.
- A copy of the service's databases outside Google, sealed to a key the service does not hold (`offsite_copy`): off until its settings are set; the Privacy Notice of 2026-10-30 covers it.
- `POST /identity/native/operator/health`, for the app's Service health panel: the store, the disk, memory, each route's calls and slowest time, the disk's snapshots and the copy outside Google, for those who review apps alone.
- `deploy.sh update` puts the hourly schedule on before taking the daily one off and deletes hand-made snapshots past 7 days. The daily policy stays defined until its last snapshots expire.