Added1
An API key whose four-week human check is live can apply for the weekly free trial from the CLI (`nmts trial apply`).
Until now every application ran a fresh browser check, which a terminal cannot pass, so an agent's setup stopped at credits. The browser path is unchanged. Everything else about the trial — one grant per account per week, the weekly places, the surge hold — stays as it was.
Changed1
Every public page now carries its own title and one-line description, and the five account doors are in the sitemap.
Six screens and every per-version update page had no title, description, canonical address or language links of their own, so a search engine or a model reading them saw only the site's generic line. The sitemap grew from 17 public screens to 22. Nothing on the screens themselves changed.
Security1
A rebuilt file list now checks that each key opens its own file before keeping the pair.
When a device rebuilt its list from the server's rows, it took each wrapped key on trust, so a server that swapped two rows' keys could have had the wrong pairing written into the list and carried into the recovery list. Nothing false could be read, because a wrong key fails at the file's tag, but the pairing persisted. Now one 72-byte read of the first part, opened with the key, decides; a pair that does not open keeps its entry and loses its key, with the reason reported.