0.2.3: 重绘系列通用安装图标并记录功能审核决定（#413、#77/#408、#444、#407）

docs/history/0.2.3.md

@@ -215,6 +215,8 @@ English overflow; the corrected browser suite passes. Current behavior is in des
 
 ### 28.15 Cooperative card purchasing — PR #407
 
+维护者 2026-10-10 审核后同意保留。此前未获明确批准，本次审核追认仅适用于本节已有功能；以后新增功能必须先取得维护者明确同意。
+
 Adapted from @IceCodeNew. [ASSUMED] A tier V/VI shared-pool card matching another living teammate's active opening
 bond receives one 18-point buying-score penalty. It is a soft preference, not reserved stock; normal/elite and DIY
 stock semantics remain unchanged. Humans and bots receive the same cooperation. This does not add persona presets.
@@ -225,6 +227,8 @@ measurement of the purchasing heuristic. Current rule: design/match.md §6.6 and
 
 ### 28.16 AI teammate emotes — PR #444
 
+维护者 2026-10-10 审核后同意保留。此前未获明确批准，本次审核追认仅适用于本节已有功能；以后新增功能必须先取得维护者明确同意。
+
 Event wiring from @DDDarkstar, with corrected dispatch semantics. [ASSUMED] Cosmetic reactions are enabled only in
 mixed human/AI matches, under the existing emote whitelist and cooldown; `SP_BOT_EMOTES=0` disables all hooks.
 Responses skip cooling bots and stop after one reply. MVP uses this round's kills and damage, with stable order for
@@ -265,20 +269,30 @@ a real phone-sized browser changes the control, reloads and resets it. Current c
 
 ### 28.19 Browser installation — PR #413
 
+维护者 2026-10-10 审核后同意保留。此前未获明确批准，本次审核追认仅适用于本节已有功能；以后新增功能必须先取得维护者明确同意。
+
 Based on @Cromemadnd's proposal, with a one-use install controller. Buttons appear only after a browser install offer;
 standalone/fullscreen and installed sessions hide them. Accept, dismiss, failure and duplicate clicks all consume the
 same offer once. See [the prompt API](https://developer.mozilla.org/en-US/docs/Web/API/BeforeInstallPromptEvent/prompt)
 and [installability requirements](https://developer.mozilla.org/en-US/docs/Web/Progressive_web_apps/Guides/Making_PWAs_installable).
-The existing original fortress favicon supplies correctly sized 192/512 px icons, shipped outside optional game art.
+The 2026-10-10 icon revision replaces the previous mint rook with an original, season-independent fortress / shield
+and defended square. Its neutral grey palette and geometry use no official logos, artwork, icons or fonts and no
+Alliance lettering or seasonal insignia. `public/icons/app.svg` is the master; `tools/export-app-icons.py` exports
+192/512 px `any` and separate opaque `maskable` PNGs (the mark stays inside the central 40%-radius safe circle),
+16/32/48 px PNG / ICO favicons and a 180 px Apple touch icon. All ship outside optional game art, including lite
+packages. See ASSETS.md for the source, reproduction command and originality statement.
 No service worker or offline cache is installed; the server is still required.
 The lobby keeps Settings immediately before How to Play even when the optional install/recovery buttons appear;
 the full browser run caught and corrected an initial insertion between that established pair.
 The settings-entry check tests the absent board-style/background-music option labels, allowing the text-size help
 to explain that the board keeps its scale.
 
-Tests: offer lifecycle/disposal, actual PNG dimensions, real Chrome manifest and installability checks, and a synthetic
+Tests: offer lifecycle/disposal, decoded PNG dimensions / opacity / maskable safe zone, favicon references and packaging inclusion.
+The initial feature also had real Chrome manifest and installability checks, and a synthetic
 dismissed offer through the actual button. Initial incognito rejection was a test-environment limitation; the real
 installability check runs in Chrome's ordinary temporary profile. Native OS installation itself is not performed.
+The icon revision is verified offline; browser / OS validation of these replacement assets is deferred to the follow-up
+review environment (this sandbox cannot listen on a port).
 
 ### 28.20 Recover a closed local match window — #431
 
@@ -294,6 +308,8 @@ the match tab. The existing identity/static suite also passes. Current contract:
 
 ### 28.21 Unanimous opening reroll — #77 / PR #408
 
+维护者 2026-10-10 审核后同意保留。此前未获明确批准，本次审核追认仅适用于本节已有功能；以后新增功能必须先取得维护者明确同意。
+
 Adapted from @Siornya, excluding the unrelated result-screen redesign. [ASSUMED] This remake feature is host-proposed,
 requires every connected human's consent, and pauses confirmation while voting. Bots/spectators do not vote; autoplay
 humans still do. Single-human matches refresh immediately. Refusal, cancellation, disconnect or leave restores the