diff --git a/package-lock.json b/package-lock.json
index 1cb7e3a..35f06d7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.69",
+  "version": "1.7.70",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.69",
+      "version": "1.7.70",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index 6394900..9b6b720 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.69",
+  "version": "1.7.70",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index 7f4617b..0eb168f 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,17 @@
+🛡️ Amber is quieter and safer
+- Encrypted-message inboxes no longer auto-decrypt on arrival for Amber users.
+  Messages now show a deliberate “Unlock messages” card; opening Messages itself
+  does not fire a decrypt storm. The gate is Amber-only; silent signers keep the
+  automatic inbox.
+- Amber redirect operations now expire after 10 minutes; stale callbacks are
+  rejected and cleared, so an old request cannot be replayed later.
+- Redirect encryption operations no longer persist plaintext in localStorage,
+  sessionStorage or IndexedDB. Crypto results are no longer left in browser
+  storage.
+- Added regression tests for stale Amber callback handling.
+
+---
+
 🎯 Quiet status control
 - The desktop header no longer shows a large green outlined “Status” pill with a
   permanent ping. It now shows a compact chip with your current status emoji and