Blog moves between its pages without a reload (plan T11): openvibe-shared v2.2.0 boost swaps <main> styles-first with the shared transition, prefetching on intent, and does a normal load across a deploy (the ov-boost marker carries the release). The navbar's sign-in returns to the current page. The SSRF ratchet's lower bound follows the deleted sso.js. Both suites 25/25.

ddiff --git a/README.md b/README.md
iindex 4c76fdf..095d467 100644
---- a/README.md
++++ b/README.md
@@@ -244,7 +244,7 @@ Called elsewhere, as the service principal `blog`: `identity.subject.resolve` an
    `openvibe-sdk/db`; Valkey holds the per-actor limit counters (optional: without `VALKEY_URL` they count per process).
  - **Packages** (all pinned by release tarball): `openvibe-publishing` v1.0.0 (async PostgreSQL stores: revisions,
    schedule, taxonomy, citations, media, discussion, seo, authorship, index-hooks, ssr), `openvibe-contracts`
--  v0.79.0, `openvibe-shared` v2.0.0 (Frame, app icon, footer, legal, release, metrics, ready, theme presets),
++  v0.79.0, `openvibe-shared` v2.2.0 (Frame, app icon, footer, legal, release, metrics, ready, theme presets),
    `openvibe-sdk` v0.25.0 (sso, db, PostgreSQL events outbox, service tokens, per-actor limits, testing).
  - **OpenVibe.Network:**
    - SSO: the OAuth client `blog` is already seeded with redirect
ddiff --git a/STATUS.json b/STATUS.json
iindex 08e531b..fdaf61d 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -11,7 +11,7 @@
    "packages": [
      "openvibe-publishing v1.0.0",
      "openvibe-contracts v0.79.0",
--    "openvibe-shared v2.0.0",
++    "openvibe-shared v2.2.0",
      "openvibe-sdk v0.25.0"
    ],
    "capabilities": [
ddiff --git a/package-lock.json b/package-lock.json
iindex 3892d05..9c1812c 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -18,7 +18,7 @@
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.79.0",
          "openvibe-publishing": "https://codeload.github.com/OpenVibers/OpenVibe.Publishing/tar.gz/refs/tags/v1.0.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.25.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.0.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.2.0",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -1210,9 +1210,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "2.0.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.0.0",
--      "integrity": "sha512-n5CHC0hfxOo0jo/3kS4O3KiwhirhZDlx5zZTIuPyIf3Dq0yI/R6R64btx7NYwZe5dI0NjvqzEtnv19m8unwLMg==",
++      "version": "2.2.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.2.0",
++      "integrity": "sha512-1q+iUuUxzPeylTYmithW4jR++Jccvn5GEOrB1B3D18Dgn6OXQhPpvhPQAa1D1k1p+dWIa1/SmggyJwSGFnTNtw==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex ba6275e..99dc126 100644
---- a/package.json
++++ b/package.json
@@@ -30,7 +30,7 @@
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.79.0",
      "openvibe-publishing": "https://codeload.github.com/OpenVibers/OpenVibe.Publishing/tar.gz/refs/tags/v1.0.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.25.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.0.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.2.0",
      "pg": "^8.23.0"
    },
    "devDependencies": {
ddiff --git a/server/app.js b/server/app.js
iindex 547a1ff..e4b659a 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -94,6 +94,7 @@ async function createApp(opts = {}) {
      app.disable('x-powered-by');
      app.set('trust proxy', config.trustProxy);
      const release = require('openvibe-shared/release').createRelease({ service: 'blog', root: path.join(__dirname, '..') });
++    require('./render/layout').setRelease(release.release);
      const metrics = require('openvibe-shared/metrics').instrument(app, { service: 'blog', release: release.release });
      app.locals.metrics = metrics.registry;
      app.locals.ctx = ctx;
ddiff --git a/server/render/layout.js b/server/render/layout.js
iindex e891c5d..0fa7d0c 100644
---- a/server/render/layout.js
++++ b/server/render/layout.js
@@@ -32,6 +32,11 @@ function assetVersion(rel) {
  }
  const asset = (rel) => `/${rel}?v=${assetVersion(rel)}`;
  
++// The deployed release (app.js sets it from openvibe-shared/release): openvibe-shared/boost swaps a page in place only
++// between pages of the same release, and does a normal load across a deploy.
++let RELEASE = 'dev';
++function setRelease(id) { if (id) RELEASE = String(id); }
++
  /** Inline CSS custom properties for a theme preset (values come from openvibe-shared, escaped anyway). */
  function themeStyle(vars) {
      return Object.entries(vars || {})
@@@ -72,7 +77,7 @@ function renderPage(o) {
          history: { type: 'page', title: o.title || SITE_NAME },
          silentLogin: `${o.config.baseUrl}/auth/login?silent=1&next={url}`,
          sessionUrl: '/auth/me',
--        loginUrl: `/auth/login?next=${loginNext}`,
++        loginUrl: '/auth/login?next={path}',           // filled from the current page (boost moves between pages)
          logoutUrl: '/auth/logout?next={path}',   // Sign out in the shared navbar ends this site's session too
          notificationsRealtime: true,             // the bell hears new notifications over OpenVibe.Events (Shared 1.22.0)
      };
@@@ -95,6 +100,8 @@ ${appIcon.headTags({ site: 'blog' })}
  <script src="${ovServe.url('theme-loader.js')}" defer></script>
  <script src="${ovServe.url('navbar.js')}" defer></script>
  <script src="${ovServe.url('footer.js')}" defer></script>
++<meta name="ov-boost" content="blog@${esc(RELEASE)}">
++<script src="${ovServe.url('boost.js')}" data-main="#main" defer></script>
  </head>
  <body class="${esc(o.bodyClass || '')}">
  <a class="skip" href="#main">Skip to content</a>
@@@ -116,4 +123,4 @@ document.addEventListener('DOMContentLoaded', function () {
  </html>`;
  }
  
--module.exports = { renderPage, asset, assetVersion, themeStyle, SITE_NAME, NETWORK_URL };
++module.exports = { renderPage, asset, assetVersion, themeStyle, setRelease, SITE_NAME, NETWORK_URL };
ddiff --git a/test/security-ssrf.test.js b/test/security-ssrf.test.js
iindex 5e3272a..4157359 100644
---- a/test/security-ssrf.test.js
++++ b/test/security-ssrf.test.js
@@@ -79,7 +79,7 @@ const LONG = Array.from({ length: 100 }, (_, i) => `w${i}`).join(' ');
              }
          };
          walk(path.join(root, 'server'));
--        assert.ok(found.length >= 5, `the scan finds the known sites (${found.join(', ')})`);
++        assert.ok(found.length >= 4, `the scan finds the known sites (${found.join(', ')})`);
          assert.deepStrictEqual(found.filter((f) => !REVIEWED[f]).sort(), [], 'a new outbound request site: a user-chosen URL goes through openvibe-shared/egress; then add the file here with the reason');
      });