diff --git a/apps/rebreak-native/CHANGELOG.md b/apps/rebreak-native/CHANGELOG.md
index 04fcf31..97e32b7 100644
--- a/apps/rebreak-native/CHANGELOG.md
+++ b/apps/rebreak-native/CHANGELOG.md
@@ -10,6 +10,20 @@ Versioning: `version` follows SemVer, `versionCode` is monotonically increasing.
 
 ---
 
+## [0.3.6] — buildNumber 15 / versionCode 11 — 2026-05-25
+
+### Changed
+- **MDM-managed iPhones**: FC-Authorization-Toggle-UI wird bei MDM-verwalteten Geräten
+  ausgeblendet. Der Schutz läuft in diesem Fall vollständig via MDM-managed VPN-Layer —
+  kein manueller Toggle nötig oder sinnvoll.
+
+### Backend
+- **Layer-2 Country-Curated-Pivot**: Layer 2 ist jetzt ausschliesslich kuratiert (Rebreak-Admin).
+  Custom-Domains laufen nur noch über Layer 1 (VPN). Vollständige Entkopplung der beiden
+  Schichten; Travel-Detection via Cellular-MCC geplant.
+
+---
+
 ## [0.3.5] — buildNumber 14 / versionCode 11 — 2026-05-22
 
 ### Fixed
diff --git a/apps/rebreak-native/app.config.ts b/apps/rebreak-native/app.config.ts
index 3487c8a..dcaf26f 100644
--- a/apps/rebreak-native/app.config.ts
+++ b/apps/rebreak-native/app.config.ts
@@ -4,7 +4,7 @@ export default ({ config }: ConfigContext): ExpoConfig => ({
   ...config,
   name: "ReBreak",
   slug: "rebreak",
-  version: "0.3.5",
+  version: "0.3.6",
   orientation: "portrait",
   icon: "./assets/icon.png",
   scheme: "rebreak",
@@ -20,7 +20,7 @@ export default ({ config }: ConfigContext): ExpoConfig => ({
   ios: {
     supportsTablet: true,
     bundleIdentifier: "org.rebreak.app",
-    buildNumber: "14",
+    buildNumber: "15",
     // Apple Sign-In Entitlement — Pflicht für expo-apple-authentication nativen
     // signInAsync()-Flow. Ohne flag generiert Expo's prebuild den
     // com.apple.developer.applesignin-Entitlement nicht in die .entitlements.
diff --git a/apps/rebreak-native/package.json b/apps/rebreak-native/package.json
index 3e588f1..354b29b 100644
--- a/apps/rebreak-native/package.json
+++ b/apps/rebreak-native/package.json
@@ -1,6 +1,6 @@
 {
   "name": "rebreak-native",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "private": true,
   "main": "expo-router/entry",
   "scripts": {