{
  "$purpose": "The canonical, machine-readable record of Proofpane's distributed and released builds, plus separately labelled verified CI artifacts: component, version, build date, distribution channel, per-platform sha256, and source commit where stamped. If you are cross-checking a release claim — human or AI — this file is the authority. GitHub release pages exist only for the components and versions listed here with a release_url; joining any other surfaces to infer a release history will produce artifacts that do not exist (it has happened: an external audit synthesized a 'v1.5.19 release page dated 23 July' by joining this site's daemon claim to an unrelated tray release page).",
  "$maintenance": "Appended by the daemon-release CI on every release; guarded by backend/tests/test_release_index.py, which fails the build when the distributed binaries, the source version constants, and this record disagree. Entries marked record:reconstructed were backfilled from git history on 2026-08-03 and carry only what the history supports. Entries marked record:verified-after-publication were added after the event from an identified artifact that was downloaded and interrogated directly; they are evidence-backed but were not written by the publishing transaction itself.",
  "updated": "2026-08-10",
  "signing_summary": {
    "$read_this_first": "Signing status is PER PLATFORM. macOS is signed and notarized; Windows is unsigned; Linux carries digests only. These are three separate rows: a summary that says 'Proofpane binaries are unsigned' has generalized the Windows row to macOS, where it is false. Every statement here is derived from the per-release entries below and is checkable from the artifacts themselves.",
    "macos": {
      "signed": true,
      "notarized": true,
      "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG) for apps and disk images; Developer ID Installer: PROOFPANE LIMITED (B94QM75QNG) for installer packages. These are two distinct Apple certificates issued to the same company; a package cannot be signed with the Application certificate.",
      "covers": "Every macOS artifact currently distributed: daemon 1.5.24 (darwin-arm64 + darwin-x86_64), the public Tray 0.3.9 universal DMG, and the public Tray 0.3.9 installer package (.pkg, signed with the Developer ID Installer certificate for MDM deployment). The verified desktop CI build is signed, notarized and stapled as well; it is labelled a CI build for distribution reasons, not signing ones.",
      "stapled": "DMG artifacts are stapled. The bare daemon executable cannot be — Apple defines stapling for .app/.dmg/.pkg — so macOS resolves its notarization ticket online during assessment. 'stapled: false' below is a packaging property, NOT a missing signature.",
      "verify_yourself": "codesign -dv --verbose=4 <path> names the signer; spctl -a -vvv answers 'accepted / source=Notarized Developer ID'; xcrun stapler validate applies to the DMG.",
      "certificates": {
        "$why_recorded": "A signing certificate constrains only FUTURE signing: a timestamped signature stays verifiable after its certificate expires, which is why nothing already published is affected by the dates below. These are recorded so backend/tests/test_signing_certificate_expiry.py can fail the build BEFORE a release runs into an expired certificate, rather than discovering it at signing time. Each date was read from the certificate itself: the Application leaf was extracted from the distributed daemon's signature (codesign -d --extract-certificates), the Installer leaf from the published Tray package's chain.",
        "developer_id_application": {
          "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
          "signs": "app bundles, disk images, bare executables",
          "issuer_sub_ca": "G2",
          "expires": "2031-08-07"
        },
        "developer_id_installer": {
          "identity": "Developer ID Installer: PROOFPANE LIMITED (B94QM75QNG)",
          "signs": "installer packages (.pkg)",
          "issuer_sub_ca": "G1",
          "expires": "2027-02-01",
          "note": "Apple caps a leaf certificate at its issuer's expiry, and this one was issued under the ORIGINAL Developer ID Certification Authority, which expires 2027-02-01 22:12:15 UTC -- the leaf carries that instant exactly. Re-issuing under the G2 Sub-CA (as the Application certificate already is) yields the usual ~5 years. Re-issue before this date; do NOT revoke the old certificate, because revocation is retroactive and would invalidate packages already published under it."
        }
      }
    },
    "windows": {
      "signed": false,
      "reason": "Authenticode requires a separate certificate that has not been purchased, so SmartScreen warns on first run.",
      "integrity_reference": "published sha256 per artifact"
    },
    "linux": {
      "signed": false,
      "reason": "No platform code-signing claim is made for Linux.",
      "integrity_reference": "published sha256 per artifact"
    }
  },
  "policy": {
    "immutability": "A version names exactly one build. The release pipeline refuses an existing tag and cannot replace published assets. One violation predates this policy and is recorded below rather than erased: daemon 1.5.19 was distributed as two different builds (2026-07-23 and 2026-08-02) under the same version.",
    "build_identity": "From daemon 1.5.20 the release workflow stamps the source commit into the binary (BUILD_COMMIT); `airgov_daemon check-update` prints it. A version says which release; the commit says which bytes.",
    "signing": "Signing is platform-specific and recorded per release. The current distributed macOS daemon v1.5.24 is signed on both architectures with Developer ID Application: PROOFPANE LIMITED (B94QM75QNG) and notarized by Apple. Its bare executable cannot be stapled, so macOS resolves the ticket online during assessment; the protected installer performs that assessment before installation. Proofpane Tray v0.3.9 is an anonymously downloadable public release carrying two signed macOS artifacts: its universal macOS DMG is Developer ID Application-signed, and its installer package (.pkg, for MDM deployment) is Developer ID Installer-signed; both are Apple-notarized and stapled. A signed/notarized desktop CI build has also been verified, but no post-certificate desktop app release has anonymous public distribution recorded here. Windows releases are not Authenticode-signed. Linux has no platform-signing claim; published sha256 digests are the integrity reference. Enterprise re-signing remains optional."
  },
  "components": {
    "daemon": {
      "version_source": "SERVER_VERSION in daemon/mcp_server.py",
      "channels": [
        "https://app.proofpane.com/daemon/ (fresh install)",
        "auto-update via /api/v1/daemon/latest-version (version + sha256)",
        "GitHub releases tagged daemon-v* (only where release_url is listed)"
      ],
      "releases": [
        {
          "version": "1.5.24",
          "build_date": "2026-08-10",
          "status": "distributed",
          "visibility": "private",
          "public_distribution": false,
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/daemon-v1.5.24",
          "source_commit": "58974fb34aa6",
          "sha256": {
            "darwin-arm64": "6ae351387fe6c450b0ede6d858a7b5d81be0c19a4e221c7259aa88e47262e48f",
            "darwin-x86_64": "a2dc705d51ea69f01d06a95d528c15e88389fba84fbea7791d7ca5d56994b93b",
            "linux-aarch64": "2d5e8aa5a8d658eec4718ecbc8d433013f58de03e81fb7ecc872ffe5f6d82eee",
            "linux-x86_64": "36e02498f21b4f65f8235a54546c1b5eb1ee69667a1c97fd3407ff8dfea45dae",
            "windows-amd64": "0cbf4b61d55d78e52c2bb292e76524d86d9a32340ea911837e39c72f9cb53a1f"
          },
          "signing": {
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": false,
            "stapled_note": "A bare executable cannot carry a stapled ticket; Apple's assessment resolves the notarization ticket online when it runs.",
            "verified_how": "After assembly, Apple's codesign verified the exact PROOFPANE LIMITED identity and team B94QM75QNG; Gatekeeper reported accepted / source=Notarized Developer ID.",
            "platforms": {
              "darwin-arm64": {
                "status": "developer-id-signed-and-apple-notarized",
                "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
                "team_id": "B94QM75QNG",
                "notarized": true,
                "stapled": false,
                "stapled_note": "A bare executable cannot carry a stapled ticket; Apple's assessment resolves the notarization ticket online when it runs.",
                "verified_how": "After assembly, Apple's codesign verified the exact PROOFPANE LIMITED identity and team B94QM75QNG; Gatekeeper reported accepted / source=Notarized Developer ID."
              },
              "darwin-x86_64": {
                "status": "developer-id-signed-and-apple-notarized",
                "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
                "team_id": "B94QM75QNG",
                "notarized": true,
                "stapled": false,
                "stapled_note": "A bare executable cannot carry a stapled ticket; Apple's assessment resolves the notarization ticket online when it runs.",
                "verified_how": "After assembly, Apple's codesign verified the exact PROOFPANE LIMITED identity and team B94QM75QNG; Gatekeeper reported accepted / source=Notarized Developer ID."
              },
              "linux-aarch64": {
                "status": "sha256-only",
                "platform_signing_claim": false,
                "integrity": "sha256",
                "note": "No platform code-signing claim; the published SHA-256 digest is the integrity reference."
              },
              "linux-x86_64": {
                "status": "sha256-only",
                "platform_signing_claim": false,
                "integrity": "sha256",
                "note": "No platform code-signing claim; the published SHA-256 digest is the integrity reference."
              },
              "windows-amd64": {
                "status": "unsigned",
                "authenticode_signed": false,
                "integrity": "sha256",
                "note": "No Authenticode certificate; the published SHA-256 digest is the integrity reference."
              }
            }
          },
          "record": "contemporaneous"
        },
        {
          "version": "1.5.23",
          "build_date": "2026-08-10",
          "status": "superseded",
          "visibility": "private",
          "public_distribution": false,
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/daemon-v1.5.23",
          "source_commit": "74367da78296",
          "sha256": {
            "darwin-arm64": "dcfa1eca192123be7a03a570e202105f0149552d197fee37ba9e51d4170d9e8a",
            "darwin-x86_64": "05d624edb32ec0cf6f33195b1f7d8bca99cbd2d4775f2213b30036d02baa4482",
            "linux-aarch64": "24c431df4fd0c632561c8badfc046543f9676a969a3ec090259e122728bbda53",
            "linux-x86_64": "8869aa01cb46518e80ea5884ad0ba691b5a18d3283a363baf18c7ce0ec5765f2",
            "windows-amd64": "8ca856470c3746e10b343efbd95aee7bdea85056ee0de567a331e12098779227"
          },
          "signing": {
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": false,
            "stapled_note": "A bare executable cannot carry a stapled ticket; Apple's assessment resolves the notarization ticket online when it runs.",
            "verified_how": "After assembly, Apple's codesign verified the exact PROOFPANE LIMITED identity and team B94QM75QNG; Gatekeeper reported accepted / source=Notarized Developer ID.",
            "platforms": {
              "darwin-arm64": {
                "status": "developer-id-signed-and-apple-notarized",
                "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
                "team_id": "B94QM75QNG",
                "notarized": true,
                "stapled": false,
                "stapled_note": "A bare executable cannot carry a stapled ticket; Apple's assessment resolves the notarization ticket online when it runs.",
                "verified_how": "After assembly, Apple's codesign verified the exact PROOFPANE LIMITED identity and team B94QM75QNG; Gatekeeper reported accepted / source=Notarized Developer ID."
              },
              "darwin-x86_64": {
                "status": "developer-id-signed-and-apple-notarized",
                "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
                "team_id": "B94QM75QNG",
                "notarized": true,
                "stapled": false,
                "stapled_note": "A bare executable cannot carry a stapled ticket; Apple's assessment resolves the notarization ticket online when it runs.",
                "verified_how": "After assembly, Apple's codesign verified the exact PROOFPANE LIMITED identity and team B94QM75QNG; Gatekeeper reported accepted / source=Notarized Developer ID."
              },
              "linux-aarch64": {
                "status": "sha256-only",
                "platform_signing_claim": false,
                "integrity": "sha256",
                "note": "No platform code-signing claim; the published SHA-256 digest is the integrity reference."
              },
              "linux-x86_64": {
                "status": "sha256-only",
                "platform_signing_claim": false,
                "integrity": "sha256",
                "note": "No platform code-signing claim; the published SHA-256 digest is the integrity reference."
              },
              "windows-amd64": {
                "status": "unsigned",
                "authenticode_signed": false,
                "integrity": "sha256",
                "note": "No Authenticode certificate; the published SHA-256 digest is the integrity reference."
              }
            }
          },
          "record": "contemporaneous"
        },
        {
          "version": "1.5.22",
          "build_date": "2026-08-07",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/daemon-v1.5.22",
          "source_commit": "363d11e0d6a9",
          "sha256": {
            "darwin-arm64": "1e004373aefb5801d02544eb4ebe10665dc6401d001c3bd8aa383c1392774f4f",
            "linux-aarch64": "dbbb52e669a8e58b233bfa7b38a6403da72cb2c8bb48335897fe77a98865e913",
            "linux-x86_64": "e5ac5296c72b381be5e9618040aa0143acdd0f16d7d2c1b85955049b5c65a8c6",
            "windows-amd64": "a3aa25f31f98b7100d13af541338e4df40d2e642204916516949c73b6408dda8",
            "darwin-x86_64": "856c07d0f33c455fbd29424799ac5683d2c2a43751469c18867b17a495575376"
          },
          "record": "contemporaneous",
          "signing": {
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": false,
            "stapled_note": "A bare executable cannot carry a stapled ticket; macOS resolves the notarization ticket online during assessment, and the protected installer performs that assessment before installation.",
            "verified_how": "After assembly, each macOS binary was checked directly: Apple's codesign reported the exact PROOFPANE LIMITED identity and team B94QM75QNG, and spctl reported accepted / source=Notarized Developer ID. This verdict was taken from the artifacts, not inferred from the build log."
          }
        },
        {
          "version": "1.5.21",
          "build_date": "2026-08-07",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/daemon-v1.5.21",
          "source_commit": "fd890d2b68d1",
          "sha256": {
            "darwin-arm64": "504ac18f2b9ef7380d8544f9cdd6f8209759c2cb488136651bd2b475dba3fbbf",
            "linux-aarch64": "95f4a883c5067a4ee49dc77998cd5fe7069496e0129f86fbead16269c522b71d",
            "linux-x86_64": "9d055a0e2a70a14bcd3fcfb3b9733c7ba5442aee07d5ab3f9deb3043dbd57f8c",
            "windows-amd64": "c89f276ee8a61de5be28e256f0f1fd20928e09f3d8b9ca9808346da2e1ec6bd8",
            "darwin-x86_64": "8e3c613af38b4096cb85ca52a0a4b49bfccfc4232cba5780a7b7f79c7fb6e65a"
          },
          "record": "contemporaneous",
          "signing": {
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": false,
            "stapled_note": "A bare executable cannot carry a stapled ticket - stapling is defined for .app/.dmg/.pkg only - so macOS resolves the notarization ticket online during assessment; the protected installer performs that assessment before installation.",
            "verified_how": "After assembly, each macOS binary was checked directly: Apple's codesign reported the exact PROOFPANE LIMITED identity and team B94QM75QNG, and spctl reported accepted / source=Notarized Developer ID. This verdict was taken from the artifacts, not inferred from the build log."
          }
        },
        {
          "version": "1.5.20",
          "build_date": "2026-08-03",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/daemon-v1.5.20",
          "source_commit": "981b8ee15436",
          "sha256": {
            "darwin-arm64": "b366fa1b1c1f9f83bd1be6be88a71be7729222837229e861dc2f81335acd9a7a",
            "linux-aarch64": "c6e2292d87b2eff4ee1d7cb77498861a0dd8ebff5b86c4965735e73e1b6d2cb4",
            "linux-x86_64": "b1d5b21aa0e68324e76680638ff90aa4f926db9c6e0626bbe1a9f5e250985fde",
            "windows-amd64": "d05facdf091941c9653bcac24189ba0a477728cc04a87ff3a384f5b9f5ff17b2",
            "darwin-x86_64": "c986b37ac7a4df9a322efe35a56f451cc3854245b9e86696f27cba10f3f34431"
          },
          "record": "contemporaneous"
        },
        {
          "version": "1.5.19",
          "build_date": "2026-08-02",
          "status": "superseded",
          "source": "CI build of 2026-07-28 carrying the Claude Code hook packaging fixes; exact commit not stamped into the binary — that gap is what BUILD_COMMIT closes from 1.5.20",
          "sha256": {
            "darwin-arm64": "3985f1d6b54abc8f2ef40f35c8980dcf8f1144de386fbc99a4510610e496ea6a",
            "darwin-x86_64": "f407be7721c71f172612e448b98a973cda14ed64bd074b880ac9fe98400a021f",
            "linux-aarch64": "a96b15434a5fa2c3307820f04e68efac9bde7e9c9a179bd4bc228d1de08bd6fa",
            "linux-x86_64": "73d66a597ad954e08ac648e5e83eba1ebb9d901cbbc2d78397e745d4f0d5f06c",
            "windows-amd64": "bdf84fa2c924e438ae790f4f1c79dcb91ab81a410cc29e5114386dffb0f91b37"
          },
          "note": "Replaced the 2026-07-23 binaries UNDER THE SAME VERSION — the immutability violation named in policy. windows-x86_64.exe is a filename alias of windows-amd64 (identical bytes).",
          "record": "contemporaneous"
        },
        {
          "version": "1.5.19",
          "build_date": "2026-07-23",
          "status": "superseded-in-place",
          "release_url": "https://github.com/Proofpane/releases/releases/tag/daemon-v1.5.19",
          "sha256": {
            "darwin-arm64": "603e5837f66d10113b8ba8dcee58c795a94dfb53a577395b60a44908db54039c",
            "darwin-x86_64": "a6c2c3d195d07c94669754a3588b71fdf0ce2b790d2ab51a03261f90cbf4bf4d",
            "linux-aarch64": "1d5477025c36c7d98f0b850cb01b22d7c179926d6050c3ba6be3d2c05189ecca",
            "linux-x86_64": "d54185b7176e566f60160edc818d41511bfe0f460ec0e0a04f6ed997d8f754a1",
            "windows-x86_64": "26389ec8893b451291c503ae3b80cbc37b068dae990cea42d3ebf9841fe58ec8"
          },
          "note": "The original 2026-07-23 build under this version remains preserved with all five assets and sidecars on the public Proofpane/releases page. These binaries predate the packaging fixes, so the Claude Code hook gate was absent, not failing. They are different bytes from the 2026-08-02 rebuild recorded above under the same version; the public URL identifies this original build only.",
          "record": "reconstructed"
        },
        {
          "version": "1.5.18",
          "build_date": "2026-07-23",
          "status": "superseded",
          "note": "Referenced by the tray-v0.1.3 release notes ('release: tray v0.1.3 + daemon v1.5.18').",
          "record": "reconstructed"
        },
        {
          "version": "1.5.11",
          "build_date": "2026-06-22",
          "status": "superseded",
          "note": "First release built for all five platforms; added per-turn session/turn identifiers to MCP audit rows.",
          "record": "reconstructed"
        },
        {
          "version": "1.5.0",
          "build_date": "2026-06-10",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/daemon-v1.5.0",
          "record": "reconstructed"
        },
        {
          "version": "0.1.0",
          "build_date": "2026-06-05",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/v0.1.0-daemon",
          "note": "macOS x86_64 only.",
          "record": "reconstructed"
        }
      ]
    },
    "tray": {
      "version_source": "version in tray/src-tauri/tauri.conf.json",
      "channels": [
        "Public release archive: https://github.com/Proofpane/releases/releases/tag/tray-v0.3.9",
        "Private source-repository releases tagged tray-v* (authenticated access required; historical entries remain labelled by visibility)"
      ],
      "releases": [
        {
          "version": "0.3.9",
          "build_date": "2026-08-10",
          "status": "released",
          "prerelease": false,
          "visibility": "public",
          "public_distribution": true,
          "published_at": "2026-08-10T11:34:51Z",
          "release_url": "https://github.com/Proofpane/releases/releases/tag/tray-v0.3.9",
          "source_provenance": {
            "workflow_run_id": 31364968416,
            "workflow_run_url": "https://github.com/lywinged/proofpane/actions/runs/31364968416",
            "workflow_head_commit": "064c7e57954df9388cfaf45c6f8cdc857da53e4a",
            "tag_commit": "064c7e57954df9388cfaf45c6f8cdc857da53e4a",
            "private_source_release_url": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.3.9",
            "note": "The tagged source commit and the workflow head commit are identical. Unlike 0.3.8 the run was started by workflow_dispatch on that commit rather than by a tag push, so the tag/build binding was verified by comparing the run's head SHA with the tag's commit rather than by the tag-push gate. The public Proofpane/releases page carries the exact same artifact bytes and adjacent SHA-256 sidecars."
          },
          "sha256": {
            "linux-appimage": "0026abfcf823573a13d7950cefffc370c9a480a06e2e632496039918762a8e64",
            "linux-deb": "648f8441e784fe830d98a39c67e72558192a5b19eb4ac9c0e027522b789298d2",
            "macos-installer-pkg": "5ca84f50b9e803962d8349334552f9a2d8d518a339ae1775f0a34da842105749",
            "macos-universal-dmg": "2d1fa86a2a0d427a764e7fee87926f4b0e71a0817cf2bcac73f1613dfb3b0573",
            "windows-x64-msi": "fcdbe33aa72a11d7cf4a89420e0532e315e17f0e10fc34c4fd877c9ad5b72a58"
          },
          "signing": {
            "artifact": "macos-installer-pkg and macos-universal-dmg",
            "identity": "Developer ID Installer: PROOFPANE LIMITED (B94QM75QNG) for the package; Developer ID Application: PROOFPANE LIMITED (B94QM75QNG) for the DMG",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": true,
            "verified_how": "Both macOS artifacts were downloaded anonymously from the public release after publication and re-checked on those bytes. Package: sha256 5ca84f50b9e803962d8349334552f9a2d8d518a339ae1775f0a34da842105749; pkgutil --check-signature reported signed by a developer certificate issued by Apple for distribution, notarization trusted by the Apple notary service, and a trusted timestamp of 2026-08-10 07:16:41 UTC; xcrun stapler validate succeeded; spctl --assess --type install returned accepted / source=Notarized Developer ID / origin=Developer ID Installer: PROOFPANE LIMITED (B94QM75QNG). DMG: sha256 2d1fa86a2a0d427a764e7fee87926f4b0e71a0817cf2bcac73f1613dfb3b0573; codesign --verify --strict reported valid on disk and satisfies its Designated Requirement under Developer ID Application: PROOFPANE LIMITED with a trusted timestamp; xcrun stapler validate succeeded; spctl returned accepted / source=Notarized Developer ID.",
            "certificate_expiry_note": "The Developer ID Installer certificate is chained to Apple's original Developer ID Certification Authority, which expires 2027-02-01, and Apple caps a leaf at its issuer's expiry. Because the signature carries a trusted timestamp, this package remains verifiable after that date; the expiry constrains signing future packages, not verifying this one."
          },
          "platform_assurance": {
            "macos-installer-pkg": "Developer ID Installer-signed, Apple-notarized and stapled",
            "macos-universal-dmg": "Developer ID Application-signed, Apple-notarized and stapled",
            "windows-x64-msi": "not Authenticode-signed",
            "linux-appimage": "SHA-256 digest only; no platform-signing claim",
            "linux-deb": "SHA-256 digest only; no platform-signing claim"
          },
          "note": "First Tray release to publish a signed macOS installer package alongside the disk image, so the Tray can be deployed by an MDM rather than installed by hand. The package is signed by a different Apple certificate from the disk image: Developer ID Installer signs packages, Developer ID Application signs apps.",
          "record": "verified-after-publication"
        },
        {
          "version": "0.3.8",
          "build_date": "2026-08-09",
          "status": "released",
          "prerelease": false,
          "visibility": "public",
          "public_distribution": true,
          "published_at": "2026-08-08T12:09:36Z",
          "release_url": "https://github.com/Proofpane/releases/releases/tag/tray-v0.3.8",
          "source_provenance": {
            "workflow_run_id": 31256162559,
            "workflow_run_url": "https://github.com/lywinged/proofpane/actions/runs/31256162559",
            "workflow_head_commit": "10d0cbd411ccaef9eeb48593ed9ed0496065c298",
            "tag_commit": "10d0cbd411ccaef9eeb48593ed9ed0496065c298",
            "private_source_release_url": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.3.8",
            "note": "The tagged source commit, workflow head and private source release target are identical. The public Proofpane/releases page carries the exact same artifact bytes and adjacent SHA-256 sidecars."
          },
          "sha256": {
            "linux-appimage": "c946282927ffe4234b510b7f11ff3672a2949bcf267131adf49e27a3f4763f7b",
            "linux-deb": "2ef082779f4216d7b66084cb4b86e56ebc9a1a15fcd1eae693f15aefc4d28d4f",
            "macos-universal-dmg": "3be45e08d9063caf0b5ac2c678578619b87e018368a96fc3101dbd57ef548d3f",
            "windows-x64-msi": "26fd19aac52ad255f9c73a0789c51e9fc329bedfda27566ffbcb009939691fb2"
          },
          "signing": {
            "artifact": "macos-universal-dmg",
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": true,
            "verified_how": "The DMG was downloaded anonymously from the public release after publication. Its adjacent sidecar reproduced SHA-256 3be45e08d9063caf0b5ac2c678578619b87e018368a96fc3101dbd57ef548d3f; codesign named PROOFPANE LIMITED and team B94QM75QNG; xcrun stapler validate succeeded; and spctl -a -vvv --type open --context context:primary-signature returned accepted / source=Notarized Developer ID. The mounted app reported version 0.3.8, and the app plus both embedded daemon seeds passed strict codesign verification under the same team."
          },
          "platform_assurance": {
            "macos-universal-dmg": "Developer ID-signed, Apple-notarized and stapled",
            "windows-x64-msi": "not Authenticode-signed",
            "linux-appimage": "SHA-256 digest only; no platform-signing claim",
            "linux-deb": "SHA-256 digest only; no platform-signing claim"
          },
          "note": "Public, anonymously downloadable cross-platform Tray release. Apple signing/notarization applies to the macOS DMG only; Windows remains unsigned and Linux is published with SHA-256 integrity digests only.",
          "record": "verified-after-publication"
        },
        {
          "version": "0.3.7",
          "build_date": "2026-08-07",
          "status": "superseded",
          "prerelease": true,
          "visibility": "private",
          "public_distribution": false,
          "published_at": "2026-08-07T13:15:25Z",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.3.7",
          "source_provenance": {
            "workflow_run_id": 31168321654,
            "workflow_run_url": "https://github.com/lywinged/proofpane/actions/runs/31168321654",
            "workflow_head_commit": "927e15d9d38ed61ee0b9b657614e203820626135",
            "tag_commit": "4446304bb98c686f1da78d76d550668cdd796f1f",
            "note": "The successful workflow run head and the release tag commit differ. The SHA-256 values below identify the released bytes; do not infer that the tag commit identifies the source used by this build."
          },
          "sha256": {
            "linux-appimage": "4a864bc904148b6663aa7c8e102c89a94c5cf5d5b41a1382cbdbbcab2b622c9e",
            "linux-deb": "04943d1566311ea872acdad3a99d3e59f3f18a5e69a894243052593cf0e2829b",
            "macos-universal-dmg": "9f8624820c7f61a1cccd5bd8d28958db7985f07fda600417055da12dd33c0502",
            "windows-x64-msi": "7f5214040a58b929724f389fe67afc3b7a9bb4abddd9089897b5ecf902f36366"
          },
          "signing": {
            "artifact": "macos-universal-dmg",
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": true,
            "verified_how": "The authenticated prerelease DMG was downloaded after publication and checked with codesign, xcrun stapler validate and spctl -a -vvv --type open --context context:primary-signature."
          },
          "platform_assurance": {
            "macos-universal-dmg": "Developer ID-signed, Apple-notarized and stapled",
            "windows-x64-msi": "not Authenticode-signed",
            "linux-appimage": "SHA-256 digest only; no platform-signing claim",
            "linux-deb": "SHA-256 digest only; no platform-signing claim"
          },
          "note": "Published GitHub prerelease in a private repository; it requires authenticated repository access and is not anonymous public distribution. Signing and notarization apply to the macOS DMG only; Windows remains unsigned and Linux is published with SHA-256 integrity digests only.",
          "record": "verified-after-publication"
        },
        {
          "version": "0.3.0",
          "build_date": "2026-07-29",
          "status": "released",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.3.0",
          "note": "The R3 device-confirmation surface.",
          "record": "reconstructed"
        },
        {
          "version": "0.2.0",
          "status": "draft",
          "note": "Release drafted but never published (untagged on GitHub).",
          "record": "reconstructed"
        },
        {
          "version": "0.1.3",
          "build_date": "2026-07-23",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.1.3",
          "note": "Per-app monitoring toggle. This is the '23 July release page' an external audit later mistook for a daemon v1.5.19 page.",
          "record": "reconstructed"
        },
        {
          "version": "0.1.1",
          "build_date": "2026-07-22",
          "status": "superseded",
          "release_url": "https://github.com/lywinged/proofpane/releases/tag/tray-v0.1.1",
          "record": "reconstructed"
        }
      ]
    },
    "desktop": {
      "version_source": "desktop/ Tauri shell",
      "channels": [
        "Private CI artifact (desktop-release.yml): authenticated access is required and no post-certificate public desktop release is recorded here. Windows artifacts are not Authenticode-signed and Linux carries no platform-signing claim. Enterprise re-signing remains optional."
      ],
      "verified_ci_builds": [
        {
          "build_date": "2026-08-07",
          "workflow_run_id": 31168310848,
          "workflow_run_url": "https://github.com/lywinged/proofpane/actions/runs/31168310848",
          "workflow_head_commit": "927e15d9d38ed61ee0b9b657614e203820626135",
          "artifact_id": 8990063389,
          "artifact_name": "desktop-macos-latest",
          "artifact_file": "Proofpane_0.1.0_universal.dmg",
          "visibility": "private",
          "public_distribution": false,
          "sha256": "f865138a5bd7067ed27250b6068efc8b12463a82e0ee1e97ba8cd29c4a3665ee",
          "signing": {
            "identity": "Developer ID Application: PROOFPANE LIMITED (B94QM75QNG)",
            "team_id": "B94QM75QNG",
            "notarized": true,
            "stapled": true,
            "verified_how": "The authenticated CI artifact was downloaded and checked with codesign, xcrun stapler validate and spctl -a -vvv --type open --context context:primary-signature."
          },
          "record": "verified-after-publication"
        }
      ],
      "releases": []
    },
    "sample_evidence_pack": {
      "$what": "The sample Evidence Pack the site offers for offline verification ('download a sample & verify it yourself'). Not a program — a signed data artifact. Recorded here because the landing deploy is a distribution channel and every binary it serves must be in this record (backend/tests/test_landing_serves_no_unrecorded_binaries.py; rule created 2026-08-10 after an unrecorded June daemon build was found riding along in /install/downloads/).",
      "path": "/evidence/sample-pack/proofpane-sample-evidence-pack.zip",
      "sha256": "88a097acb6ba453a8bc48ed1dd7189949d566034c0afd3e56cf02b8e1191da4c",
      "signed": "Ed25519 inside the pack (manifest signature) — verify with tools/verify_evidence_pack.py; not an Apple code-signing artifact."
    }
  }
}