Decisions

2026-10-31 Public installation CA health now means the public identity and exact machine root are observable; it never stands in for the privileged signing proof. An HTTPS CONNECT tunnel uses the effective HTTPS default port for inner requests, while a distinct inner authority remains unsupported because reusing the already verified CONNECT upstream would assign traffic to the wrong destination identity.

2026-10-31: Advance current v0.10.10 publication markers, documentation coverage, the frozen review candidate and six exact asset authorities only after merged source, annotated tag, all four tagged jobs, normal protected registry approval, six independently downloaded files and ten non-yanked registry archives reconcile. Retarget the published replay label to these verified bytes. Preserve the v0.8.0 predecessor, unsigned policy, historical evidence and unperformed independent whole-product review status. Hosted clean-install certification does not claim a local installed-product run or real-title Deep Capture success.

2026-10-31: The v0.10.11 release bump changes only eleven first-party package versions across the three governed dependency graphs. Rebind their measured digests and unsafe-review inventory without changing third-party packages, feature edges, package and edge counts, review expiry, or exceptions. Synchronize the nine first-party identities in each isolated fuzz and native-performance lockfile; their third-party resolutions remain unchanged. The independent-review record remains an empty not-started template for the new product version.