Public receipts

Proof Foundry Receipts

Public proof for what we ship: routes, releases, checksums, receipts, and verification status.

Each product's current public record, in plain language, is in the Truth Files.

Product receipts

Verification state guide: VERIFIED, PUBLISHED, NOT_PUBLISHED and PENDING describe what Proof Foundry's authored release record lists for each dimension; they are not independent certification. Where a receipt or manifest is linked, you can read what it records. A SHA-256 hash shows file identity, not safety.

Cache Vault

Windows + Android companion
Public release

Windows installer delivered inside a ZIP archive, served from Proof Foundry downloads. The release gate was the local CI suite (2120 passed / 1 skipped / 0 failed at commit eddbae7) plus an on-device Android phone-local capture smoke (PASS 9/9 on a debug build, SM-S911W, Android 16). The release-signed Android companion v0.3.1 APK is published on GitHub Releases and mirrored on Proof Foundry downloads. The published SHA-256 is the checksum of the ZIP you download. No Reality Gate canonical run was performed for v0.3.1.

Release

Public version
v0.3.1
Release state
PUBLIC_RELEASE
Verification, artifact & evidence

Verification

Artifact hash published
PUBLISHED
Artifact hash verified
VERIFIED
Artifact custody
VERIFIED
Published release receipt
Reality Gate
PENDING
No published evidence for this check
Public download
PUBLISHED
Code signing (Windows)
UNSIGNED
Code signing (Android companion)
SIGNED
Publication status
PUBLIC_RELEASE

Artifact

Checksum covers CacheVault-v0.3.1-windows.zip

d0c59c440b1d5787c9319e1bdf8829f117ccaa2d64d3424dd6955a84fb975d45

SHA-256 prefix: d0c59c440b1d5787…

  • The Windows build is not code-signed, so Windows SmartScreen may prompt on first launch.
  • Cache Vault v0.3.1 is the current public Windows release, served from Proof Foundry downloads; v0.3.0 (2026-09-30) is the previous public release.
  • Command Center is Phase 1 (Hotkey Actions) only.
  • Checksum is not a code signature; the release-signed Android companion is a separate artifact with its own signing certificate (SHA-256 c2eb5c42a684326ceba1289e65e9690ed71daf770de64e2b83a42bce04026a2c).
  • The public Android companion is v0.3.1, published on GitHub Releases and mirrored on Proof Foundry downloads.
  • Android grants no application background clipboard access: the companion saves a copy made in another app only when you act on its notification or next open the app.
  • The 9/9 physical-phone smoke used a debug-signed app. It establishes phone-local capture behavior on that build, not runtime behavior of the release-signed v0.3.1 APK; the paired-PC lane remains device-unproven.
  • The local release gate passed 2120 / 1 skipped / 0 failed at eddbae7. Hosted GitHub CI failed separately on three layout/geometry tests in each Python 3.12 and 3.13 job; the Release workflow stopped at unit tests and skipped packaging and publication.
  • No Reality Gate canonical run was performed for the v0.3.1 release.

GhostLayer

Windows
Public release

Electron v0.4.0 · NSIS installer · receipt-backed

Release

Public version
v0.4.0
Release state
PUBLIC_RELEASE
Verification, artifact & evidence

Verification

Artifact hash published
PUBLISHED
Artifact hash verified
VERIFIED
Reality Gate
PENDING
No published evidence for this check
Public download
PUBLISHED
Code signing
UNSIGNED
Publication status
PUBLIC_RELEASE

Artifact

Checksum covers GhostLayer-Setup-0.4.0.exe

5c0f00fb7e6e58526f400e25a0f05e9f948c503479c82d6be4eb7d0aa9f06251

SHA-256 prefix: 5c0f00fb7e6e5852…

Evidence

Dates
Release report — 2026-08-28
Published — 2026-08-28
  • Unsigned by Windows — not Microsoft publisher signed, not SmartScreen trusted.
    Website note (as of 2026-10-20). 'Unsigned' here means the installer is not code-signed, according to its release record.
  • Windows SmartScreen may prompt on first launch; choose More info, then Run anyway.
    Website note (as of 2026-10-20). Verify the SHA-256 first.
  • Checksum is not a code signature.
  • Custody receipt does not constitute malware certification or Microsoft signing.

Lights Out PC

Windows + Android
Public release

Electron v11.2.0 · This site offers no Android companion download.

Release

Public version
v11.2.0
Release state
PUBLIC_RELEASE
Verification, artifact & evidence

Verification

Artifact hash published
PUBLISHED
Artifact hash verified
VERIFIED
Artifact custody
PENDING
No published evidence for this check
Runtime validation
PENDING
No published evidence for this check
Reality Gate
PENDING
No published evidence for this check
Public download
PUBLISHED
Code signing
UNSIGNED
Publication status
PUBLIC_RELEASE

Artifact

Checksum covers Lights-Out-Portable-v11.2.0-win-x64.zip

7e855475c3f7a3e65a4921bc7d9237a1a69480514943de597f65ad3cfb273b39

SHA-256 prefix: 7e855475c3f7a3e6…

Evidence

Dates
Release report — 2026-10-16
Published — 2026-10-16
  • These are unsigned Windows builds — not Authenticode code-signed.
  • The public Android companion remains v11.1.1; no new Android APK ships publicly with Windows v11.2.0.
  • WiZ smart-light control is experimental; fixture and emulator QA do not establish physical bulb, phone or router reliability.
  • No Reality Gate receipt exists for v11.2.0; its qualification record is the release's own published build manifest and Windows verification file — first-party evidence, not an independent certification.

Cleanroom

Windows
Public release

CI-built Windows installer (PyInstaller + Inno Setup).

Release

Public version
v1.0.7
Candidate v1.0.10 is on hold and is not an authorized public release.
Release state
PUBLIC_RELEASE
Verification, artifact & evidence

Verification

Artifact hash published
PUBLISHED
Artifact hash verified
VERIFIED
Artifact custody
PENDING
No published evidence for this check
Runtime validation
PENDING
No published evidence for this check
Reality Gate
PENDING
No published evidence for this check
Public download
PUBLISHED
Code signing
UNSIGNED
Publication status
PUBLIC_RELEASE

Artifact

Checksum covers Cleanroom-Setup-1.0.7.exe

2cd6953015ce0b8e429c869564be11ad10504332aded10b442a58ea2b990a76e

SHA-256 prefix: 2cd6953015ce0b8e…

Evidence

Dates
Release report — 2026-08-28
Published — 2026-08-28
  • Source has advanced locally to v1.0.10 (627 tests collected, 608 passed, publication on hold).
  • The Windows installer is not Authenticode-signed.
  • Checksum is not a code signature.

ProofShot

Windows
Public release

Electron desktop application: SmartDecode extraction pipeline, proof-bundle export (SHA-256 manifests, Proof Passport, offline HTML verifier). Public release v2.0.0 — the hardened ProofShot rebrand of the qualified HyperSnatch engine, with deterministic app.asar, Electron fuses enforced, and Reality Gate source→build→artifact custody. The 60/60 tamper, authority and migration result is historical release qualification; a later licensing-authority finding remains unresolved and is not remediated by that result.

Release

Public version
v2.0.0
Release state
PUBLIC_RELEASE
Verification, artifact & evidence

Verification

Artifact hash published
PUBLISHED
Artifact hash verified
VERIFIED
Public download
PUBLISHED
Code signing
UNSIGNED
Publication status
PUBLIC_RELEASE

Artifact

Checksum covers ProofShot-Setup-2.0.0.exe

fa20dc7e44440f0ed96fa08db67a77339d595f8eb27090e24120104ea6744701

SHA-256 prefix: fa20dc7e44440f0e…

Evidence

Dates
Release report — 2026-09-17
Published — 2026-09-17
  • The Windows installer is not code-signed; Windows SmartScreen will prompt on first launch. Verify the SHA-256 before running.
  • Capture is structural, not photographic — SmartDecode records the page's own resources and structure; there is no pixel-screenshot capture engine.
  • ProofForge is a separate project and is not this product.
  • The 60/60 tamper, authority and migration results document release-time qualification; a later licensing-authority finding remains unresolved, and those tests do not establish its remediation.

ForgeCast Weather

Android
Public release

Android APK (v0.3.5 release build, private ForgeCast signing identity)

Release

Public version
v0.3.5
Release state
PUBLIC_RELEASE
Verification, artifact & evidence

Verification

Artifact hash published
PUBLISHED
Artifact hash verified
VERIFIED
Artifact custody
PENDING
No published evidence for this check
Runtime validation
PENDING
No published evidence for this check
Reality Gate
PENDING
No published evidence for this check
Public download
PUBLISHED
Code signing
SIGNED
Publication status
PUBLIC_RELEASE

Artifact

Checksum covers ForgeCast-Weather-v0.3.5-android-release.apk

a28db27cd16b3e45f3e75cc0d7c7a4b101646573de9954ec40dbf03e5439bea1

SHA-256 prefix: a28db27cd16b3e45…

Evidence

Dates
Release report — 2026-09-02
Published — 2026-09-02
  • Users upgrading from ForgeCast v0.3.3 or earlier must uninstall the old app before installing v0.3.5: the signing identity changed at v0.3.4, and v0.3.5 does not restore in-place compatibility with those builds.
  • Users upgrading from v0.3.4 can install v0.3.5 normally: same signing identity, settings and data carry over (verified by an on-device upgrade test).
  • Because ForgeCast is local-first, uninstalling the old app removes app-local settings and other locally stored data unless separately preserved.
  • Checksum is not a code signature.
  • GitHub release assets may be unavailable to anonymous visitors due to an account-level restriction; Proof Foundry distribution is the authoritative public download path.
    Website note (as of 2026-10-20). An anonymous check found the v0.3.5 release assets listed on GitHub.

Reality Gate

Windows
Withdrawn · no public download

The release record lists the security disposition as unresolved. A later v1.1.1 Developer Pilot has historical release evidence, but Proof Foundry has no record that this website ever offered it for download. Historical release record: Historical Windows installer ZIP record for v1.1.0. The package was withdrawn after a security packaging defect and is not available for download.

Release

Public version
Withdrawn (v1.1.0)
Release state
WITHDRAWN
Downloads currently unavailable
Verification, artifact & evidence

Verification

Withdrawn v1.1.0 — release-time checks are historical; no public download

Artifact

Checksum covers Reality-Gate-1.1.0-Developer-Pilot.zip

58cc27d22bdee8157ee4598e116e17ff42d0efc95630c97bee4b2bc6be6ce756

SHA-256 prefix: 58cc27d22bdee815…

Evidence

Links
Not listed yet
Dates
Release report — 2026-08-15
Published — 2026-08-15
  • The v1.1.0 ZIP is permanently withdrawn and must not be redistributed.
  • A separate v1.1.1 Developer Pilot has documented historical release evidence; its website migration was not proven deployed.
    Website note (as of 2026-10-20). Plain meaning: Proof Foundry has no record that this website ever offered v1.1.1 for download.
  • This website offers no current Reality Gate download while security disposition remains unresolved.
  • The historical v1.1.0 checksum identifies withdrawn bytes; it is not a code signature.

Site verification receipts (historical)

No site verification receipt has been published for the current build yet.

Most recent product release event: Lights Out PC — artifact verified on . Release facts on this page are built from release-truth.json, an authored build input kept in source custody and not published; the published canonical record is /truth/v2/index.json.