{
  "schemaVersion": "1.1.0",
  "generatedAt": "2026-10-26T14:03:18-07:00",
  "canonicalUrl": "https://theprooffoundry.com",
  "registryPath": "/proof/index.json",
  "productCount": 7,
  "products": [
    {
      "id": "cache-vault",
      "name": "Cache Vault",
      "displayName": "Cache Vault",
      "productStatus": "PUBLIC_RELEASE",
      "release": {
        "publicVersion": "0.3.1",
        "candidateVersion": null,
        "releaseStatus": "PUBLIC_RELEASE",
        "publishedAt": "2026-10-01",
        "withdrawnVersion": null,
        "withdrawalReason": null
      },
      "platform": [
        "Windows",
        "Android companion"
      ],
      "route": "/cache-vault/",
      "artifacts": [
        {
          "filename": "CacheVault-v0.3.1-windows.zip",
          "sizeBytes": 43275615,
          "sha256": "d0c59c440b1d5787c9319e1bdf8829f117ccaa2d64d3424dd6955a84fb975d45",
          "downloadUrl": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/CacheVault-v0.3.1-windows.zip",
          "sha256Url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/SHA256SUMS.txt",
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "Windows installer ZIP"
        },
        {
          "filename": "CacheVault-Mobile-v0.3.1-android.apk",
          "sizeBytes": 37016478,
          "sha256": "863f8a5846083cb0372e1046ac1e9363e6203b4880cc2c6a7ca0da8b1b451988",
          "downloadUrl": "https://downloads.theprooffoundry.com/cachevault/v0.3.1/CacheVault-Mobile-v0.3.1-android.apk",
          "sha256Url": "https://downloads.theprooffoundry.com/cachevault/v0.3.1/SHA256SUMS.txt",
          "signingStatus": "PRODUCTION_SIGNED",
          "platform": "Android companion",
          "distType": "Android APK"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-10-01",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "ARTIFACT_CUSTODY",
          "RUNTIME_VALIDATION",
          "PUBLIC_DOWNLOAD"
        ],
        "receiptId": "20261001-release-eddbae7",
        "receiptUrl": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/CACHEVAULT_V0.3.1_RELEASE_RECEIPT.json",
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "PUBLISHED_RECEIPT",
          "RUNTIME_VALIDATION": "RECEIPT_SCOPE_UNASSESSED",
          "REALITY_GATE": "NONE"
        },
        "downloadUnavailable": false
      },
      "tests": [
        {
          "label": "Desktop tests · local release gate",
          "result": "2120 passed · 1 skipped · 0 failed at release source eddbae7"
        },
        {
          "label": "Android unit and phone-local smoke",
          "result": "9/9 unit tests · 9/9 S23 Android 16 phone-local capture smoke on a debug build"
        },
        {
          "label": "Hosted GitHub CI",
          "result": "FAILED at eddbae7: two layout-mode tests and one window-geometry test in each Python 3.12 and 3.13 job"
        }
      ],
      "evidence": [
        {
          "label": "Download (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/CacheVault-v0.3.1-windows.zip"
        },
        {
          "label": "SHA256SUMS (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/SHA256SUMS.txt"
        },
        {
          "label": "Release receipt (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/CACHEVAULT_V0.3.1_RELEASE_RECEIPT.json"
        },
        {
          "label": "Android companion APK (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/cachevault/v0.3.1/CacheVault-Mobile-v0.3.1-android.apk"
        },
        {
          "label": "Companion SHA256SUMS (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/cachevault/v0.3.1/SHA256SUMS.txt"
        },
        {
          "label": "GitHub release (v0.3.1)",
          "url": "https://github.com/lazelife420-spec/CacheVault/releases/tag/v0.3.1"
        },
        {
          "label": "Hosted CI at eddbae7 (failed)",
          "url": "https://github.com/lazelife420-spec/CacheVault/actions/runs/36895226107"
        },
        {
          "label": "Release workflow at eddbae7 (failed; package steps skipped)",
          "url": "https://github.com/lazelife420-spec/CacheVault/actions/runs/36895229375"
        },
        {
          "label": "CacheVault-v0.3.1-windows.zip",
          "url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/CacheVault-v0.3.1-windows.zip"
        },
        {
          "label": "SHA256SUMS.txt",
          "url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/SHA256SUMS.txt"
        },
        {
          "label": "CACHEVAULT_V0.3.1_RELEASE_RECEIPT.json",
          "url": "https://downloads.theprooffoundry.com/cache-vault/v0.3.1/CACHEVAULT_V0.3.1_RELEASE_RECEIPT.json"
        },
        {
          "label": "CacheVault-Mobile-v0.3.1-android.apk",
          "url": "https://downloads.theprooffoundry.com/cachevault/v0.3.1/CacheVault-Mobile-v0.3.1-android.apk"
        }
      ],
      "limits": [
        "The Windows build is not code-signed, so Windows SmartScreen may prompt on first launch.",
        "Cache Vault v0.3.1 is the current public Windows release, served from Proof Foundry downloads; v0.3.0 (2026-09-30) is the previous public release.",
        "Command Center is Phase 1 (Hotkey Actions) only.",
        "Checksum is not a code signature; the release-signed Android companion is a separate artifact with its own signing certificate (SHA-256 c2eb5c42a684326ceba1289e65e9690ed71daf770de64e2b83a42bce04026a2c).",
        "The public Android companion is v0.3.1, published on GitHub Releases and mirrored on Proof Foundry downloads.",
        "Android grants no application background clipboard access: the companion saves a copy made in another app only when you act on its notification or next open the app.",
        "The 9/9 physical-phone smoke used a debug-signed app. It establishes phone-local capture behavior on that build, not runtime behavior of the release-signed v0.3.1 APK; the paired-PC lane remains device-unproven.",
        "The local release gate passed 2120 / 1 skipped / 0 failed at eddbae7. Hosted GitHub CI failed separately on three layout/geometry tests in each Python 3.12 and 3.13 job; the Release workflow stopped at unit tests and skipped packaging and publication.",
        "No Reality Gate canonical run was performed for the v0.3.1 release."
      ],
      "summary": "A local-first clipboard vault with receipts, safes, global search, Quick Paste, image capture, exports, Command Center, and a release-signed Android companion that is now a standalone local-first phone vault with its own on-device capture. The PC bridge stays opt-in and LAN-only."
    },
    {
      "id": "ghostlayer",
      "name": "GhostLayer",
      "displayName": "GhostLayer",
      "productStatus": "PUBLIC_RELEASE",
      "release": {
        "publicVersion": "0.4.0",
        "candidateVersion": null,
        "releaseStatus": "PUBLIC_RELEASE",
        "publishedAt": "2026-08-28",
        "withdrawnVersion": null,
        "withdrawalReason": null
      },
      "platform": "Windows",
      "route": "/ghostlayer/",
      "artifacts": [
        {
          "filename": "GhostLayer-Setup-0.4.0.exe",
          "sizeBytes": null,
          "sha256": "5c0f00fb7e6e58526f400e25a0f05e9f948c503479c82d6be4eb7d0aa9f06251",
          "downloadUrl": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GhostLayer-Setup-0.4.0.exe",
          "sha256Url": null,
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "Windows Installer EXE (unsigned, receipt-backed)"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-08-28",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "ARTIFACT_CUSTODY",
          "RUNTIME_VALIDATION",
          "PUBLIC_DOWNLOAD"
        ],
        "receiptId": null,
        "receiptUrl": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.json",
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "OWNER_STAMPED_UNPUBLISHED",
          "RUNTIME_VALIDATION": "OWNER_STAMPED_UNPUBLISHED",
          "REALITY_GATE": "NONE"
        },
        "downloadUnavailable": false
      },
      "tests": [
        {
          "label": "Full suite",
          "result": "188/188"
        },
        {
          "label": "Packaged runtime qualification",
          "result": "13/13"
        }
      ],
      "evidence": [
        {
          "label": "JSON receipt",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.json"
        },
        {
          "label": "Markdown receipt",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.md"
        },
        {
          "label": "Release package manifest",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_RELEASE_PACKAGE_MANIFEST.md"
        },
        {
          "label": "Release notes",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/RELEASE_NOTES_v0.4.0.md"
        },
        {
          "label": "GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.json",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.json"
        },
        {
          "label": "GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.md",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_PROOF_FOUNDRY_RELEASE_RECEIPT.md"
        },
        {
          "label": "GHOSTLAYER_V0.4.0_RELEASE_PACKAGE_MANIFEST.md",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/GHOSTLAYER_V0.4.0_RELEASE_PACKAGE_MANIFEST.md"
        },
        {
          "label": "RELEASE_NOTES_v0.4.0.md",
          "url": "https://downloads.theprooffoundry.com/ghostlayer/v0.4.0/RELEASE_NOTES_v0.4.0.md"
        }
      ],
      "limits": [
        "Unsigned by Windows — not Microsoft publisher signed, not SmartScreen trusted.",
        "Windows SmartScreen may prompt on first launch; choose More info, then Run anyway.",
        "Checksum is not a code signature.",
        "Custody receipt does not constitute malware certification or Microsoft signing."
      ],
      "summary": "A controllable RAM-backed layer between active work and permanent storage. Stage files in RAM, open them for editing, recover from interruptions, commit safely with multi-select batch workflow and keyboard shortcuts — no cloud, no account, no telemetry."
    },
    {
      "id": "lights-out",
      "name": "Lights Out PC",
      "displayName": "Lights Out PC",
      "productStatus": "PUBLIC_RELEASE",
      "release": {
        "publicVersion": "11.2.0",
        "candidateVersion": null,
        "releaseStatus": "PUBLIC_RELEASE",
        "publishedAt": "2026-10-16",
        "withdrawnVersion": null,
        "withdrawalReason": null
      },
      "platform": [
        "Windows",
        "Android"
      ],
      "route": "/lights-out/",
      "artifacts": [
        {
          "filename": "Lights-Out-Portable-v11.2.0-win-x64.zip",
          "sizeBytes": 164924914,
          "sha256": "7e855475c3f7a3e65a4921bc7d9237a1a69480514943de597f65ad3cfb273b39",
          "downloadUrl": "https://github.com/lazelife420-spec/Lights-out/releases/download/v11.2.0/Lights-Out-Portable-v11.2.0-win-x64.zip",
          "sha256Url": "https://github.com/lazelife420-spec/Lights-out/releases/download/v11.2.0/SHA256SUMS.txt",
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "Portable ZIP (unsigned)"
        },
        {
          "filename": "Lights-Out-Setup-v11.2.0.exe",
          "sizeBytes": 118436318,
          "sha256": "83c590c3de54b16b26bfeb4961858e44a225dd59c7501e77d72248a5882a37c0",
          "downloadUrl": "https://github.com/lazelife420-spec/Lights-out/releases/download/v11.2.0/Lights-Out-Setup-v11.2.0.exe",
          "sha256Url": "https://github.com/lazelife420-spec/Lights-out/releases/download/v11.2.0/SHA256SUMS.txt",
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "Windows installer EXE (unsigned)"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-10-16",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "RUNTIME_VALIDATION",
          "PUBLIC_DOWNLOAD"
        ],
        "receiptId": null,
        "receiptUrl": null,
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "NONE",
          "RUNTIME_VALIDATION": "NONE",
          "REALITY_GATE": "NONE"
        },
        "downloadUnavailable": false
      },
      "tests": [
        {
          "label": "Installer and portable file match",
          "result": "614/614"
        },
        {
          "label": "Installed settings layout checks",
          "result": "60 passed"
        }
      ],
      "evidence": [
        {
          "label": "v11.2.0 release qualification evidence and limits (GitHub)",
          "url": "https://github.com/lazelife420-spec/Lights-out/blob/v11.2.0/docs/RELEASE_QUALIFICATION_11.2.0.md"
        }
      ],
      "limits": [
        "These are unsigned Windows builds — not Authenticode code-signed.",
        "The public Android companion remains v11.1.1; no new Android APK ships publicly with Windows v11.2.0.",
        "WiZ smart-light control is experimental; fixture and emulator QA do not establish physical bulb, phone or router reliability.",
        "No Reality Gate receipt exists for v11.2.0; its qualification record is the release's own published build manifest and Windows verification file — first-party evidence, not an independent certification."
      ],
      "summary": "Local-first night control for Windows. Plan tonight's session on your PC, control it from bed with the Android Companion, and wake with First Light. Compatible smart lights, schedule automation, an experimental Wi-Fi Guard, and proof of every run.",
      "unofferedArtifacts": [
        1
      ]
    },
    {
      "id": "cleanroom",
      "name": "Cleanroom",
      "displayName": "Cleanroom",
      "productStatus": "PUBLIC_RELEASE",
      "release": {
        "publicVersion": "1.0.7",
        "candidateVersion": "1.0.10",
        "releaseStatus": "PUBLIC_RELEASE",
        "publishedAt": "2026-08-28",
        "withdrawnVersion": null,
        "withdrawalReason": null
      },
      "platform": "Windows",
      "route": "/cleanroom/",
      "artifacts": [
        {
          "filename": "Cleanroom-Setup-1.0.7.exe",
          "sizeBytes": null,
          "sha256": "2cd6953015ce0b8e429c869564be11ad10504332aded10b442a58ea2b990a76e",
          "downloadUrl": "https://downloads.theprooffoundry.com/cleanroom/v1.0.7/Cleanroom-Setup-1.0.7.exe",
          "sha256Url": "https://downloads.theprooffoundry.com/cleanroom/v1.0.7/SHA256SUMS.txt",
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "Windows Installer EXE"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-08-28",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "ARTIFACT_CUSTODY",
          "RUNTIME_VALIDATION",
          "PUBLIC_DOWNLOAD"
        ],
        "receiptId": null,
        "receiptUrl": null,
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "NONE",
          "RUNTIME_VALIDATION": "NONE",
          "REALITY_GATE": "NONE"
        },
        "downloadUnavailable": false
      },
      "tests": {
        "label": "Full suite",
        "result": "366/366"
      },
      "evidence": [
        {
          "label": "Windows installer",
          "url": "https://downloads.theprooffoundry.com/cleanroom/v1.0.7/Cleanroom-Setup-1.0.7.exe"
        },
        {
          "label": "SHA256SUMS",
          "url": "https://downloads.theprooffoundry.com/cleanroom/v1.0.7/SHA256SUMS.txt"
        },
        {
          "label": "Cleanroom-Setup-1.0.7.exe",
          "url": "https://downloads.theprooffoundry.com/cleanroom/v1.0.7/Cleanroom-Setup-1.0.7.exe"
        },
        {
          "label": "SHA256SUMS.txt",
          "url": "https://downloads.theprooffoundry.com/cleanroom/v1.0.7/SHA256SUMS.txt"
        }
      ],
      "limits": [
        "Source has advanced locally to v1.0.10 (627 tests collected, 608 passed, publication on hold).",
        "The Windows installer is not Authenticode-signed.",
        "Checksum is not a code signature."
      ],
      "summary": "Archive-first Windows cleanup with receipts, custody checks, and rollback, as described by Proof Foundry for v1.0.7; no release receipt is published. No cloud, no account, no telemetry."
    },
    {
      "id": "proofshot",
      "name": "ProofShot",
      "displayName": "ProofShot",
      "productStatus": "PUBLIC_RELEASE",
      "release": {
        "publicVersion": "2.0.0",
        "candidateVersion": null,
        "releaseStatus": "PUBLIC_RELEASE",
        "publishedAt": "2026-09-17",
        "withdrawnVersion": null,
        "withdrawalReason": null
      },
      "platform": "Windows",
      "route": "/proofshot/",
      "artifacts": [
        {
          "filename": "ProofShot-Setup-2.0.0.exe",
          "sizeBytes": 121733716,
          "sha256": "fa20dc7e44440f0ed96fa08db67a77339d595f8eb27090e24120104ea6744701",
          "downloadUrl": "https://downloads.theprooffoundry.com/proofshot/v2.0.0/ProofShot-Setup-2.0.0.exe",
          "sha256Url": "https://downloads.theprooffoundry.com/proofshot/v2.0.0/SHA256SUMS.txt",
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "NSIS installer"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-09-17",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "ARTIFACT_CUSTODY",
          "RUNTIME_VALIDATION",
          "REALITY_GATE",
          "PUBLIC_DOWNLOAD"
        ],
        "receiptId": "14162b59-f382-4c1d-92b3-308a9899351c",
        "receiptUrl": "https://downloads.theprooffoundry.com/proofshot/v2.0.0/RELEASE-MANIFEST.json",
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "MANIFEST_ONLY",
          "RUNTIME_VALIDATION": "MANIFEST_ONLY",
          "REALITY_GATE": "MANIFEST_ONLY"
        },
        "downloadUnavailable": false
      },
      "tests": [
        {
          "label": "Unit suite",
          "result": "262/262"
        },
        {
          "label": "Packaged E2E",
          "result": "45/45"
        },
        {
          "label": "Tamper / authority / migration",
          "result": "60/60"
        }
      ],
      "evidence": [
        {
          "label": "SHA256SUMS.txt",
          "url": "https://downloads.theprooffoundry.com/proofshot/v2.0.0/SHA256SUMS.txt"
        },
        {
          "label": "RELEASE-MANIFEST.json",
          "url": "https://downloads.theprooffoundry.com/proofshot/v2.0.0/RELEASE-MANIFEST.json"
        }
      ],
      "limits": [
        "The Windows installer is not code-signed; Windows SmartScreen will prompt on first launch. Verify the SHA-256 before running.",
        "Capture is structural, not photographic — SmartDecode records the page's own resources and structure; there is no pixel-screenshot capture engine.",
        "ProofForge is a separate project and is not this product.",
        "The 60/60 tamper, authority and migration results document release-time qualification; a later licensing-authority finding remains unresolved, and those tests do not establish its remediation."
      ],
      "summary": "Local-first Windows proof workstation: capture what matters online, keep a proof bundle with SHA-256 receipts and a Proof Passport, and verify it later offline, with the verifier included in the proof bundle (ProofShot's own code). Public release v2.0.0 — the hardened HyperSnatch rebrand."
    },
    {
      "id": "forgecast",
      "name": "ForgeCast Weather",
      "displayName": "ForgeCast Weather",
      "productStatus": "PUBLIC_RELEASE",
      "release": {
        "publicVersion": "0.3.5",
        "candidateVersion": null,
        "releaseStatus": "PUBLIC_RELEASE",
        "publishedAt": "2026-09-02",
        "withdrawnVersion": null,
        "withdrawalReason": null
      },
      "platform": "Android",
      "route": "/forgecast/",
      "artifacts": [
        {
          "filename": "ForgeCast-Weather-v0.3.5-android-release.apk",
          "sizeBytes": 77331690,
          "sha256": "a28db27cd16b3e45f3e75cc0d7c7a4b101646573de9954ec40dbf03e5439bea1",
          "downloadUrl": "https://downloads.theprooffoundry.com/forgecast/v0.3.5/ForgeCast-Weather-v0.3.5-android-release.apk",
          "sha256Url": "https://downloads.theprooffoundry.com/forgecast/v0.3.5/ForgeCast-Weather-v0.3.5-android-release.apk.sha256.txt",
          "signingStatus": "PRODUCTION_SIGNED",
          "platform": "Android",
          "distType": "Android APK Package (private production signing identity)"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-09-02",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "ARTIFACT_CUSTODY",
          "RUNTIME_VALIDATION",
          "REALITY_GATE",
          "PUBLIC_DOWNLOAD",
          "CODE_SIGNING",
          "RELEASE_AUTHORIZATION"
        ],
        "receiptId": null,
        "receiptUrl": null,
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "NONE",
          "RUNTIME_VALIDATION": "NONE",
          "REALITY_GATE": "NONE"
        },
        "downloadUnavailable": false
      },
      "tests": {
        "label": "Full suite",
        "result": "1110/1110"
      },
      "evidence": [
        {
          "label": "APK download (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/forgecast/v0.3.5/ForgeCast-Weather-v0.3.5-android-release.apk"
        },
        {
          "label": "SHA256SUMS (Proof Foundry)",
          "url": "https://downloads.theprooffoundry.com/forgecast/v0.3.5/ForgeCast-Weather-v0.3.5-android-release.apk.sha256.txt"
        },
        {
          "label": "GitHub release v0.3.5",
          "url": "https://github.com/lazelife420-spec/ForgeCast/releases/tag/v0.3.5"
        },
        {
          "label": "ForgeCast-Weather-v0.3.5-android-release.apk.sha256.txt",
          "url": "https://downloads.theprooffoundry.com/forgecast/v0.3.5/ForgeCast-Weather-v0.3.5-android-release.apk.sha256.txt"
        }
      ],
      "limits": [
        "Users upgrading from ForgeCast v0.3.3 or earlier must uninstall the old app before installing v0.3.5: the signing identity changed at v0.3.4, and v0.3.5 does not restore in-place compatibility with those builds.",
        "Users upgrading from v0.3.4 can install v0.3.5 normally: same signing identity, settings and data carry over (verified by an on-device upgrade test).",
        "Because ForgeCast is local-first, uninstalling the old app removes app-local settings and other locally stored data unless separately preserved.",
        "Checksum is not a code signature.",
        "GitHub release assets may be unavailable to anonymous visitors due to an account-level restriction; Proof Foundry distribution is the authoritative public download path."
      ],
      "summary": "Decision-focused weather for Android. See when to head outside, what to wear now, what to bring later, and ask weather questions with forecast-backed reasons."
    },
    {
      "id": "reality-gate",
      "name": "Reality Gate",
      "displayName": "Reality Gate",
      "productStatus": "WITHDRAWN",
      "release": {
        "publicVersion": null,
        "candidateVersion": null,
        "releaseStatus": "WITHDRAWN",
        "publishedAt": "2026-08-15",
        "withdrawnVersion": "1.1.0",
        "withdrawalReason": "Security packaging defect; v1.1.0 must not be distributed."
      },
      "platform": "Windows",
      "route": "/reality-gate/",
      "artifacts": [
        {
          "filename": "Reality-Gate-1.1.0-Developer-Pilot.zip",
          "sizeBytes": null,
          "sha256": "58cc27d22bdee8157ee4598e116e17ff42d0efc95630c97bee4b2bc6be6ce756",
          "downloadUrl": null,
          "sha256Url": null,
          "signingStatus": "UNSIGNED",
          "platform": "Windows",
          "distType": "Windows Installer ZIP"
        }
      ],
      "verification": {
        "status": "VERIFIED",
        "verifiedAt": "2026-08-15",
        "verificationType": [
          "ARTIFACT_HASH_PUBLISHED",
          "ARTIFACT_HASH_VERIFIED",
          "RUNTIME_VALIDATION",
          "PUBLIC_DOWNLOAD"
        ],
        "receiptId": null,
        "receiptUrl": null,
        "evidenceClass": {
          "ARTIFACT_CUSTODY": "NONE",
          "RUNTIME_VALIDATION": "NONE",
          "REALITY_GATE": "NONE"
        },
        "downloadUnavailable": true
      },
      "tests": [
        {
          "label": "Static blocks",
          "result": "269/269"
        },
        {
          "label": "Live registry",
          "result": "24/24"
        },
        {
          "label": "Installed runtime",
          "result": "20/20"
        }
      ],
      "evidence": [],
      "limits": [
        "The v1.1.0 ZIP is permanently withdrawn and must not be redistributed.",
        "A separate v1.1.1 Developer Pilot has documented historical release evidence; its website migration was not proven deployed.",
        "This website offers no current Reality Gate download while security disposition remains unresolved.",
        "The historical v1.1.0 checksum identifies withdrawn bytes; it is not a code signature."
      ],
      "summary": "Local-first developer continuity for Git projects. Its withdrawn Windows release mapped project dependencies, ran builds in isolated local clones and kept signed receipts of what was checked."
    }
  ],
  "releaseFactsSource": {
    "mode": "WEBSITE_SOURCE_AUTHORITY",
    "authoredFile": "release-truth.json",
    "modelSha256": "c1a57e8f4c3c5cbe5a658d4dcbfe44186de08dee7fdc60b92cfff544b901441b",
    "websiteProjectionSha256": "e4279a614a44aa8e23bbb9aa7aad90f28ff215265cc70d42313f55a7d142ef47",
    "appSourceCommit": "c5df5bb805f88af41456351e3a648063f3da03c8",
    "websiteSourceBaseCommit": "c7d8a49972e95aa2dd9e4edd8c2085ae1d9f30ce",
    "foundationAuthorityScope": "HISTORICAL_RECONCILIATION_SNAPSHOT",
    "productionSigningAuthority": "HOLD",
    "installationAuthority": "NONE",
    "qualificationInterpretation": "REPORTED_BY_AUTHORED_SOURCE"
  }
}