Dev Autographs v0.2.25

Version 0.2.25 refines the Axiom seal's faceted vector backing. The animated orbital emblem stays centered, and the desktop ledger uses a separate normal-layout seal cell so the heading and controls remain clear. The website removes its red, dashed stamp-pad decoration; the CLI contribution report uses the same refreshed vector seal.

• Publisher, motion controls, reduced-motion behavior, user autograph images and signed contribution records are preserved.
• The same 28 legal/license files and matching CLI are packaged. Apache-2.0 and third-party grants remain unchanged.
• No authentication, registry service, hook or user-data behavior changes.
• Reviewed source: cad4fc49e18a6833f42405aa9384ddd0f5854b44. Installer SHA-256: a50486ed980ae03cfb838c92daa141e6e4635ecece5bb98c1ae254add2c7ba81. Exact sizes and hashes are in releases/v0.2.25/release.json.
• All four required source CI jobs passed in run 37409818177. The real silent installer lifecycle passed 23 checks on each Windows Server 2022 and 2025 VM in run 37410102291; results bind to candidate 9e17fea, this source and these exact setup bytes.

This release is unsigned, as authorized. Interactive Windows 10/11, SmartScreen/UAC, missing-WebView2 bootstrap and live OAuth remain separate unverified gates. Existing releases are preserved.

SHA-256 a50486ed980ae03cfb838c92daa141e6e4635ecece5bb98c1ae254add2c7ba81
Published 2026-10-06 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.24

Dev Autographs now uses the Axiom Risk Group orbital identity across the desktop, website, browser extension and contribution overlays. Decorative motion can be paused and respects reduced-motion preferences. OS and installer icons use the same mark in static form. Cyril's guide portrait retains its pose and carries the Axiom emblem. User autograph artwork and signed contribution records are preserved.

• Axiom Risk Group LLC publisher metadata and current About us/business contact links. Current donation links removed.
• Readable Terms, Privacy, Intellectual Property, data-behavior, Apache license/NOTICE and original font/frontend third-party notices bundled under legal/. Proved login's encrypted account-key recovery is described explicitly; public signatures do not prove legal ownership or original authorship.
• Canonical source: 6f6c22d11345f8edc866f498dc7ff3f756515955. Windows installer SHA-256: e191909b24280d500245add3b1cdadb7bdbdaa71a0ee3cc334f5d0b00e0b4ab0. Exact release asset hashes and sizes are in releases/v0.2.24/release.json.
• 23 silent installer lifecycle checks passed on each Windows Server 2022 and 2025 VM in run37354871739. Installed resources and CLI bytes match the reviewed source.

The installer is unsigned, as authorized. Interactive Windows 10/11, SmartScreen/UAC, missing-WebView2 bootstrap and live OAuth remain separate unverified gates. Existing published versions remain unchanged.

SHA-256 e191909b24280d500245add3b1cdadb7bdbdaa71a0ee3cc334f5d0b00e0b4ab0
Published 2026-10-05 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.23

Stamp Room and Meet the Dev open a Buy Me a Coffee page in the browser: https://buymeacoffee.com/creal589

Source 70c03c4e6447dbbf4c0050fb332e35c608a9526d. The installer remains unsigned.

SHA-256 e1732a95390360b9991134dcb4a923862738a432035910f3fa00c74cbf0845a2

Dev Autographs v0.2.22

The global pre-push hook stores git's push input in the Windows temp folder under a plain dev-autographs-pre-push name. It no longer creates a dotted random file inside .dev-autographs\hooks, which Windows Security was flagging as IDP.Generic. After this update, the desk rewrites that older hook once. Source 69189b7cd5fcc07072d04ed97e0a32047a3b2fa5; exact asset hashes are in releases/v0.2.22/release.json. The installer remains unsigned. SHA-256 4e681771880710833b36808fd32ab4267782759c04e2fc6f769bb785eacd9dac.

• Temporary push input lives in the OS temp folder, not beside the hook files.

SHA-256 4e681771880710833b36808fd32ab4267782759c04e2fc6f769bb785eacd9dac
Published 2026-09-30 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.21

A second computer can finish GitHub sign-in. The desk accepts the account signing key the registry releases, and the first sign-in deposits that key so it can be sealed. Source 2ca502e6b38e6b60d3071d29e62d1e2f6f50f970; exact asset hashes are in releases/v0.2.21/release.json. The installer remains unsigned. SHA-256 2dce936a904d71994d0a20d49c057063463f321b7109ffc8e39cb6981e86fa49.

• Public pages describe the encrypted key copy, global hooks on the Windows desk, and the overlay a hooked website commit writes.
• Mark lookup shows the public account in words instead of a raw dump.

SHA-256 2dce936a904d71994d0a20d49c057063463f321b7109ffc8e39cb6981e86fa49
Published 2026-09-29 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.20

A signed commit on a website writes the local Shift+D overlay into the repo and restores it if the script is removed. A private repository can take a repo lock when the signing computer already has that owner's GitHub credential. Source 99f8227d3c72c169b511d3e704be62b22c1c803a; exact asset hashes are in releases/v0.2.20/release.json. The installer remains unsigned. SHA-256 e4b5fe6c3a36543da19a4ab2cde0e58d1e460c149c8e2fa0af99baae12517882.

• The overlay file is generated on the computer. The hook does not download a program.
• The registry uses the owner's GitHub credential once for a private repo check and does not store it.

SHA-256 e4b5fe6c3a36543da19a4ab2cde0e58d1e460c149c8e2fa0af99baae12517882
Published 2026-09-29 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.19

Global hooks stay on from Stamp Room. Turning them off asks first, because commits and pushes stop signing. If the hooks are removed, the desk says so and puts them back while the switch stays on. Source 36c70e141ee19706e43d10b97b036497be853287; exact asset hashes are in releases/v0.2.19/release.json. The installer remains unsigned. SHA-256 7434849957d65cc3c963abaaf6f2658ab3b2924c1d9277a99374f5dd355be4d9.

• Windows Security is named when its log records an action on the hook files. Otherwise the notice says no program name was recorded.

SHA-256 7434849957d65cc3c963abaaf6f2658ab3b2924c1d9277a99374f5dd355be4d9
Published 2026-09-29 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.18

Signed codes on the desk and the website match the repository rows. Seals without a repository name stay on their own line. Source fdce1cd22a2b65fdafc72d3e59a8051c2f3c6c46; exact asset hashes are in releases/v0.2.18/release.json. The installer remains unsigned. SHA-256 7b22f13c62016e51a21d96a64cc4ee76803ba5205c9d3cea4e33832e0736d962.

• The desk adds a codes-in-other-repos total, and signature-change dates are smaller. The website repo count is labeled repo locks.

SHA-256 7b22f13c62016e51a21d96a64cc4ee76803ba5205c9d3cea4e33832e0736d962
Published 2026-09-28 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.17

One signing key stays with the GitHub account. Logging in downloads it, signs other devices out, and removes the key from those devices. Source a434b4225649fe215d4901c4c3b28650c3da2c1d; exact asset hashes are in releases/v0.2.17/release.json. The installer remains unsigned. SHA-256 a14b02c959295ffa708450374077d1bb092102583e5d7c6b188ac04259fb385e.

• The ledger stays on the GitHub account, so every device that logs in shows the same repositories and signed-code counts.

SHA-256 a14b02c959295ffa708450374077d1bb092102583e5d7c6b188ac04259fb385e
Published 2026-09-28 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).

Dev Autographs v0.2.16

The desk and the website both read repository names and signed-code counts from the registry account. Source a1b1c0397146961f2308bf8146ec9df62dcc79a2; exact asset hashes are in releases/v0.2.16/release.json. The installer remains unsigned. SHA-256 5650aa73da7d67494106c5198166bec7d9e58479af210a55f87fea5c0e93d916.

• Ledger counts no longer come from a file on one computer. Every device that logs into the same GitHub account reads the registry.
• Separate code and repo hands, and the extra licensed faces, ship in this desk.

SHA-256 5650aa73da7d67494106c5198166bec7d9e58479af210a55f87fea5c0e93d916
Published 2026-09-28 UTC from the installer committed in this repo.

Web desk setup (.ps1 / .sh) installs cli.cjs from this release (same build).