FileFlow 0.2.0-rc.2 — Windows pre-release

FileFlow 0.2.0-rc.2 — Windows pre-release

Unsigned release candidate for Windows 11 x64. Not a stable release, production recommendation or independent security audit.

RC.2 source and tag · Windows guide · 简体中文说明

Download and integrity

Download the attached FileFlow_0.2.0-rc.2_x64-setup.exe (4,525,195 bytes, approximately 4.32 MiB). WebView2 Evergreen Runtime 154+ must already be installed; FileFlow checks it and does not silently download it.

SHA-256:

36E03964C48B97CA9205239E4C472655DF62042DF7DCE0DABF9800F9AD8D6054

In PowerShell, run this in the download directory before installation:

(Get-FileHash -LiteralPath .\FileFlow_0.2.0-rc.2_x64-setup.exe -Algorithm SHA256).Hash

Stop if the value differs. Save in-memory results and close FileFlow normally, then use the per-user installer in a dedicated application directory. Authenticode: NotSigned; publisher identity is not authenticated. SmartScreen or unknown-publisher prompts may occur. Respect Windows policy and do not disable protection.

What this RC changes

• Compiler source-path remapping removes the known developer-workstation prefixes that occurred 142 times in the previous local RC.1 main executable. Checks of the approved RC.2 installer, 25 extracted files and separate frontend output found none of those known prefixes; PE CodeView checks found no absolute PDB reference. These are scoped checks, not universal arbitrary-encoding or independent-audit claims.
• Five exact, unmodified MPL-covered source archives, their index and a bilingual recipient notice accompany the existing frontend/PDF/native notices. All 18 installed license/source resources are content-verified.
• Version identifiers update to RC.2. Conversion/OCR/PDF behavior, file grants/IPC/CSP, limits, frozen algorithms and locked third-party versions are unchanged; no feature or unrelated refactor was added.

The source at this tag includes the exact 216 reviewed product/build-resource fingerprints used for this installer. Source manifest · Build provenance. The original local history and RC.1 artifacts are preserved; public RC.1 remains the parent source/tag, with its installer unuploaded.

Third-party notices and covered source

After installation, open the application's licenses directory. It contains full frontend, PDF and native notices, DISTRIBUTION-NOTICE.txt, MPL-covered-sources.json and five MPL-*.crate source archives. These are ordinary gzip-compressed tar archives available offline using standard archive tools; the index lists exact versions, official source URLs and SHA-256 values, matching Cargo.lock. Upstream source/notices are unmodified and retain their own licenses.

Windows.Media.Ocr recognizers/language resources and WebView2 are Windows/Microsoft components, not redistributed trained models or runtime installers. No model/language-resource download is performed silently. No general open-source license is assigned to FileFlow first-party code; public visibility is separate from general source copying/modification/redistribution permission. This does not restrict third-party covered-source rights.

Validation scope and remaining risks

• RC.1 was personally accepted by the owner on one Windows 11 machine, including installed native import/save, upgrade/uninstall/reinstall and physical-offline checks. Those owner-reported results are retained separately from automated evidence and reused because core/NSIS logic is unchanged. A new complete RC.2 manual/native-dialog/physical-disconnect acceptance was not repeated.
• RC.2 adds 6 focused existing native file checks, 6 checks on the exact installer-extracted EXE, and 2 scoped installed-resource/uninstall checks. Coverage includes real fictional read/save, existing/raced-target no-overwrite, pinned parent/temp protection, actual Junction import/save rejection with target contents preserved, local CSV/Windows OCR/PDF, ungranted-token rejection, and packaged resource integrity. The scoped installer check changes only test product identities/locations; it is not the unmodified production installer's full GUI/upgrade acceptance.
• Privileged Windows symbolic-link assertions remain unverified. Fixture creation still soft-skips with Win32 1314. Real Junction/race/handle-pinning results and shared reparse rejection support a limited RC with this disclosed residual; they are not a complete symbolic-link replacement. Earlier fixture failures are retained, not relabeled PASS. No Developer Mode, privilege or security-policy change was made.
• The exact-package reload/smoke test blocks external renderer HTTP and disables browser caching. This is not physical disconnection or proof of zero Windows/WebView2 networking. Windows dialogs/caches and protected local WebView2 crash dumps can remain; dumps may contain memory. Official crash uploads are disabled, while OS/runtime diagnostics remain outside FileFlow's complete control. Cleanup reduces remnants, not earlier disk writes.
• Compatibility is limited to the stated Windows 11 x64/WebView2 floor and installed OS OCR resources. Additional machines, unusual usernames, actual missing-runtime machines and hours-long endurance are not comprehensively covered. OCR can make recognition errors and may use the disclosed Latin fallback. Static PDF tools do not retain annotations, forms, bookmarks, attachments or digital signatures. Keep originals.

The owner explicitly authorized publication of this exact RC.2 installer and matching source/tag after the scoped distribution review. A bounded independent review found no Critical/Important technical defect; this is not a production or security certification. Report problems only with invented minimal samples—never upload private files, paths, raw logs, personal screenshots or crash dumps.

简体中文： 本版为未签名的 Windows RC 预发布，不是正式稳定版。下载后先按以上 SHA-256 校验；不要关闭系统安全防护。真实 Junction 拒绝和关键文件操作已验证，但特权符号链接断言仍未覆盖。Windows/WebView2 诊断、受保护本地 dump、机器及持续运行覆盖限制继续披露。RC.1 的单机本人验收按未改行为复用，不冒称完整重做 RC.2 人工/物理断网验收。第三方完整许可与五份离线 MPL 源码在安装目录的 licenses 中，自有代码未擅自增加开源许可。