CodeForge v0.1.0
CodeForge v0.1.0 is the first remotely release-certified Windows build of the CodeForge autonomous coding workspace.
Downloads
Installer — CodeForge-Setup-0.1.0.exe
One-click, per-user Windows installer.
Portable — CodeForge-Portable.exe
Portable Windows build (no installation required).
Release verification
This release was produced and verified by GitHub Actions on a GitHub-hosted windows-2022 runner (Visual Studio 2022 / MSVC v143), from exact source commit:
f2bb7164e0517aad5e3355baac183458b7a66db1
GitHub Actions run: 33180784720 (workflow windows-desktop).
Remote verification completed successfully:
556/556 tests PASS
55/55 test files PASS
0 skipped
Typecheck PASS
Build PASS
Web build PASS
Electron native-module rebuild PASS
Windows packaging PASS
Packaged persistence smoke PASS
Packaged runtime/recovery smoke PASS
The downloaded CI artifacts were independently audited after the run:
ASAR: 710 entries
Unpacked app native modules: 1 (better_sqlite3.node) — placement verified
Runtime licenses: present
Credential leakage: none found
Developer/build-path leakage: none found
SHA-256
CodeForge-Portable.exe
ff10ca21ff69f156c81390613fa707e782d714f0f143be202e0d928c74e14195
CodeForge-Setup-0.1.0.exe
b5b451a4b943a7f5da6542f4aa0227e113025d556eba2c82ab50d8d21a72e4b8
CodeForge-Setup-0.1.0.exe.blockmap
1f81beb030c358564b1d2be830477c9a2dd804c5c0468378d2a8a6a1ec1faa4d
A SHA256SUMS.txt file is included with the release so the downloaded bytes can be verified with sha256sum -c SHA256SUMS.txt.
Code-signing notice
CodeForge v0.1.0 is currently distributed without an Authenticode signing certificate. Windows may therefore display a SmartScreen or "unknown publisher" warning. The distributed files are the exact artifacts produced by the verified GitHub Actions release run above; their SHA-256 values are published so the downloaded bytes can be independently verified.
Provider verification note
Deterministic ForgeZero / provider / routing security tests passed as part of the release suite. Live provider calls were not performed during release certification because no authorized provider credential was supplied to the release gate.
Security boundaries
The release certification found no regression in:
ForgeZero enforcement
free-only model enforcement
paid-fallback prevention
local-fallback prevention
approval enforcement
workspace path isolation
renderer credential isolation
verification-process secret isolation
CodeForge's default model boundary remains free, remote, cloud-hosted, and verified, with no paid fallback and no local fallback.