Skip to content

CodeForge v0.1.0

Choose a tag to compare

@Forger-Digital-Solutions Forger-Digital-Solutions released this 28 Aug 22:12
· 11 commits to master since this release

CodeForge v0.1.0 is the first remotely release-certified Windows build of the CodeForge autonomous coding workspace.

Downloads

Installer — CodeForge-Setup-0.1.0.exe
One-click, per-user Windows installer.

Portable — CodeForge-Portable.exe
Portable Windows build (no installation required).

Release verification

This release was produced and verified by GitHub Actions on a GitHub-hosted windows-2022 runner (Visual Studio 2022 / MSVC v143), from exact source commit:

f2bb7164e0517aad5e3355baac183458b7a66db1

GitHub Actions run: 33180784720 (workflow windows-desktop).

Remote verification completed successfully:

556/556 tests PASS
55/55 test files PASS
0 skipped

Typecheck                        PASS
Build                            PASS
Web build                        PASS
Electron native-module rebuild   PASS
Windows packaging                PASS
Packaged persistence smoke       PASS
Packaged runtime/recovery smoke  PASS

The downloaded CI artifacts were independently audited after the run:

ASAR:                         710 entries
Unpacked app native modules:  1 (better_sqlite3.node) — placement verified
Runtime licenses:             present
Credential leakage:           none found
Developer/build-path leakage: none found

SHA-256

CodeForge-Portable.exe
ff10ca21ff69f156c81390613fa707e782d714f0f143be202e0d928c74e14195

CodeForge-Setup-0.1.0.exe
b5b451a4b943a7f5da6542f4aa0227e113025d556eba2c82ab50d8d21a72e4b8

CodeForge-Setup-0.1.0.exe.blockmap
1f81beb030c358564b1d2be830477c9a2dd804c5c0468378d2a8a6a1ec1faa4d

A SHA256SUMS.txt file is included with the release so the downloaded bytes can be verified with sha256sum -c SHA256SUMS.txt.

Code-signing notice

CodeForge v0.1.0 is currently distributed without an Authenticode signing certificate. Windows may therefore display a SmartScreen or "unknown publisher" warning. The distributed files are the exact artifacts produced by the verified GitHub Actions release run above; their SHA-256 values are published so the downloaded bytes can be independently verified.

Provider verification note

Deterministic ForgeZero / provider / routing security tests passed as part of the release suite. Live provider calls were not performed during release certification because no authorized provider credential was supplied to the release gate.

Security boundaries

The release certification found no regression in:

ForgeZero enforcement
free-only model enforcement
paid-fallback prevention
local-fallback prevention
approval enforcement
workspace path isolation
renderer credential isolation
verification-process secret isolation

CodeForge's default model boundary remains free, remote, cloud-hosted, and verified, with no paid fallback and no local fallback.