Sutura v1.0.0-rc.1

Unsigned release candidate: Windows executables in this prerelease are unsigned while HuntSoft LLC completes
its verified code-signing identity. Verify the accompanying SHA-256 checksum before use. Unsigned MSIX build
evidence is not published as an installer. Linux and macOS artifacts are also
unsigned, experimental, and untested, and are not supported for production use.

Added

• Reader now syntax-colors recognized HL7 v2 source and gives concatenated documents the same two-level navigation
  model as Professional: message controls select one message at a time, while separate raw-text controls page only a
  large active message.
• MLLP TLS now provides an explicit closed-network revocation-check override in Professional and the CLI while keeping
  operating-system trust and server-name validation mandatory. Revocation availability, revoked-certificate,
  name-mismatch, and general trust failures have distinct guidance, and exchange metadata records the selected mode.
• The Professional desktop and packaged CLI now share an installed exact-release definition directory, with a packaged
  walkthrough for the clearly synthetic v2.5/v2.5.1 import and validation proof.
• Professional now activates directly with Polar-issued keys. Monthly and annual products share a seven-day cached
  subscription entitlement; perpetual keys keep eligible releases available offline after initial validation. The flow
  sends no document or device identity and uses no activation or usage counters.
• The desktop now permits one Sutura process per operating-system account across sessions. Reader and Professional
  share the limit, duplicate launches receive a visible native notice on supported desktops, and the CLI remains
  independently usable beside the open application.

Changed

• The completed pre-signing candidate line is now identified as 1.0.0-rc.1. It remains a checksum-backed,
  unsigned portable prerelease rather than a production-qualified or signed Windows release.
• Professional window and Help & About version labels now use the build's release version without a hard-coded
  pre-1.0 suffix, so the same presentation remains correct for the signed final release.
• Reader release packages do not show Professional activation controls. A Professional package that falls back to
  Reader exposes Polar activation so a purchaser can paste the automatically issued key and restart into Professional.
• English remains the shipped UI language, while resource lookup now honors the current UI culture so future satellite
  resource files can be added without replacing the localization foundation.
• Versioning guidance now describes the 1.0 prerelease and stable Semantic Versioning contract instead of the retired
  0.x development line.
• Public release publication now verifies that private vulnerability reporting remains enabled and synchronizes the
  exact tagged security policy to the public repository root before creating a release, keeping reporting guidance
  visible on GitHub's Security tab.
• Customer-facing release status and current-version guidance now identify the 1.0 release-candidate line instead of
  retaining generic pre-1.0 or old v0.54 labels.
• Push and pull-request verification now run the complete Release build and test suite on Linux x64 and macOS arm64 in
  addition to Windows; release-package jobs retain their per-platform suite, and platform artifacts remain
  experimental until separate acceptance is complete.
• License guidance now states that Reader/Professional selection and CLI entitlement are evaluated once per process
  startup from the operating system's UTC clock. The direct evaluator also fails closed if a subscription invariant is
  missing.
• Professional activation now presents plan and entitlement dates as a compact detail card and offers a guarded
  cross-platform restart into the newly entitled shell. The replacement process waits for the current instance to exit
  before taking the single-instance lock.
• Reader and Professional document tabs now share compact labels with full-name tooltips. Bounded large-text navigation
  is labeled as vertical text chunks so it cannot be confused with the editor's horizontal scrolling.
• Professional Readable ER7 now retains semantic segment, delimiter, escape, null-value, and ED-payload coloring. An
  explicit Readable or Full ER7 choice remains selected across raw-text pages and concatenated messages in the current
  document; newly opened large-value documents still begin in Readable ER7. Full ER7 paging now includes direct first-
  and last-page controls so trailing segments after an enormous payload remain one action away.
• When a Full ER7 raw page ends inside an enormous segment, Professional now shows a clearly labeled, syntax-colored
  virtual preview docked beneath the exact editor. It shows the segments that follow—including intermediate segments
  before an NTE—and offers a direct jump to the first segment's exact source page. The preview never changes,
  duplicates, or reorders the Full ER7 source.
• New issue drafts now make the sensitive-attachment review an unchecked privacy confirmation rather than wording it as
  an already-completed assertion.
• Professional feature guidance now says exactly that definition-backed validation uses explicitly imported catalogs;
  the bundled synthetic proof is not represented as authoritative HL7 content.

Fixed

• Reader find and basic-validation issue navigation now activate the owning concatenated message and raw-text page
  instead of leaving all messages in an ineffective single Page 1 of 1 view.

Sutura v0.56.0-rc.5

Unsigned release candidate: Windows executables in this prerelease are unsigned while HuntSoft LLC completes
its verified code-signing identity. Verify the accompanying SHA-256 checksum before use. Unsigned MSIX build
evidence is not published as an installer. Linux and macOS artifacts are also
unsigned, experimental, and untested, and are not supported for production use.

Fixed

• The Windows release workflow now reads the shared release version through the canonical versioning helper, avoiding
  XML element type names in portable-package paths when extracting verified Reader and Professional payloads for MSIX.

Sutura v0.56.0-rc.3

Unsigned release candidate: Windows executables in this prerelease are unsigned while HuntSoft LLC completes
its code-signing setup. Verify the accompanying SHA-256 checksum before use. Linux and macOS artifacts are also
unsigned, experimental, and untested, and are not supported for production use.

Fixed

• CLI package-set, mapping-build, and extraction outputs now canonicalize symbolic links in the user-selected output
  directory before enforcing contained artifact paths, allowing standard macOS /var temporary directories without
  weakening generated-path traversal checks.
• The notice-countdown test now tolerates heavily loaded release runners without changing the production countdown.