v0.1.4-windows-x86_64.1

GChat 0.1.4 for Windows x64

Download the NSIS .exe installer and install for your current user. The installer and application use the pinned Gh0st self-signed certificate; Windows may show an unknown-publisher or reputation prompt. Verify the published detached signature/hash before installation. No changes to trusted certificate stores are required.

Native Windows Server 2022 x64/MSVC source qualification and actual per-user install, encrypted-profile create/reopen, wrong-passphrase rejection, graceful shutdown and uninstall passed. Windows 11 GUI testing remains outstanding.

Remaining scope:

• Windows Server 2022 x64/MSVC was qualified. Windows 11, interactive desktop GUI behavior and accessibility were not exercised by this runner.
• This installer, application and uninstaller use the pinned Gh0st self-signed Authenticode certificate. Public CA trust, SmartScreen reputation and a Microsoft Store release are not claimed.
• Installed service checks used offline fresh/reopened encrypted profiles and rejected a wrong passphrase. Live network onboarding, invitations, messaging and file transfer through this installed Windows artifact remain unqualified.
• Upgrade/rollback, abrupt termination, power-loss durability and long-running soak behavior are not qualified by the install/reopen/uninstall journey.
• All-egress and statistical traffic-analysis privacy remain unqualified; timing, size and linkability improvements are outstanding under production-minutes-v1. No 24-hour campaign is claimed.
• Original Windows20 native checks were reused for the exact application source pair by a separately bound packaging controller. One omitted hidden generated Cargo config was reconstructed with its original recorded SHA256; original native receipts and ZIP remain unchanged.
• The exact signed installer was subsequently reused by a separately bound verification controller correcting only its temporary-profile/stop-file ownership and DACL. Original failed startup remains retained; no executable rebuild or native-CI repetition was performed.
• The native workspaces retain their explicit separate-suite exclusions. This Windows bundle does not qualify SDK mobile packages or another platform.

Exact sources: GChat 3e09b2d / GComs 7eec615e4478a166ee71f3144bc04c3070c92f72.
Installer SHA256: 832d2db07e44e349a038428c29a48e8a97c37b8e25463ab86d01f29b62515cad.
Native qualification: https://github.com/IggyGG/gchat/actions/runs/35650757465 (native passes; original packaging failure retained). Packaging recovery: https://github.com/IggyGG/gchat/actions/runs/35662111776 (signed build passed; original profile fixture failed). Installed lifecycle verification using unchanged signed bytes: https://github.com/IggyGG/gchat/actions/runs/35665175714

v0.1.4-macos-x86_64.2

GChat 0.1.4 for Intel Macs, signed by Movsai AB (Gh0st) with Apple Developer ID and accepted by Apple notarization. The DMG has a stapled ticket and passed Gatekeeper checks with quarantine applied. This replaces the self-signed .1 download without changing application code or saved-profile formats.

The retained native CI and fresh signed-app install/window/service/profile checks passed. Installed production-network messaging/file transfer, extended GUI journeys and statistical traffic-analysis privacy remain unqualified; no 24-hour campaign is required by the production release policy. Apple Silicon has its separate download.

v0.1.4-macos-x86_64.1

GChat 0.1.4 for Intel Mac

Production download for Intel macOS, signed by Gh0st using the pinned self-signed publisher identity. This DMG is not Apple-notarized; macOS may require explicit approval to open it.

Sources: GChat ab3697a8bb98962f7a765254a6c5d2b6c8b6259e with GComs 398c751474dda2a361eca0cf0e28308c192c68fa. Apple Silicon and Linux downloads retain their separate release artifacts and source bindings.

Official native CI passed on this exact pair: GChat Rust160 passed with one explicit separate-suite exclusion; GComs Rust926 passed with six explicit exclusions. The native source browser suite includes touch-navigation and invitation-picker fixes. This same pair produced the signed DMG and passed final source/dependency checks.

The actual copied DMG application passed native signature verification, offline encrypted-profile creation/reopen and wrong-passphrase refusal. Its graphical process opened a native window and autostarted the GC2 service. All owned processes, temporary profiles, installation and mounts were cleaned up.

Still unqualified: Apple notarization/Gatekeeper downloaded-app acceptance; an installed live-network invitation, messaging, file and recovery journey; installed rendered interactions beyond window/IPC startup; upgrades/rollback and abrupt termination/power-loss durability. Statistical and all-egress traffic-analysis privacy remains unfinished; this release is not privacy-qualified. The production release policy does not require 24-hour campaigns.

v0.1.4-macos-aarch64.2

GChat 0.1.4 for Apple Silicon Macs, signed by Movsai AB (Gh0st) with Apple Developer ID and accepted by Apple notarization. The DMG has a stapled ticket and passed Gatekeeper checks with quarantine applied. This replaces the self-signed .1 download without changing application code or saved-profile formats.

The retained native CI and fresh signed-app install/window/service/profile checks passed. Installed production-network messaging/file transfer, extended GUI journeys and statistical traffic-analysis privacy remain unqualified; no 24-hour campaign is required by the production release policy. Intel Macs have a separate download.

v0.1.4-macos-aarch64.1

GChat 0.1.4 for Apple Silicon Mac

Production download for macOS ARM64, signed by Gh0st using the pinned self-signed publisher identity. The DMG is not Apple-notarized; macOS may require explicit approval to open it.

This build uses GChat d78b6440db216f14fb019ee3a369a20d1a8c11b6 and GComs 31857151d822581205e68bdacbbb1fc1f0993c82. It is independent of the Linux release and does not qualify Intel Mac.

Native ARM Mac GChat/GComs CI passed with its explicit separate-suite exclusions. The exact DMG and copied application passed native signature verification, offline encrypted-profile creation/reopen and wrong-passphrase refusal. The actual graphical application opened a native window and launched its GC2 service. All owned processes, temporary profiles, installation and mounts were cleaned up.

The DMG was recovered unchanged from a packaging attempt that failed during its verification helper. A separate successful verification run inspected the artifact and exercised the application without rebuilding or resigning. The original failed report remains retained. The original post-build source/derived-input rechecks did not execute, and the original optimized native-CI executable was not retained for byte comparison. Retained source archives and dependency provenance were independently checked.

Still unqualified: Apple notarization/Gatekeeper downloaded-app acceptance, an installed live-network invitation/messaging/file/recovery journey, full rendered desktop interaction, upgrades/rollback and abrupt termination/power-loss durability. Statistical and all-egress traffic-analysis privacy remains unfinished; this release is not privacy-qualified. The production release policy does not require 24-hour campaigns.

v0.1.4-android-x86_64.2

GChat 0.1.4 for Android x86_64

Install the APK directly on Android 8 or later. It is signed with the pinned Gh0st publisher key. Android may ask you to allow installation from your browser.

The ARM64 build is intended for most phones; x86_64 is available for compatible devices and emulators. Seven native Android lifecycle/notification/unlock tests passed. Actual profile, background-lock, reopen and invitation file-picker checks passed using the same-source AAB-derived x86_64 split installation on the API35 emulator. The standalone APK is separately signature/library verified; that packaging was not the installed test artifact. ARM64 was compiled, packaged and signature/alignment checked; physical-device testing is deferred.

The app uses explicit unlock after returning from a picker. Select Continue after unlocking to restore the chosen invitation. Network access still requires a valid network invitation.

Remaining qualification and implementation scope:

• Physical Android devices, battery use and ARM64 on-device execution remain unqualified; the installed lifecycle and picker journey ran on the same-source x86_64 API 35 emulator.
• Live network onboarding, remote messaging, streamed file delivery, reconnect with live peers and actual FCM notification delivery are not qualified by this offline profile/picker journey. Native notification registration/opt-out support is included; usable push requires supporting relays and the configured gateway.
• The invitation picker fixture verifies bounded same-profile continuation after lock and explicit unlock; its text was not submitted to a provider. Outgoing native file-transfer selection and delivery remain unqualified.
• All-egress and statistical traffic-analysis privacy remain unqualified; traffic timing, size and linkability improvements are outstanding under production-minutes-v1. No 24-hour campaign is claimed.
• This is a directly installed Gh0st-signed APK, not a Google Play release. Android 8/API26 is the declared minimum; this lifecycle was exercised on API35.
• No mobile full-workspace native CI, live upgrade/rollback, power-loss durability or release qualification for other platforms is inferred from this build.

Exact sources: GChat c9a7563 / GComs b864f9ba6660148589d1e67821f04e98064933ef.
APK SHA256: e5b3a6cc78e8c343dd576830171a68448f4913c22605ab06f7838a6ce442b832.
Native workflow: https://github.com/IggyGG/gchat/actions/runs/35657384665

v0.1.4-android-x86_64.1

GChat 0.1.4 for Android x86_64

Install the APK directly on Android 8 or later. It is signed with the pinned Gh0st publisher key. Android may ask you to allow installation from your browser.

The ARM64 build is intended for most phones; x86_64 is available for compatible devices and emulators. Actual profile, background-lock, reopen and invitation file-picker checks passed on the x86_64 API35 emulator. ARM64 was compiled, packaged and signature/alignment checked; physical-device testing is deferred.

The app uses explicit unlock after returning from a picker. Select Continue after unlocking to restore the chosen invitation. Network access still requires a valid network invitation.

Remaining qualification and implementation scope:

• Physical Android devices, battery use and ARM64 on-device execution remain unqualified; the installed lifecycle and picker journey ran on the same-source x86_64 API 35 emulator.
• Live network onboarding, remote messaging, streamed file delivery, reconnect with live peers, notifications and FCM/gateway integration are not qualified by the offline profile/picker journey.
• The invitation picker fixture verifies bounded same-profile continuation after lock and explicit unlock; its text was not submitted to a provider. Outgoing native file-transfer selection and delivery remain unqualified.
• All-egress and statistical traffic-analysis privacy remain unqualified; traffic timing, size and linkability improvements are outstanding under production-minutes-v1. No 24-hour campaign is claimed.
• This is a directly installed Gh0st-signed APK, not a Google Play release. Android 8/API26 is the declared minimum; this lifecycle was exercised on API35.
• No mobile full-workspace native CI, live upgrade/rollback, power-loss durability or release qualification for other platforms is inferred from this build.

Exact sources: GChat ab3697a / GComs 398c751474dda2a361eca0cf0e28308c192c68fa.
APK SHA256: 8cb453e3faf9b34b8aee1ce0330aa19f5cdc5ef13da383b35240f238adfac3aa.
Native workflow: https://github.com/IggyGG/gchat/actions/runs/35616288196

v0.1.4-android-arm64.2

GChat 0.1.4 for Android arm64-v8a

Install the APK directly on Android 8 or later. It is signed with the pinned Gh0st publisher key. Android may ask you to allow installation from your browser.

The ARM64 build is intended for most phones; x86_64 is available for compatible devices and emulators. Seven native Android lifecycle/notification/unlock tests passed. Actual profile, background-lock, reopen and invitation file-picker checks passed using the same-source AAB-derived x86_64 split installation on the API35 emulator. The standalone APK is separately signature/library verified; that packaging was not the installed test artifact. ARM64 was compiled, packaged and signature/alignment checked; physical-device testing is deferred.

The app uses explicit unlock after returning from a picker. Select Continue after unlocking to restore the chosen invitation. Network access still requires a valid network invitation.

Remaining qualification and implementation scope:

• Physical Android devices, battery use and ARM64 on-device execution remain unqualified; the installed lifecycle and picker journey ran on the same-source x86_64 API 35 emulator.
• Live network onboarding, remote messaging, streamed file delivery, reconnect with live peers and actual FCM notification delivery are not qualified by this offline profile/picker journey. Native notification registration/opt-out support is included; usable push requires supporting relays and the configured gateway.
• The invitation picker fixture verifies bounded same-profile continuation after lock and explicit unlock; its text was not submitted to a provider. Outgoing native file-transfer selection and delivery remain unqualified.
• All-egress and statistical traffic-analysis privacy remain unqualified; traffic timing, size and linkability improvements are outstanding under production-minutes-v1. No 24-hour campaign is claimed.
• This is a directly installed Gh0st-signed APK, not a Google Play release. Android 8/API26 is the declared minimum; this lifecycle was exercised on API35.
• No mobile full-workspace native CI, live upgrade/rollback, power-loss durability or release qualification for other platforms is inferred from this build.

Exact sources: GChat c9a7563 / GComs b864f9ba6660148589d1e67821f04e98064933ef.
APK SHA256: 1d43eaf3082eac945d586763bf72f6def081543565ce9d105bca728b2456c621.
Native workflow: https://github.com/IggyGG/gchat/actions/runs/35657384665

v0.1.4-android-arm64.1

GChat 0.1.4 for Android arm64-v8a

Install the APK directly on Android 8 or later. It is signed with the pinned Gh0st publisher key. Android may ask you to allow installation from your browser.

The ARM64 build is intended for most phones; x86_64 is available for compatible devices and emulators. Actual profile, background-lock, reopen and invitation file-picker checks passed on the x86_64 API35 emulator. ARM64 was compiled, packaged and signature/alignment checked; physical-device testing is deferred.

The app uses explicit unlock after returning from a picker. Select Continue after unlocking to restore the chosen invitation. Network access still requires a valid network invitation.

Remaining qualification and implementation scope:

• Physical Android devices, battery use and ARM64 on-device execution remain unqualified; the installed lifecycle and picker journey ran on the same-source x86_64 API 35 emulator.
• Live network onboarding, remote messaging, streamed file delivery, reconnect with live peers, notifications and FCM/gateway integration are not qualified by the offline profile/picker journey.
• The invitation picker fixture verifies bounded same-profile continuation after lock and explicit unlock; its text was not submitted to a provider. Outgoing native file-transfer selection and delivery remain unqualified.
• All-egress and statistical traffic-analysis privacy remain unqualified; traffic timing, size and linkability improvements are outstanding under production-minutes-v1. No 24-hour campaign is claimed.
• This is a directly installed Gh0st-signed APK, not a Google Play release. Android 8/API26 is the declared minimum; this lifecycle was exercised on API35.
• No mobile full-workspace native CI, live upgrade/rollback, power-loss durability or release qualification for other platforms is inferred from this build.

Exact sources: GChat ab3697a / GComs 398c751474dda2a361eca0cf0e28308c192c68fa.
APK SHA256: e344b5bc565044767372d46c22e572ffc5b6e52ee200a15b07cccccf24796d44.
Native workflow: https://github.com/IggyGG/gchat/actions/runs/35616288196

GChat 0.1.3 — invitations and channel controls

GChat 0.1.3 adds one invitation for a network and starting channel, separate identities/history/files for joined networks, and authenticated channel topics, nicknames, leaving, ownership transfer and closure. Channel details expose these actions without cluttering the workspace.

Linux .deb and AppImage packages are signed by Gh0st. Existing profiles and message history are preserved.

Privacy remains work in progress: traffic timing, connection lifetimes and file volume may be distinguishable. This release is not statistically privacy-qualified. Statistical privacy gates and 24-hour campaigns are not release requirements, as directed by the owner.

Windows, macOS and mobile qualification remain deferred.

For source builds, use release/gchat-0.1.3 in both GChat and GComs. The release manifest records the exact paired commits. Mainline integration with the separate runtime refactor is deferred.