Linux package preview for Kitrove RC4.2

Linux package preview for Kitrove RC4.2

These x86-64 Debian and RPM packages contain the existing authenticated CLI from
v0.1.0-rc.4.2. This package-only prerelease does not rebuild the executable or
change that application release. It is not a stable release.

Use SHA256SUMS.downloads to check downloaded filenames. GitHub changed the tilde
in uploaded filenames to a period; package contents and internal versions remain
unchanged. The original SHA256SUMS records local build filenames and is retained
for traceability. Both checksum files identify the same package bytes.

Upstream source: f9f4e43.
Packaged executable SHA-256:
f9079cf2f0d280b92f6ce50846d5d05c6440dcd56b8efe688b252df35c33df3f.

Native tests on Ubuntu24.04 and Fedora44 covered installation, RC4.1-to-RC4.2
upgrade, ordinary-user version/help, removal, foreign-package ownership refusal
and isolated synthetic canary preservation. Signed local repositories passed
upgrade and tampered-metadata refusal tests. This does not establish real user
state migration, other Linux targets or a public APT/DNF channel.

APT/DNF HTTPS repository setup is still pending. Do not treat these assets as an
available package-manager repository. Published repository instructions will
follow HTTPS acceptance. The RPM carries the dedicated Kitrove package signature;
the Debian package will be authenticated through signed APT metadata. Checksums
alone are not publisher authentication.

Public key primary fingerprint:
0C0E4DE98C93CD1059995A3974386FFE8762A9E1.
Verify it against the reviewed packaging/SIGNING.md in Kapital-Labs/kitrove.
The private signing key is not part of this release.

Packages own the CLI and license notices, not application data. Finish pending
Kitrove transactions before changing versions. Check for a standalone executable
before installing; Linux package managers can overwrite unowned files. Do not
run the standalone Kitrove installer against a package-manager-owned binary.

0.1.0-rc.4.2

Release Notes

Security

• Update rustls to 0.23.46 for RUSTSEC-2026-0346 through RUSTSEC-2026-0349.
  Keep the existing TLS provider and feature selection; do not suppress advisories.

Added

• Product website and getting-started guide, with a gated static deployment workflow.

Includes RC4.1's interactive onboarding, configure flow and second-computer setup.
Declares RC4.1 format-compatible for explicit rollback because no application-state,
lifecycle or sync format changes. Compatibility is not a recommendation to return
to an older dependency version. Publication and exact-artifact validation remain
pending; clean-machine and remaining native-platform acceptance gates stay open.

kitrove-cli 0.1.0-rc.4.2

Install kitrove-cli 0.1.0-rc.4.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.2/kitrove-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.2/kitrove-cli-installer.ps1 | iex"

Download kitrove-cli 0.1.0-rc.4.2

File	Platform	Checksum
kitrove-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

kitrove-installer 0.1.0-rc.4.2

Install kitrove-installer 0.1.0-rc.4.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.2/kitrove-installer-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.2/kitrove-installer-installer.ps1 | iex"

Download kitrove-installer 0.1.0-rc.4.2

File	Platform	Checksum
kitrove-installer-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-installer-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-installer-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-installer-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Version 0.1.0-rc.4.1

Release Notes

kitrove-cli 0.1.0-rc.4.1

Install kitrove-cli 0.1.0-rc.4.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.1/kitrove-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.1/kitrove-cli-installer.ps1 | iex"

Download kitrove-cli 0.1.0-rc.4.1

File	Platform	Checksum
kitrove-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

kitrove-installer 0.1.0-rc.4.1

Install kitrove-installer 0.1.0-rc.4.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.1/kitrove-installer-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.4.1/kitrove-installer-installer.ps1 | iex"

Download kitrove-installer 0.1.0-rc.4.1

File	Platform	Checksum
kitrove-installer-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-installer-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-installer-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-installer-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.1.0-rc.3

Kitrove 0.1.0-rc.3

Evaluation prerelease, not a supported stable release. Do not use with irreplaceable
agent environments. RC3 declares RC2 rollback-compatible; binary rollback does not
roll back application data.

Changes since RC2

• Authenticated installer payload staging on Unix and Windows.
• Mac native-signature-gated prepare-installer and verify-prepared-installer
  commands, without automatic launch.
• Bounded Mac inspection helpers with retained process ownership and explicit cleanup.
• The reviewed faster-hex x86/AVX2 out-of-bounds-read dependency correction.
• Expanded Mac/Linux state preservation, refusal and interruption/recovery testing.

Apple Silicon Mac: Homebrew (experimental)

With Homebrew already installed:

brew install --cask kapital-labs/tap/kitrove-rc
kitrove --version
kitrove --help

This installs RC3's signed CLI directly from the official tap.
You trust Homebrew and this tap to select the checksum-pinned package; maintainers
verify release provenance before package publication. No separate Kitrove installer
or source build is needed for this route. It does not initialize Kitrove or change
harness configuration. Homebrew owns this binary, so do not use kitrove-installer
to replace it. Remove it with brew uninstall --cask kapital-labs/tap/kitrove-rc;
Kitrove state and harness files are retained.

Apple Silicon only for now. Warm-Mac install/version/help/removal testing does not
establish clean-machine/offline first launch or Homebrew upgrade/rollback guarantees.
Keep quarantine and Gatekeeper enabled.

Downloads and first-execution trust

Start with the pinned installer guide.
An independently trusted or reviewed-source-built verifier is required before
executing a downloaded installer. The downloaded installer cannot establish trust
in its own first execution. Do not pipe downloaded scripts into a shell or
PowerShell, remove quarantine, or disable Gatekeeper.

Target	CLI archive	Installer archive/container
Apple Silicon Mac	CLI	Installer archive, signed and stapled DMG
Intel Mac	CLI	Installer archive, signed and stapled DMG
x86-64 Linux	CLI	Installer
x86-64 Windows	CLI	Installer

Adjacent .sha256 files and the attested sha256.sum are in the release assets.
Checksums alone are not provenance. The source commit is
4212327d45097c1826e64a0a8f6e556c40bffc7f, tagged v0.1.0-rc.3.
Verify the selected artifact with an independently trusted GitHub CLI:

gh attestation verify <downloaded-artifact> \
  --repo Kapital-Labs/kitrove \
  --signer-workflow Kapital-Labs/kitrove/.github/workflows/release.yml \
  --source-ref refs/tags/v0.1.0-rc.3 \
  --source-digest 4212327d45097c1826e64a0a8f6e556c40bffc7f \
  --signer-digest 4212327d45097c1826e64a0a8f6e556c40bffc7f \
  --deny-self-hosted-runners

Follow the guide for exact bundle selection, native verification, private staging
and explicit state-root selection. Installer preparation is not automatic execution.

Verified for this candidate

• Production release workflow
  succeeded for all four targets. Temporary signing activation was removed.
• All 27 public assets passed the exact inventory/checksum checks; all 17 directly
  attested subjects passed independent verification pinned to this tag and commit.
• Both Mac DMGs passed source-verifier provenance, native signature/staple and
  read-only exact-payload checks, followed by detach without payload execution.
• On the existing Apple Silicon Mac (macOS 26.6), an independently source-built
  installer passed fresh RC2 installation, RC3 upgrade and RC2 rollback, including
  preflight and history retention. Rollback restored RC2's exact executable digest.
  This used a fresh private empty-state fixture, not the operator's real state.

This is not clean-Mac quarantined online/offline first-launch acceptance, RC3
interruption/populated-state acceptance, Intel/Windows/Linux RC3 lifecycle
acceptance, or the two-machine product roundtrip. These remain separate gates.
No downloaded installer was executed in this checkpoint.

Report vulnerabilities through private reporting,
not public issues containing private content or credentials.

0.1.0-rc.2

Release Notes

Fixed

• Production provenance verification accepts the pinned repository's immutable-ID
  release-environment identity while retaining independent tag, commit and signature checks.

Declares RC1.3 rollback-compatible: no application-state or lifecycle format changed.
Publication and two-version native acceptance remain pending. This is not a stable release.

kitrove-cli 0.1.0-rc.2

Install kitrove-cli 0.1.0-rc.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.2/kitrove-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.2/kitrove-cli-installer.ps1 | iex"

Download kitrove-cli 0.1.0-rc.2

File	Platform	Checksum
kitrove-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

kitrove-installer 0.1.0-rc.2

Install kitrove-installer 0.1.0-rc.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.2/kitrove-installer-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.2/kitrove-installer-installer.ps1 | iex"

Download kitrove-installer 0.1.0-rc.2

File	Platform	Checksum
kitrove-installer-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-installer-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-installer-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-installer-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.1.0-rc.1.3

Release Notes

Replacement for the unpublished RC1.2 build. Earlier failed tags remain unchanged.

Fixed

• Shared source archives accept either known release product name, matching the packager's output.

Public-artifact and clean-machine acceptance remain pending. No earlier version
is declared rollback-compatible.

kitrove-cli 0.1.0-rc.1.3

Install kitrove-cli 0.1.0-rc.1.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.1.3/kitrove-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.1.3/kitrove-cli-installer.ps1 | iex"

Download kitrove-cli 0.1.0-rc.1.3

File	Platform	Checksum
kitrove-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

kitrove-installer 0.1.0-rc.1.3

Install kitrove-installer 0.1.0-rc.1.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.1.3/kitrove-installer-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/Kapital-Labs/kitrove/releases/download/v0.1.0-rc.1.3/kitrove-installer-installer.ps1 | iex"

Download kitrove-installer 0.1.0-rc.1.3

File	Platform	Checksum
kitrove-installer-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
kitrove-installer-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
kitrove-installer-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
kitrove-installer-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo Kapital-Labs/kitrove

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>