Head 0.2.3

Head 0.2.3 uses an installed Node >=22.18 when hosted by Electron. Node is not bundled. The relay preserves the host's JavaScript stdin/stdout transport. If no compatible Node is found, the tools explain the requirement without accessing the keychain, creating a place, or connecting a source.

The base stays empty. Recipients use their own credentials; importing public descriptions grants no authority. Target: macOS. Real Claude Desktop/OS-keychain acceptance and independent Intel execution remain pending. Linux and Windows remain open.

The current signature covers lapxo-head-0.2.3.tgz (sha256:afe35fa46985edd4b6a31b778fe3a6abc640b78f0df6955b86fcd6c95baa6501). approval-signed has digest sha256:c0f59795f1460c948efa1e2e6c692924eeaf2c42013793ebe66df7582f5fa4d7, verified with Bound 0.2.8.

The Desktop Extension head-0.2.3-5751ac839258ca90.mcpb has digest sha256:5751ac839258ca9019f4d285e1ddfa1dc5143bf61bca786626bbb0fd3671ce82. CI produced it reproducibly from the exact archive. It contains no Node executable. The archive has 203 members (425,032 bytes), installed offline without scripts with every member identical; all 4,809 required runtime members verify. CI passes 10/10, including real Electron utilityProcess/MessagePort transport. The two current reader assets are named by digest.

Historical attachments are retained for preservation only. previous-b7f3077a-lapxo-head-0.2.3.tgz, previous-ada9333c-approval-signed.bound, and head-0.2.3-c9093a3fc386a3ee.mcpb belong to the superseded embedded-Node candidate and must not be used for this release.

CI: https://github.com/Lapxo/head/actions/runs/41252240281
PR: #15

Draft only: not published or staged in npm. T2/L6 pending.