DS Agent v1.2.0

DS Agent v1.2.0

DS Agent v1.2.0 is the stable Step 2 GoalEnvelope release for Windows x64.

Unsigned Windows release: both the packaged ds-agent.exe and DS.Agent_1.2.0_x64-setup.exe are intentionally Authenticode NotSigned, with no signer certificate. Windows may display Unknown publisher or a Microsoft Defender SmartScreen warning. Download only over HTTPS from this official Release and verify the SHA-256 before running the installer. This Release is not represented as signed or SignPath-approved.

What is included

• DeepSeek can propose the bounded, versioned ds-agent.goal-envelope-proposal/v1 contract, but cannot grant authority or declare completion.
• The local Kernel alone validates capabilities, readiness, policy, verifiers, workspace/target bindings, revisions, and fingerprints, then freezes the accepted envelope.
• Existing databases receive additive lifecycle and completion projection tables. Legacy v1.1.0 data defaults to no goal and not complete; duplicate/restart processing is idempotent.
• Chat receives only a bounded read-only goal projection. The frontend cannot write validation, freeze, evidence, or completion authority.
• Completion requires authoritative passing evidence bound to the exact goal, frozen revision/fingerprint, verifier, done-when condition, evidence kind, and required artifact identity. Missing, failed, stale, wrong, unknown, duplicate, or mismatched evidence fails closed.
• Secret, provider-body, absolute app-data/vault path, local-authority, internal-claim, and false-completion leakage guards remain enforced.

Exact source and release identity

• Source commit: 02ea26fc92c932ab9fc263e2e19a98a18547792a
• Pull request: #12
• PR CI: 29676296609 — success
• Exact-main CI: 29676628870 — success
• Annotated tag: v1.2.0 (immutable; peels to the exact source commit above)
• Sole asset: DS.Agent_1.2.0_x64-setup.exe
• Asset size: 12,859,905 bytes
• Asset SHA-256: 43871c0b8a8a7e40da120f48635fd02c1314ca53afb1df2b1f29390647212c90
• Installer product/file version: 1.2.0
• Installer Authenticode: NotSigned; signer: none
• Packaged ds-agent.exe: 44,985,449 bytes; SHA-256 f8aa5be3126d77a18b46946ddef67d6fe3b5539bcfce3a96031ec80f590f1b6f; product/file version 1.2.0; Authenticode NotSigned; signer: none
• Exact-main standalone exe before Tauri's three-byte NSIS bundle-marker patch: 44,985,449 bytes; SHA-256 47c2bb3ff2f728fb633770564d8f50a1c988881850b5c2797e79d12d84c19851; Authenticode NotSigned; signer: none

Verification

Focused GoalEnvelope proposal/lifecycle/completion/UI tests, production frontend build, cargo fmt --check, the complete pinned pnpm@9.15.9 test, release-source and secret scans, migration/restart/idempotence/fail-closed regressions, isolated candidate and exact-main packaged UI/workflow smoke, PR CI, and exact-main CI all passed. The full local suite reported 919 passed, 7 deliberately ignored live/installed-dependency tests, and 0 failed. No real API key, paid API/resource, production account, user DS Agent AppData, or installer execution was used. The cancelled formal 20-run Windows lab was not performed and is not claimed.

Scope boundary

This Release does not include Step 3/C3A, grouped authorization, a new Office executor, connector or Computer Use expansion, production external accounts, or new external-write authority. Microsoft/Google production registration and live mail/calendar writes remain disabled.

The SignPath Foundation application remains submitted/pending. If approval arrives later, signing starts only with a subsequent new version; the immutable v1.1.0 and v1.2.0 tags, Releases, and assets will not be moved, overwritten, or replaced.