Kestrel Desktop 0.5.1

Kestrel Desktop 0.5.1 is the compatibility bridge required before the repository and renderer cutover.

Included

• Kestrel-0.5.1-darwin-arm64.zip: the bridge release. It keeps the legacy renderer, copies only allowlisted local UI state into Kestrel Local Core, and preserves an existing 0.5.0-beta.0 Core manifest for rollback.
• SHA-256 checksum file.

The independently published 0.5.0 recovery companion retains bridge protocol 1 and the old renderer while repairing packaging and process safety.

Both apps bundle their own self-contained Postgres runtime. No external database installation is required.

These compatibility artifacts were transferred byte-for-byte from their verified private provenance releases. Their release source and build evidence remain in the read-only provenance archive; this tag marks the canonical public distribution record.

Verification

• Bridge SHA-256: 50e9eacdbe332cf55888bc8c64a620df6ff3fc8a296fa24d20d28ecbbcd6610b
• Recovery SHA-256: 48a7bba44636a09ff2eaa8bf487a11ed477fccfe6aa03ae06a1685ad99b12f38
• Verified on macOS 26.5.1 (25F80), Darwin arm64.
• Full sequence passed against an isolated copy of the existing Desktop profile: recovery 0.5.0 -> bridge 0.5.1 -> recovery 0.5.0.
• All three launches reached ready with a healthy managed database; bridge versions were 1 -> 2 -> 1.
• Eight local-state keys were byte-identical. The task graph differed only in 79 valid updatedAt timestamps and was otherwise structurally identical.
• TUI state was byte-identical before and after. App, Local Core, Postgres, renderer, and helper process audits were empty between launches and at completion.

Distribution Trust

These artifacts are ad-hoc signed and are not Apple Developer ID signed or notarized because the build host has no Developer ID or notarization credentials. Their internal signatures pass strict verification, but macOS distribution trust is not implied.