BetterPullReview v0.3.4

BetterPullReview 0.3.4

Download and install

System	Download
macOS 14.4+ · Apple Silicon and Intel	Download DMG
Windows · x64	Download MSI
Ubuntu 26.04 · x64	Download DEB

The selected test environments are Windows 11 and Ubuntu 26.04 under WSL2/WSLg.
Other Windows and Linux environments may work but are untested; the packages
do not reject them. Full agent integrations and local automation are included.
On Ubuntu, download
and verify the matching .deb.asc signature before installing.

Changes since 0.3.3

• Home searches direct review requests and checks reviewer membership in batches
  of ten, reducing repeated discovery reads. Diagnostics record candidate counts,
  reuse, rejections, recovery and partial results.
• Agent setup supports a saved Claude process wrapper without requiring normal
  Claude sign-in. Wrapper availability does not claim that company SSO or VPN
  access was verified. Setup failures expose their details and workspace logs.
• Agent setup retains wrapper settings and supports reset/recheck correctly.
• The diagnostics export option now says “Include verbose logs from the last
  3 minutes”.
• Product processes use the pinned mimalloc allocator on macOS, Windows and
  Ubuntu. Native runtime, package and corresponding-source inventories include
  the selected allocator. This does not claim the existing memory budgets are
  fixed or that every workload uses less memory.

Verification and distribution

Each platform supplies checksums, SPDX and a separate exact-version
corresponding-source archive. Binary and source access are public through the
same release channel at no additional charge. Corporate/offline redistribution
must include the exact source asset. Source, digests and tags are retained
immutably and indefinitely until all applicable obligations have ended.

macOS uses Developer ID signing and notarization. Windows uses a per-user MSI;
the runtime ZIP is an inventory archive. Ubuntu 26.04 uses a signed DEB and a
per-user archive requiring system dependencies; WSL2 production does not qualify
ordinary-user installation, authentication, vault and removal by itself.
Its private ICU 73.2 libraries retain pinned source and
recipient rebuild instructions.

Linux signature verification

The Ubuntu artifacts have detached OpenPGP signatures. Save the complete public
key block below as bpr-release-signing.asc. Its SHA-256 is
c271732f02b5f3c709ad1a61d7f7816200e96226c490fd77d88f6583437f9798.
The approved full fingerprint is
ED85BAA84A3B6D83FCD5B1F107CEC96F2688E4A8.

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEasxxjBYJKwYBBAHaRw8BAQdA9KNHnT4d1R2udPXayFCA+/25zFrtQ19mKfZH
egF0Pj20IEJldHRlclB1bGxSZXZpZXcgUmVsZWFzZSBTaWduaW5niJYEExYKAD4W
IQTthbqoSjttg/zVsfEHzslvJojkqAUCasxxjAIbAwUJA8MjpAULCQgHAgYVCgkI
CwIEFgIDAQIeAQIXgAAKCRAHzslvJojkqGLgAQDOsFQeotQcvzDKZ5EyOV5RG9hs
L7mR9PeQBHVq6fsJYAEA90e/kJyl1nPfTaPkxcKVNZPF6iq8KZLsFurdYT4RfQA=
=GIqv
-----END PGP PUBLIC KEY BLOCK-----

Check the saved key's digest and fingerprint before importing it:

sha256sum bpr-release-signing.asc
gpg --show-keys --with-fingerprint bpr-release-signing.asc
gpg --import bpr-release-signing.asc

For each of the six signed Ubuntu products—the DEB, user archive, SPDX,
corresponding-source ZIP, checksum file and provenance—download its matching
.asc signature and run gpg --verify ARTIFACT.asc ARTIFACT, replacing both
names with that exact file. The .release.json manifest is verification
metadata and has no detached signature of its own.
Require a good signature from the full fingerprint above before installation
or use. A detached DEB signature is verified separately; dpkg does not enforce
it. This public key and fingerprint are supplied through the same public
release channel as the signed artifacts.

Known limitations

RFC-BPR-0038 remains open. Clean-account installation, authentication and
platform vaults, native Intel and full ordinary-user Windows 11/Ubuntu WSLg courses,
accessibility, upgrade/removal, resident-material crash privacy, external
hardening and complete vulnerability/fuzz coverage remain incomplete.
Profile purge excludes shared updater/registry state and is not uninstall.

The earlier Ubuntu RSS-growth failure is retained in BPR-1653. The owner
approved a 240 MiB process RSS-growth criterion alongside the independent
216 MiB live-heap limit, and the card's complete current-source course passed.
The v0.3.1 exception is not extended. This release's exact native resource,
artifact and security results require their own qualification.
Historical findings and dispositions retain only their original scope.

Installed source-offer clarification: a sentence describing private repository access remains from earlier releases. This release supplies binaries and their exact corresponding-source assets publicly through the same channel at no additional charge. The exact source URLs and digests, redistribution duties, original-channel fallback and indefinite immutable retention remain in force.

The GHES repair is based on the supplied anonymized failure: requested-reviewer
loading returned HTTP 200 and then a response-limit failure. It does not claim
the private server's exact byte, structural or record guard was identified.
No further diagnostic handoff is a prerequisite for this release; deterministic
provider regressions and the selected native release gates supply its validation.

Qualification scope for 0.3.4

The owner requested publication for macOS universal, Windows x64 and Ubuntu
26.04 x64, explicitly skipping native Intel Mac qualification. The universal
package still contains both architectures. The owner also authorized carrying
the v0.3.3 timeout, memory-budget and configured-skip waivers forward if the
same failures recur; any such results remain failed or skipped evidence.
Fresh results and exact artifact verification are recorded separately.

Recorded qualification scope

Debug performance timings are permanently nongating by the owner's standing
policy. Dedicated Debug performance courses may be omitted; observed timing
failures and configured skips remain recorded rather than relabeled as passes.
Ubuntu's Debug selection omits eight named performance courses while retaining
its separate functional controls. Release timing criteria are unchanged.

Windows Debug retains the known workbench/PR Find timeouts and an Insights
fixture assumption about the number of real slow UI turns. The threaded-reply
functional course passed for both GitHub.com and GHES with a larger bounded
Debug watchdog; its original short-deadline failure is retained. macOS retains
its observed Debug benchmark timing failures and the configured cache-byte skip.
Native Intel Mac qualification was explicitly omitted; the universal package
contains both architectures.

Three stale optional-CLI/package harness expectations were corrected: the
shared instruction packages retain their MIT licenses, and the handoff course
checks the four preparation hooks plus the inactive feedback hook. Their owning
checks pass on the final source. These changes affect licensing/test material,
not application code; retained native suites keep their original source and
configuration identities, with a recorded final-source input bridge.

Raw vulnerability reports and incomplete mapping/fuzz coverage remain explicit.
The existing Qt upstream-issue policy retains its stated scope and end condition;
no bundled library is claimed fixed by a caller-absence disposition. The newly
selected allocator's complete advisory mapping and fuzz coverage are not
established by a scanner returning no match. Signatures, notarization,
corresponding source/SPDX binding and native trust verification are separate from
these Debug timing and coverage limitations.

The final unfiltered vulnerability scans retain 21 macOS findings, 19 Windows
findings and 21 Ubuntu findings. Their exact row sets and affected dependency
metadata match the prior release. Current native import and source observations
support only the existing narrow factual dispositions and their original expiry
or recheck conditions; the raw scans remain failed. This supplies no broader
security, legal, native installation or complete vulnerability-coverage claim.

BetterPullReview v0.3.3

BetterPullReview 0.3.3

Download and install

System	Download
macOS 14.4+ · Apple Silicon and Intel	Download DMG
Windows · x64	Download MSI
Ubuntu 26.04 · x64	Download DEB

The selected test environments are Windows 11 and Ubuntu 26.04 under WSL2/WSLg.
Other Windows and Linux environments may work but are untested; the packages
do not reject them. Full agent integrations and local automation are included.
On Ubuntu, download
and verify the matching .deb.asc signature before installing.

Changes since 0.3.1

• Set up an installed coding agent in the Agent drawer, choose or change the
  agent and repository workspace, and reuse linked clone history. Clone folders
  in Settings help locate existing checkouts. Each agent has its own session;
  findings can be saved as private notes.

• React to comments and reviews, remove your reaction, and resolve or reopen
  conversations from the drawer. Reply to outdated threads from the drawer;
  thread replies also work through the configured GitHub CLI connection.

• Drawer tabs, thread cards and agent setup retain their wording and actions
  as the available width changes.

• Home can recover a requested-reviewer read that exceeds the REST response
  bounds through a bounded, projected GraphQL roster. It verifies the exact PR
  and the complete list of directly requested users before adopting the result;
  unavailable or failed recovery remains an explicit refresh failure.

• Filter a pull request's review by individual commits or selected commit ranges
  from the new Commits tab. Filter chips show the active selection. When a hidden
  commit separates selected changes to one file, read each selected commit’s diff
  separately. After a force push, review offers to rematch hidden changes.

• Set generated files aside and filter the file list. The review reads
  linguist-generated from the head commit's .gitattributes; files you mark
  yourself keep their review state locally. Open a set-aside generated file’s
  diff when you need to inspect it.

• Edit a suggested change directly in the head pane, keep its draft, and carry
  or copy a kept suggestion when the pull request moves to a newer head.

• Select several pending comments or Find in files results and copy them with
  their file names and lines. Search results can open in a new tab.

• Add comments and suggestions to a selected line range from its context menu.

• See your own review verdict on Home. A review GitHub refuses returns its
  drafts so they can be corrected and submitted again.

• Mark all comments in a pull request as read, or mark comments from one author
  as read. New posts and later edits still count as new.

• With no review in progress, the review bar says Approve or comment… to make
  the whole-review actions easier to find.

• Configure known C++ namespaces, including std by default.

• Export recent diagnostics as a ZIP with capacity for a day of heavy use.

• Open Help > About BetterPullReview for version information, project links,
  and installed licence and source-offer documents.

• Ignore a pull request on Home and restore it from the collapsed Ignored list.

• Opening a pull request while Home discovery is loading takes priority.
  Discovery avoids repeated reads and batches retained pull-request refreshes.

• The + button opens a draft even when the pull request has no threads.
  Files and Repositories drawers have their own command keys, and Overview can
  jump to the top or bottom of its files.

• The update panel shows formatted release notes and can check public releases
  without a GitHub.com sign-in. Update settings retain that access choice.

• Review history startup reuses verified Git configuration while other Git
  commands are reading it, avoiding a Windows file-sharing refusal.

• Preserve the latest selected line when a tab is still loading or the window
  closes immediately after navigation. Superseded tab loads no longer reset a
  newer line selected in the same comparison.

• Sensitive storage erasure remains complete in optimized builds.

Verification and distribution

Each platform supplies checksums, SPDX and a separate exact-version
corresponding-source archive. Binary and source access are public through the
same release channel at no additional charge. Corporate/offline redistribution
must include the exact source asset. Source, digests and tags are retained
immutably and indefinitely until all applicable obligations have ended.

macOS uses Developer ID signing and notarization. Windows uses a per-user MSI;
the runtime ZIP is an inventory archive. Ubuntu 26.04 uses a signed DEB and a
per-user archive requiring system dependencies; WSL2 production does not qualify
ordinary-user installation, authentication, vault and removal by itself.
Its private ICU 73.2 libraries retain pinned source and
recipient rebuild instructions.

Linux signature verification

The Ubuntu artifacts have detached OpenPGP signatures. Save the complete public
key block below as bpr-release-signing.asc. Its SHA-256 is
c271732f02b5f3c709ad1a61d7f7816200e96226c490fd77d88f6583437f9798.
The approved full fingerprint is
ED85BAA84A3B6D83FCD5B1F107CEC96F2688E4A8.

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEasxxjBYJKwYBBAHaRw8BAQdA9KNHnT4d1R2udPXayFCA+/25zFrtQ19mKfZH
egF0Pj20IEJldHRlclB1bGxSZXZpZXcgUmVsZWFzZSBTaWduaW5niJYEExYKAD4W
IQTthbqoSjttg/zVsfEHzslvJojkqAUCasxxjAIbAwUJA8MjpAULCQgHAgYVCgkI
CwIEFgIDAQIeAQIXgAAKCRAHzslvJojkqGLgAQDOsFQeotQcvzDKZ5EyOV5RG9hs
L7mR9PeQBHVq6fsJYAEA90e/kJyl1nPfTaPkxcKVNZPF6iq8KZLsFurdYT4RfQA=
=GIqv
-----END PGP PUBLIC KEY BLOCK-----

Check the saved key's digest and fingerprint before importing it:

sha256sum bpr-release-signing.asc
gpg --show-keys --with-fingerprint bpr-release-signing.asc
gpg --import bpr-release-signing.asc

For each of the six signed Ubuntu products—the DEB, user archive, SPDX,
corresponding-source ZIP, checksum file and provenance—download its matching
.asc signature and run gpg --verify ARTIFACT.asc ARTIFACT, replacing both
names with that exact file. The .release.json manifest is verification
metadata and has no detached signature of its own.
Require a good signature from the full fingerprint above before installation
or use. A detached DEB signature is verified separately; dpkg does not enforce
it. This public key and fingerprint are supplied through the same public
release channel as the signed artifacts.

Known limitations

RFC-BPR-0038 remains open. Clean-account installation, authentication and
platform vaults, native Intel and full ordinary-user Windows 11/Ubuntu WSLg courses,
accessibility, upgrade/removal, resident-material crash privacy, external
hardening and complete vulnerability/fuzz coverage remain incomplete.
Profile purge excludes shared updater/registry state and is not uninstall.

The earlier Ubuntu RSS-growth failure is retained in BPR-1653. The owner
approved a 240 MiB process RSS-growth criterion alongside the independent
216 MiB live-heap limit, and the card's complete current-source course passed.
The v0.3.1 exception is not extended. This release's exact native resource,
artifact and security results require their own qualification.
Historical findings and dispositions retain only their original scope.

Installed source-offer clarification: a sentence describing private repository access remains from earlier releases. This release supplies binaries and their exact corresponding-source assets publicly through the same channel at no additional charge. The exact source URLs and digests, redistribution duties, original-channel fallback and indefinite immutable retention remain in force.

The GHES repair is based on the supplied anonymized failure: requested-reviewer
loading returned HTTP 200 and then a response-limit failure. It does not claim
the private server's exact byte, structural or record guard was identified.
No further diagnostic handoff is a prerequisite for this release; deterministic
provider regressions and the selected native release gates supply its validation.

v0.3.3 qualification exceptions

The owner accepted these limitations specifically for v0.3.3. They remain failed or skipped evidence, not passing tests:

• Windows Debug timed out in the 200% diff workbench course and all three pull-request Find scales. Follow-up investigation is tracked separately.
• Ubuntu Release application_large_review_resources and application_large_review_loaded_close exceeded the unchanged 168 MiB footprint-growth limits. Two validated image-storage improvements passed their owning/rendering controls, but did not close those memory-budget failures. The owner waived the remaining memory-budget failures for this release.
• The large-review cache-byte course is configured to skip in Debug. Other configured skips retain their recorded scope.

Unaffected passing native tests are retained with their original source/configuration identities; affected checks and final packages have separate fresh evidence. The native, vault, installation, crash-privacy, external-hardening, vulnerability-mapping and bounded-fuzz limitations above remain open. Artifact signatures, source/SPDX binding and native trust checks are separate from these test exceptions.

The Windows vulnerability report retains three Qt bundled-zlib entries for CVE-2026-85091 under the existing named owner deferral through Qt 6.12 until an official Qt release fixes it. Current source and native call/export review found no caller for its required nonblocking gzip-file-write/printf sequence; the library is not claimed fixed. Raw scanner failures a...

BetterPullReview v0.3.2

BetterPullReview 0.3.2 prerelease

This prerelease will be updated with additional qualified platform packages before promotion to the full release. The tag and corresponding-source assets are retained immutably.

Available downloads

macOS 14.4+ (Apple Silicon and Intel): Download DMG.

Windows and Ubuntu packages are still being prepared and are not included in this initial prerelease.

Changes since 0.3.1

• Filter a pull request's review by individual commits or selected commit ranges
  from the new Commits tab. Filter chips show the active selection. When a hidden
  commit separates selected changes to one file, read each selected commit’s diff
  separately. After a force push, review offers to rematch hidden changes.
• Set generated files aside and filter the file list. The review reads
  linguist-generated from the head commit's .gitattributes; files you mark
  yourself keep their review state locally. Open a set-aside generated file’s
  diff when you need to inspect it.
• Edit a suggested change directly in the head pane, keep its draft, and carry
  or copy a kept suggestion when the pull request moves to a newer head.
• Select several pending comments or Find in files results and copy them with
  their file names and lines. Search results can open in a new tab.
• Add comments and suggestions to a selected line range from its context menu.
• See your own review verdict on Home. A review GitHub refuses returns its
  drafts so they can be corrected and submitted again.
• Mark all comments in a pull request as read, or mark comments from one author
  as read. New posts and later edits still count as new.
• With no review in progress, the review bar says Approve or comment… to make
  the whole-review actions easier to find.
• Configure known C++ namespaces, including std by default.
• Export recent diagnostics as a ZIP with capacity for a day of heavy use.
• Open Help > About BetterPullReview for version information, project links,
  and installed licence and source-offer documents.
• Ignore a pull request on Home and restore it from the collapsed Ignored list.
• Opening a pull request while Home discovery is loading takes priority.
  Discovery avoids repeated reads and batches retained pull-request refreshes.
• The + button opens a draft even when the pull request has no threads.
  Files and Repositories drawers have their own command keys, and Overview can
  jump to the top or bottom of its files.
• The update panel shows formatted release notes and can check public releases
  without a GitHub.com sign-in. Update settings retain that access choice.
• Review history startup reuses verified Git configuration while other Git
  commands are reading it, avoiding a Windows file-sharing refusal.
• Preserve the latest selected line when a tab is still loading or the window
  closes immediately after navigation. Superseded tab loads no longer reset a
  newer line selected in the same comparison.
• Sensitive storage erasure remains complete in optimized builds.

Verification and distribution

The macOS package includes full agent integrations and local automation, Developer ID signing and notarization. Checksums, SPDX and a separate exact-version corresponding-source archive accompany the binaries. Binary and source access are public through this release channel at no additional charge. Corporate/offline redistribution must include the exact source asset. Source, digests and tag are retained immutably and indefinitely until all applicable obligations have ended.

Prerelease qualification

The macOS comprehensive Release suite passed all 834 selected rows (831 fresh tests and three tooling preflight checks). The subsequent Debug build was interrupted to prioritize this prerelease; complete Debug qualification remains pending. The owner explicitly accepted incomplete test qualification for this prerelease.

Security scan scope

The fresh unfiltered SPDX scan reports 21 matches (2 Critical, 4 High, 14 Medium and 1 Low), with zero suppressed findings. Their exact component/version/advisory bases match the existing source-backed factual dispositions. Current source identity, compiled zlib/SQLite inputs, macOS baseline and imported API boundaries were rechecked. This is not a clean scan or complete security qualification: 52 of 93 package rows retain identifier/version mapping limitations. The added native zlib deflate units use the same pinned 1.3.2 archive and licence; they do not add Ruby bindings.

Known limitations

RFC-BPR-0038 remains open. Clean-account installation, authentication and
platform vaults, native Intel and full Windows/Ubuntu desktop courses,
accessibility, upgrade/removal, resident-material crash privacy, external
hardening and complete vulnerability/fuzz coverage remain incomplete.
Profile purge excludes shared updater/registry state and is not uninstall.

The earlier Ubuntu RSS-growth failure is retained in BPR-1653. The owner
approved a 240 MiB process RSS-growth criterion alongside the independent
216 MiB live-heap limit, and the card's complete current-source course passed.
The v0.3.1 exception is not extended. This release's exact native resource,
artifact and security results require their own qualification.
Historical findings and dispositions retain only their original scope.

Installed source-offer clarification: a sentence describing private repository access remains from earlier releases. This release supplies binaries and their exact corresponding-source assets publicly through the same channel at no additional charge. The exact source URLs and digests, redistribution duties, original-channel fallback and indefinite immutable retention remain in force.

BetterPullReview v0.3.1

BetterPullReview 0.3.1

Download and install

System	Download
macOS 14.4+ · Apple Silicon and Intel	Download DMG
Windows 10/11 · x64	Download MSI
Ubuntu 26.04 · x64	Download DEB

Full agent integrations and local automation are included. On Ubuntu, download
and verify the matching .deb.asc signature before installing.

Changes since 0.3.0

• Original BetterPullReview code and documentation now carry the MIT License.
  Packages include the original-code licence alongside retained third-party
  notices and licence obligations.
• Installation and first-review documentation is shorter, with direct platform
  downloads and a private vulnerability-reporting policy.
• Release publication explicitly supports the now-public repository while
  preserving destination, source, checksum and visibility guards.
• Linux package auditing recognises exact stripped upstream Qt images through
  their producer metadata while retaining first-party symbol checks.
• Public pull requests can be previewed on Windows and Linux without signing in.
• Qt is updated to 6.12.0; new macOS builds require macOS 14.4 or later.
• Long Review comments scroll to the end without snapping back when native
  overlay scrollbars appear or disappear. The diff text keeps its full viewport.
• Discuss preserves original comment Markdown, including refreshed bodies.
  Empty Approved and Commented review summaries explain that there is no overall
  review comment and identify linked file comments when present.
• Opening a New-badged Discuss card marks it read through the existing persistent
  read state, including pointer and keyboard activation. Clearing its New badge
  keeps an open comment menu, reply text and reading position in place.

Verification and distribution

Each platform supplies checksums, SPDX and a separate exact-version
corresponding-source archive. Binary and source access are public through the
same release channel at no additional charge. Corporate/offline redistribution
must include the exact source asset. Source, digests and tags are retained
immutably and indefinitely until all applicable obligations have ended.

macOS uses Developer ID signing and notarization. Windows uses a per-user MSI;
the runtime ZIP is an inventory archive. Ubuntu 26.04 uses a signed DEB and a
per-user archive requiring system dependencies; WSL2 production does not qualify
a clean Ubuntu desktop. Its private ICU 73.2 libraries retain pinned source and
recipient rebuild instructions.

Linux signature verification

The Ubuntu artifacts have detached OpenPGP signatures. Save the complete public
key block below as bpr-release-signing.asc. Its SHA-256 is
c271732f02b5f3c709ad1a61d7f7816200e96226c490fd77d88f6583437f9798.
The approved full fingerprint is
ED85BAA84A3B6D83FCD5B1F107CEC96F2688E4A8.

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEasxxjBYJKwYBBAHaRw8BAQdA9KNHnT4d1R2udPXayFCA+/25zFrtQ19mKfZH
egF0Pj20IEJldHRlclB1bGxSZXZpZXcgUmVsZWFzZSBTaWduaW5niJYEExYKAD4W
IQTthbqoSjttg/zVsfEHzslvJojkqAUCasxxjAIbAwUJA8MjpAULCQgHAgYVCgkI
CwIEFgIDAQIeAQIXgAAKCRAHzslvJojkqGLgAQDOsFQeotQcvzDKZ5EyOV5RG9hs
L7mR9PeQBHVq6fsJYAEA90e/kJyl1nPfTaPkxcKVNZPF6iq8KZLsFurdYT4RfQA=
=GIqv
-----END PGP PUBLIC KEY BLOCK-----

Check the saved key's digest and fingerprint before importing it:

sha256sum bpr-release-signing.asc
gpg --show-keys --with-fingerprint bpr-release-signing.asc
gpg --import bpr-release-signing.asc

For each of the six signed Ubuntu products—the DEB, user archive, SPDX,
corresponding-source ZIP, checksum file and provenance—download its matching
.asc signature and run gpg --verify ARTIFACT.asc ARTIFACT, replacing both
names with that exact file. The .release.json manifest is verification
metadata and has no detached signature of its own.
Require a good signature from the full fingerprint above before installation
or use. A detached DEB signature is verified separately; dpkg does not enforce
it. This public key and fingerprint are supplied through the same public
release channel as the signed artifacts.

Known limitations

RFC-BPR-0038 remains open. Clean-account installation, authentication and
platform vaults, native Intel and full Windows/Ubuntu desktop courses,
accessibility, upgrade/removal, resident-material crash privacy, external
hardening and complete vulnerability/fuzz coverage remain incomplete.
Profile purge excludes shared updater/registry state and is not uninstall.

The Ubuntu optimized large-review RSS-growth failure tracked by BPR-1653 is
unresolved. The owner explicitly carries forward the exception for only the unchanged
216 MiB process RSS-growth predicate to v0.3.1. The current optimized course remains failed with that predicate; observed
cache samples stay below 64 MiB. Later cleanup and shutdown checks were not
reached. A dedicated implementer will pursue a
causal repair after publication, preserving the original limits and course.
This exception waives no other test, native, signing, security or source obligation.
Exact artifact and security results are recorded separately; historical findings
and dispositions retain only their original scope.

Installed source-offer clarification: a sentence describing private repository access remains from earlier releases. This release supplies binaries and their exact corresponding-source assets publicly through the same channel at no additional charge. The exact source URLs and digests, redistribution duties, original-channel fallback and indefinite immutable retention remain in force.

BetterPullReview v0.3.0

BetterPullReview 0.3.0

Download and install

Choose the installer for your system:

System	Download
macOS 13+ · Apple Silicon and Intel	Download the Mac installer (.dmg)
Windows · x64	Download the Windows installer (.msi)
Ubuntu 26.04 · x64	Download the Ubuntu installer (.deb)

For Ubuntu, also download the installer signature (.deb.asc) and follow the signature verification steps before installing.

What are the other downloads?

You do not need every asset to install the app.

• Source-…corresponding-source.zip: exact third-party source and rebuild material.
• .spdx.json: dependency and licence inventory.
• .sha256 and .asc: checksums and signatures for verification.
• .provenance.json and .release.json: release verification records.
• macOS app .zip: an alternative app archive.
• Windows runtime .zip: an inventory archive; use the MSI to install.
• Ubuntu -user.tar.gz: an alternative per-user archive requiring the declared system dependencies.

Coordinated private stable release for macOS universal, Windows x64 and Ubuntu
26.04 x86_64. Full agent integrations and local automation are included.

Changes since 0.2.2

• Review drawers share a consistent layout. Overview has a remembered Status
  drawer that leads with your role and what needs attention. Compose review
  opens beside the code and expands into a focused page; Tours presents the
  route, Notes supports private line anchors, and Agent has its own drawer tab.
• Pull-request comments have read state and appear at the Comments drawer's
  edge. Quoted replies retain their original target, long threads remain
  readable to the last post, and a selected thread can open in Threads or Discuss.
• Markdown descriptions and comments show inline images, including SVG and
  WebP, with a bounded profile cache and a preference to disable loading.
  Rendering also supports GitHub-style alerts, footnotes, disclosures, emoji,
  language-coloured code fences, diff blocks and suggested changes.
• Whole PR compares from GitHub's evidenced merge base, including supported
  stacked pull requests. The Updates line starts at that base, and recorded
  updates can supply comparison handles again. Refresh preserves valid
  base-line drafts and the review mode chosen while loading.
• New Insights shows local storage, passive GitHub request and rate-budget
  history, review activity, energy measurements and work timings. Unavailable
  child-process CPU counters say Not reported; they are not estimated.
• Text selections and intraline changes are clearer, C++ template syntax is
  coloured, and both comparison panes receive highlighting. Folder counts
  appear only while collapsed, and Home, refresh and data-readiness feedback
  make the current state easier to follow.
• Accept file uses Option-A on macOS and Alt+A elsewhere. Home uses
  Command-Shift-H or Ctrl+Shift+H; Actual Size uses Command-0 or Ctrl+0.
  First/last-change shortcuts and Help's Keyboard Shortcuts reference are
  available, and macOS Option-letter keys work normally in text inputs.
• Review submission recovery handles busy pull requests and explains an
  unconfirmed result. File/change navigation works after opening another pull
  request, GitHub CLI discovery failures provide safe diagnostics, and Settings
  groups controls by task with scoped Troubleshooting resets.

Verification and distribution

All selected producers use one committed version and source revision. Native
normal-gate results, configured skips, final package identities, digests and
trust observations are recorded in the release engineering and producer
records; focused or historical checks do not establish a new full native pass.

macOS targets macOS 13 or newer on Apple Silicon and Intel, with Developer ID
signing and notarization. Windows supplies a per-user MSI and runtime inventory
archive; that archive is not a qualified portable installation. Ubuntu 26.04
supplies a DEB and per-user archive, with declared system dependencies and the
glibc 2.43 ceiling. Its three private ICU 73.2 libraries are built from pinned
source with recorded hardening, ABI/loading checks and recipient rebuild
instructions. WSL2 is an admitted Linux producer.

Each platform supplies SPDX, checksums and a separate exact-version
corresponding-source archive. Equivalent source access at no extra charge,
practical build/relink material and immutable retention remain ongoing
distribution obligations, including corporate and offline redistribution.

Linux signature verification

The Ubuntu artifacts have detached OpenPGP signatures. Save the complete public
key block below as bpr-release-signing.asc. Its SHA-256 is
c271732f02b5f3c709ad1a61d7f7816200e96226c490fd77d88f6583437f9798.
The approved full fingerprint is
ED85BAA84A3B6D83FCD5B1F107CEC96F2688E4A8.

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEasxxjBYJKwYBBAHaRw8BAQdA9KNHnT4d1R2udPXayFCA+/25zFrtQ19mKfZH
egF0Pj20IEJldHRlclB1bGxSZXZpZXcgUmVsZWFzZSBTaWduaW5niJYEExYKAD4W
IQTthbqoSjttg/zVsfEHzslvJojkqAUCasxxjAIbAwUJA8MjpAULCQgHAgYVCgkI
CwIEFgIDAQIeAQIXgAAKCRAHzslvJojkqGLgAQDOsFQeotQcvzDKZ5EyOV5RG9hs
L7mR9PeQBHVq6fsJYAEA90e/kJyl1nPfTaPkxcKVNZPF6iq8KZLsFurdYT4RfQA=
=GIqv
-----END PGP PUBLIC KEY BLOCK-----

Check the saved key's digest and fingerprint before importing it:

sha256sum bpr-release-signing.asc
gpg --show-keys --with-fingerprint bpr-release-signing.asc
gpg --import bpr-release-signing.asc

For each of the six signed Ubuntu products—the DEB, user archive, SPDX,
corresponding-source ZIP, checksum file and provenance—download its matching
.asc signature and run gpg --verify ARTIFACT.asc ARTIFACT, replacing both
names with that exact file. The .release.json manifest is verification
metadata and has no detached signature of its own.
Require a good signature from the full fingerprint above before installation
or use. A detached DEB signature is verified separately; dpkg does not enforce
it. This public key and fingerprint are supplied through the same private
release channel as the signed artifacts.

Known limitations

This release does not complete RFC-BPR-0038 native or release-security
qualification. Clean-account installation, authentication and platform vaults,
native Intel and complete Windows/Ubuntu desktop courses, accessibility,
upgrade/removal, resident-material crash privacy and vulnerability qualification
remain open. Existing Mac/Windows material decisions cover independently verified unchanged
inventory/material; the current Ubuntu inventory and ICU material were reviewed
separately. Current Grype inventories retain 33 macOS, 31 Windows and 33 Ubuntu
raw matches. Independent source/configuration/caller applicability decisions
are bound to the exact delivered bytes, with expiry and change-triggered
rechecks. Identifier/version, external-system and Qt producer coverage gaps
remain; these decisions do not certify complete vulnerability coverage or
accept applicable risk. Signing and notarization do not resolve findings.
WSL/WSLg observations do not establish clean Ubuntu desktop or Secret Service
qualification. Profile purge excludes shared updater and registry state and is
not uninstall.

The Ubuntu optimized large-review cache course still exceeds its unchanged
216 MiB resident-footprint growth limit. The owner accepted this one failing
RSS criterion as a v0.3.0 release exception, with BPR-1653 remaining open for a
follow-up patch. The observed result remains FAIL; the separate 64 MiB cache
bound passes. No cause or accepted correction is established, and no other test
or release requirement is waived by this exception.

A source-compatible optimized macOS history course now passes its unchanged
input and completion budgets. The cause of the original history input-gap miss
remains unexplained. Four session-bound native macOS menu, notification and
shortcut courses also pass with actual zero exits and their required markers. The passing focused evidence is scoped to its
recorded inputs; no fresh complete normal-gate run or full native qualification
is claimed.

The release remains private. Version 0.3.0 is selected as a stable GitHub
release, eligible for Latest, rather than a prerelease.

BetterPullReview v0.2.2

BetterPullReview 0.2.2

Private Windows x64 prerelease following the macOS-only 0.2.1 release. Full
agent and local automation capabilities are retained. This release does not
replace or add assets to the published macOS 0.2.1 release; Ubuntu packages
are not selected for this release.

Changes

• Restore current file selection and review actions after accepted refreshes,
  including submissions, labels, replies and review-tour navigation.
• Retain a confirmed reply-draft action while its private store is temporarily
  rebinding, and apply it only to the original current owner and revision.
• Reduce unnecessary split-diff repaint work while keeping native scrollbar
  edges, fractional scrolling and source Find geometry aligned.
• Check cancellation more frequently in the diff application host so stopped
  preparation leaves time to unwind within the existing return budget.
• Repair Windows fixture, process-containment and native test-producer issues
  without weakening authority checks, input budgets or rendering assertions.

Verification and distribution

The interrupted Windows gate and its continuation account for all 705 tests:
703 passed, one cancellation failure and one configured Debug cache-bytes skip.
After the cancellation and scrollbar repairs, all 35 affected ordinary Windows
courses passed on the repaired code, including the complete diagnostic wrapper
and its unchanged 10 ms cancellation assertion. Twelve affected WSL portability
courses and affected Mac checks passed. The original failures and configured skip
remain in the verification records; this is not an uninterrupted full-suite pass.
The separate optimized Release cache-bytes course passed in 270.16 seconds.
Final package identities and native trust evidence are recorded separately
after production.

The release provides a per-user Windows MSI, runtime inventory archive, SPDX,
checksums, provenance and a separate exact-version corresponding-source archive.
The runtime archive is inventory evidence, not a qualified portable installation.
Equivalent source access at no extra charge, build/relink material and immutable
retention remain ongoing distribution obligations, including offline and corporate
redistribution.

Known limitations

This prerelease does not complete RFC-BPR-0038 native or release-security
qualification. Clean-account Windows 10/11 installation, authentication, vault,
accessibility, upgrade/removal, crash/privacy and vulnerability qualification gaps
remain explicit. Signing does not resolve dependency findings or certify those
runtime courses. WSL portability checks do not establish Ubuntu desktop or vault
qualification. Profile purge excludes shared updater and registry state and is
not uninstall.

The release remains private and is marked as a GitHub prerelease, preserving the
current stable Latest release.

BetterPullReview v0.2.1

BetterPullReview 0.2.1

Private macOS-only prerelease following 0.2.0, with universal packages for
Apple Silicon and Intel. Windows fixes move to the 0.2.2 follow-up; Windows
and Ubuntu 26.04 packages are not part of 0.2.1. Full agent and local automation
capabilities are retained.

Changes

• Review drafts no longer consume persistent blank records merely by selecting
  lines. Authored drafts remain recoverable across head changes and restarts;
  draft creation and sharing between windows retain the correct identity.
• Opening a file in Review marks it Seen for the displayed epoch. Accept is
  available with one click and Command+Shift+A.
• File navigation can leave an unavailable file, and change navigation follows
  the clicked source position. Resizing the diff divider keeps text vertically
  stable, including at fractional display scales.
• Center ribbon width is configurable from 16 to 256 logical pixels, with a
  28-pixel default, half the previous width.
• Appearance section banners use subdued theme surfaces, and open Settings
  windows follow theme changes.
• Home keeps row facts aligned when Cancel appears and prevents adding a
  GitHub CLI account while its remembered connection is loading.
• Files and Search tabs follow the Comments and Notes styling. Search side
  markers align at the left, navigation labels sit closer to their controls,
  unread-comment badges describe the current file, and the redundant visible
  Command+J button is removed while Threads and the shortcut remain available.

Verification and distribution

The combined implementation passed ten focused integration checks before this
version bump. Subsequent macOS gate repairs passed twenty focused courses and
three unchanged submission controls. The complete normal macOS gate must still
pass on the exact final release source before distribution packaging. Final test
results, configured skips, artifact digests and trust observations are recorded
separately; focused checks do not establish full native qualification, and these
notes do not claim packages have already been produced or published.

macOS targets macOS 13 or newer on Apple Silicon and Intel and requires Developer
ID signing, notarization, stapling and Gatekeeper assessment. The remaining
Windows repairs and native acceptance continue toward 0.2.2. Ubuntu availability
is deferred to a later release decision. Neither platform is promised as an
additional 0.2.1 upload or from the macOS release commit.

The macOS release supplies its exact-version corresponding-source ZIP, SPDX
inventory and checksums alongside its binaries. The source asset is
Source-BetterPullReview-0.2.1-macos-universal-corresponding-source.zip.
Source access at no extra charge and immutable retention remain ongoing
distribution obligations, including corporate/offline redistribution. Exact
licensing and practical build/relink obligations remain; historical artifact
dispositions do not qualify changed release bytes.

Known limitations

This prerelease does not complete RFC-BPR-0038 qualification. Native clean-account
vault, Intel/platform, crash privacy and vulnerability qualification gaps remain
open. Qt 6.11.2 findings still require exact-version applicability dispositions;
signing and notarization do not resolve them. WSL2 production does not establish
clean Ubuntu desktop or Secret Service qualification. Profile purge excludes
shared updater and registry state and is not uninstall.

After restarting and reconnecting through GitHub CLI, an older tour draft may
not appear in the restored window; previously saved tour publication still
resumes. The original reported review-publication failure was not captured, so
its exact trigger remains unconfirmed despite the draft-lifecycle fixes.

The release remains private and is marked as a GitHub prerelease, preserving
the current stable Latest release.

BetterPullReview v0.2.0

BetterPullReview 0.2.0

Private macOS-only prerelease targeting macOS 13 or newer, universal Apple
Silicon and Intel. Windows and Ubuntu packages are not part of this release.
Version 0.1.10 was prepared but never released; 0.2.0 replaces it and includes
every change since 0.1.9, including the items drafted for 0.1.10. Distribution
builds retain the full agent and local automation capabilities.

Included

This release includes the 0.1.9 functionality and these changes.

Home and pull request lists

• Home names the author of every pull request that is not yours, shows each
  row's age, green and red line totals and comment count, and counts waiting
  reviewers on your authored rows. Overview keeps the reviewers' names.
• A known pull request title now leads each Home row; repository and number
  are secondary and omit what the row's group already names.
• The Reviewer and Requested filters no longer hide a GitHub CLI account's
  pull requests, and Repository grouping changes the list, persisting across
  restarts.
• An entry can be removed from Recently viewed through its menu or with
  Delete or Backspace. Removal applies to every window of the profile and
  persists across restarts.
• Home and Overview describe waiting and merge requirements more calmly:
  named reviewers replace generic counts, long lists end with "and N more",
  and Overview lists each unmet condition and each outstanding reviewer on its
  own line, with code owners marked and caveats in the details.
• A pull request you had reviewed whose head has since changed stays under
  Needs me on its first open after a restart.

Find and Search

• Find (Command+F) opens a floating find box at the top right of the current
  pane, over the code, in the style of VS Code; the panes do not move or
  shrink. Enter and Shift+Enter, F3 and Shift+F3, or the arrows step through
  matches, shown as "N of M". Every match is lightly highlighted, the current
  one more strongly, and matches are marked on the scroll track. Command+F
  with a word selected starts at that occurrence. Esc closes it and returns to
  the code.
• The find box has Match Case, Whole Word and Regular Expression toggles inside
  the query field, plus Find in Selection. Option+W toggles Whole Word and
  Option+L Find in Selection while typing. An invalid regular expression is
  marked on the field and explained in its tooltip.
• Find in Files (Command+Shift+F) searches every changed file of the pull
  request, on both sides of the comparison, from a Search view in the style of
  VS Code. Left and Right filter chips choose which side's matches to show.
  Results are grouped by file, with each file's match count and whether it was
  added, removed or renamed. Each match row shows its side, line number and
  the line in the code font, with the match highlighted. F4 and Shift+F4 step
  through results, and opening a result goes to the exact file, side and
  match.
• Find in Files takes the same Match Case, Whole Word and Regular Expression
  toggles (regular expressions through the RE2 library, with Unicode case
  folding), and include and exclude path patterns behind its "…" button. It
  reports partial or limited coverage instead of "No results".

Reviewing diffs

• Next file, Previous file, Next change and Previous change now enter Review
  from Overview, Discuss or Threads.
• View > Go to header/source (Option+O) jumps between a C++ source file and
  its header when both are in the review, preferring the closest directory
  match.
• Touchpad scrolling moves the diff smoothly by fractions of a line, and
  horizontal panning no longer slips a line vertically on small finger
  movements. Keyboard navigation places a partly hidden selected line flush
  with the nearest visible edge.
• Moving down from a selected line far outside the view now scrolls the next
  line into view.
• The review title and Open on GitHub button appear as soon as the pull
  request's content arrives, without visiting Home or resizing the window.
• With enlarged system fonts, the review navigation keeps its full group
  names and the overview controls stay usable when a scrollbar narrows the
  sidebar.
• C++ highlighting distinguishes namespaces and enum members, with their own
  rows in the Appearance Syntax colours, and recognizes more identifier cases
  that it previously misclassified.
• Lines are counted as Git counts them, so a lone carriage return no longer
  starts a new line. Comments placed after one in such a file now name the
  correct line on GitHub.
• Multi-line comment ranges are accepted across hunks that one unchanged line
  separates, as GitHub accepts them.
• The highlighting of what changed inside a line now uses the dtl library,
  and marks changes in many lines it previously left unhighlighted.
• Diff computation now uses Git's xdiff (Myers with the indent heuristic) as
  its line matcher, so hunks agree more closely with GitHub's. xdiff ships as
  its own separately replaceable LGPL-2.1 shared library,
  libbpr_xdiff.dylib, in the same arrangement as Qt; its notice is in
  THIRD-PARTY-NOTICES and its source is in the corresponding-source ZIP.

Comments and conversations

• Reopening a pull request from Recently viewed or a pasted link always reads
  it fresh from GitHub, so comments published since the last visit appear.
• After you submit a review or publish a comment or reply, the window rereads
  the pull request by itself and keeps your place: modality, selected file and
  open note are unchanged, and a file you pick while the reread lands stays
  picked.
• A comment whose publication outcome is unknown keeps its Retry across a
  reread or Refresh.
• On Discuss, the blue new-post counts line up whether or not a note is
  resolved or carries an unsent reply.
• Refreshing a comparison while private drafts are being restored no longer
  leaves saved replies unable to be discarded.
• The suggestion editor, which is also the Review Cycles file pane, moves,
  deletes and draws by character as you see it, so wide CJK text, combining
  accents, flags and emoji sequences are no longer split or overlapped.

GitHub CLI accounts and publishing

• The chosen GitHub CLI connection is remembered across launches for each
  server, restoring the same host, login and account without asking again.
  It can be replaced, signed out or forgotten.
• Every GitHub CLI operation uses the chosen account's own credential and
  stops with a named reason if that credential is unavailable, instead of
  falling back to another account.
• Publishing a review, inline comment or tour through the GitHub CLI no longer
  shows a second warning dialog; the review form's account, repository and
  head checks are the confirmation, and failures are reported by type.

Appearance and themes

• Importing an older theme fills colour roles it does not define, such as the
  new namespace and enum-member colours, from its own base theme, so the
  preview and contrast check use the imported theme's colours.

Local workspaces and Review Cycles

• Reading a local Git checkout follows Git's rules for repository format and
  extensions, configuration syntax, ignore-file case folding and bracket
  classes, index checks and symbolic references. A checkout Git's rules do not
  allow, or one using reftable reference storage, is refused with a named
  reason instead of being read approximately.

Reliability and performance

• Large pull requests load faster: conversation indexing reuses each file's
  identity, Overview reuses receipt paths across refreshes, and diff line
  pairing scores similarity with the rapidfuzz-cpp library.
• Comment bodies counted in Overview's feedback tallies are fingerprinted off
  the window thread.
• JSON, Unicode, compressed review bundles and Git identity hashing now use
  established libraries (glaze, utf8proc, zlib, sha1collisiondetection and
  HACL* SHA-2) in place of hand-written code; their notices are in
  THIRD-PARTY-NOTICES.

Package and verification

Distribution builds disable tests. The full normal macOS gate on release source
55f4a5a510f33802cd920baf8744a10226ffd87b passed 729 tests with zero failures and
one configured Debug-only skip. That cache-bytes row passed separately in Release
mode in 84.26 seconds. The notarization retry reused this unchanged passing evidence.

The universal macOS app and DMG passed Developer ID signature checks, Apple
notarization, stapling and Gatekeeper assessment. Exact packaged-runtime and
security-mechanics audits, source binding and checksums passed before publication.

The selected set supplies the macOS DMG and app ZIP, SPDX inventory, a
separate exact-version corresponding-source ZIP
(Source-BetterPullReview-0.2.0-macos-universal-corresponding-source.zip),
checksums and provenance. The corresponding source includes the source of the
separately replaceable xdiff shared library. Every binary
recipient must retain equivalent access to the exact corresponding-source
asset at no additional charge, including matching redistribution. Source
assets, source offers, digests and tags are retained immutably until the
distribution owner documents that all obligations have ended.

Known limitations

This prerelease does not complete RFC-BPR-0038 qualification. M8/M9
clean-account vault, native Intel/platform, crash privacy and vulnerability
qualification gaps remain open. The final Grype scan returned 33 raw matches (2 Critical, 8 High, 20 Medium
and 3 Low), exit 2. Source-backed applicability proposals remain without
independent security-owner acceptance. The release owner explicitly directed
publication of this private prerelease with the reported licensing/security
qualification gaps remaining open. This direction does not turn the scan into a
pass or establish independent legal/security qualification.

After the application restarts and reconnects through the GitHub CLI, a tour
draft written before the restart may not appear in the...

BetterPullReview v0.1.9

BetterPullReview 0.1.9

Private macOS-only prerelease targeting macOS 13 or newer, universal Apple
Silicon and Intel. The owner narrowed this release to the current Mac build
on 2026-10-12; Windows and Ubuntu 26.04 packages and remaining repairs are
deferred to a follow-up patch. No follow-up version is selected here.

Included

This patch includes the 0.1.8 functionality and these improvements:

• Home separates authored pull requests from reviews needing your attention.
• Draft pull requests show their draft state on Home and in recent history.
• Overview shows check results, merge blockers, and named pending reviewers.
• Home explains review waiting and concurrent blockers, preserving accepted
  observations across refreshes and restarts and identifying partial summaries.
• The release test gate runs independent tests concurrently and reports timings,
  while keeping Qt and end-to-end courses serial.

Package and verification

Distribution builds disable tests and retain the full agent and local automation
capabilities. The normal Mac test gate and focused repair checks retain their
actual failures and configured skips. The owner explicitly accepts the current
Mac timing misses for v0.1.9. Responsiveness and launch exceeded the unchanged
100 ms PR-load input-gap budget, including isolated misses at 104.4 and
101.1 ms; these are failed observations, not passing timings. The Debug
cache-bytes course is a configured skip and supplies no optimized-course evidence.

macOS requires Developer ID signing, notarization, stapling and Gatekeeper
assessment for its universal app and DMG. Runtime audits, source binding and
downloaded artifact verification remain required before claiming release
completion.

The selected set supplies the macOS DMG and app ZIP, SPDX inventory, separate
exact-version corresponding-source ZIP, checksums and provenance. Every binary recipient
must retain equivalent source access at no additional charge. Redistribution must preserve the exact
source asset and source offer; source, digest and tag retention is indefinite
until the distribution owner documents that all obligations have ended.

Known limitations

This prerelease does not complete RFC-BPR-0038 release qualification. M8/M9
clean-account vault, native Intel/platform, crash privacy and vulnerability
qualification gaps remain open. Recorded Qt 6.11.2 vulnerability scans have
unresolved findings; signatures and notarization do not resolve them.

The intermittent file-selection race and earlier large-history responsiveness
timing failure remain unresolved unless new exact-version evidence establishes
otherwise. Tour publication depends on exact host and transport qualification.
Installed agents and GitHub CLI are separately configured capabilities. Profile
purge excludes shared updater and registry state and is not uninstall.

The release remains private and must be marked as a GitHub prerelease without
replacing the current stable Latest release. These preparation notes do not
claim that packages have been produced or published.

BetterPullReview v0.1.8

BetterPullReview 0.1.8

Private macOS prerelease for early testing on macOS 13 or newer, with native
Apple Silicon and Intel binaries in one universal application. Windows and
Linux packages may be added later from this release's exact tagged source
revision after their native build, signing and verification prerequisites pass.

Included

This patch includes the 0.1.7 functionality and these review corrections:

• Syntax highlighting survives repeated file navigation, including large files.
• Discuss threads open their matching inline comment in Review.
• Discuss comments expose their Review actions directly.
• The review bar keeps its summary and navigation slots stable during updates.

Package and verification

The distribution build disables tests and retains the full agent and local
automation capabilities. The macOS development build and documentation gate
passed. A full 686-test development run is in progress. The owner explicitly
authorized publication of this private 0.1.8 prerelease before that run finishes,
accepting unfinished tests and requiring later failures and configured skips to
be reported. This is not a claim that the full suite passed. Packaging used
--skip-tests to avoid a duplicate run while that separate suite continued.
An initial skip-reporting contract failure was corrected, and its focused rerun
and all 11 native release tooling tests passed before publication.

macOS requires Developer ID signing, notarization, stapling and Gatekeeper
assessment for its universal app and DMG. Runtime audits, source binding and
downloaded artifact verification remain required before claiming release
completion. This publication includes no Windows or Linux binaries.

The release supplies a DMG, app ZIP, SPDX inventory and separate exact-version
corresponding-source ZIP, each with its own SHA-256 file. Every binary recipient
must retain equivalent source access at no additional charge. Redistribution must preserve the exact
source asset and source offer; source, digest and tag retention is indefinite
until the distribution owner documents that all obligations have ended.

Known limitations

This prerelease does not complete RFC-BPR-0038 release qualification. M8/M9
clean-account vault, native Intel/platform, crash privacy and vulnerability
qualification gaps remain open. Recorded Qt 6.11.2 vulnerability scans have
unresolved findings; signatures and notarization do not resolve them.

The intermittent file-selection race and earlier large-history responsiveness
timing failure remain unresolved unless new exact-version evidence establishes
otherwise. Tour publication depends on exact host and transport qualification.
Installed agents and GitHub CLI are separately configured capabilities. Profile
purge excludes shared updater and registry state and is not uninstall.

The release remains private and must be marked as a GitHub prerelease without
replacing the current stable Latest release. The macOS app and DMG passed Developer ID signature, notarization, staple and
Gatekeeper checks; the final package audit and source-asset preflight passed.