NoID Privacy Workstation 44 — v1.7

Boot-safety, network-policy and reviewed-tooling release on the Fedora 44 / GNOME 50 base. Highlights:

• Reboot decisions are explicit and fail-closed: a canonical two-axis verdict reports activation need and boot safety independently, keeps exact boot blockers across an interrupted update, and no GUI, login or status surface offers a restart while NVIDIA, initramfs, kernel-command-line, BLS-identity or state-publication evidence is incomplete.
• Constrained DHCP keeps working: DHCPv4 egress admits only the required link-local bootstrap traffic, unsolicited replies on statically addressed links are rejected before AF_PACKET, and explicit per-peer LAN grants survive before, during and after lease acquisition.
• Network readiness stays honest: an unrelated gatewayless LAN or dock no longer drops global readiness, while readiness retires fail-closed when the pinned WAN loses its gateway. NTS recovers automatically after a bounded DNS or NTS-KE startup timeout.
• NVIDIA repair semantics corrected: a missing exact kmod installs instead of reinstalling, an rpmdb failure stays distinguishable from normal absence, the generated package is a required postcondition, and the diagnostic survives an unreadable RPM inventory.
• Narrow SELinux and browser-policy fixes: the yescrypt HugeTLB permissions for password creation, history maintenance and verification are complete without broadening unrelated authentication domains; Firefox and Thunderbird local-network WebSocket exceptions bind to the intended Local Network Access policy arm.
• A clean first boot: the GDM log directory is reconciled to its canonical root:gdm 0711 ownership and xserver_log_t label before the first graphical login, instead of inheriting the wrong label on an enforcing target. The one-time pending-reboot notice now describes a verified boot-policy or update activation rather than calling every first boot an update.
• Refreshed reviewed pins: Claude Code CLI/VSIX 2.1.241, Codex CLI 0.149.1, Codex VSCodium 26.5818.61809, and the bundled Linux auditor at v3.7.2 — pinned by full commit, exact byte count and SHA-256, and verified fail-closed at build time.
• Bounded pstore capture for diagnosing hangs before persistent logging starts, without weakening the image's normal no-pstore privacy default.

Full details: CHANGELOG.md

Download: The GPG-signed ISO (3.2 GB — above GitHub's 2 GiB asset limit) is on the project download page: https://noid-privacy.com/linux.html

Verify:

gpg --import noid-privacy-release.asc
gpg --verify SHA256SUMS.asc SHA256SUMS   # → Good signature
sha256sum -c SHA256SUMS                  # → OK

The SHA256SUMS and SHA256SUMS.asc attached here are byte-identical to the ones on the download host.