OpenAgents Desktop 0.1.0

OpenAgents Desktop — Effect Native on an Electron host. This is the first stable
Desktop release. Be clear on what "stable" means here: the release engineering
— code-signing, notarization, cross-platform distribution, and the signed
self-update infrastructure — is production-grade and verified. The product
features inside are real but early and experimental. Treat 0.1.0 as an honest,
signed foundation you can install and trust, not a finished product.

Platforms & install

Signed builds for four targets (verify against the attached SHA256SUMS):

• macOS — Apple Silicon: OpenAgents-0.1.0-stable-darwin-arm64.dmg (or .zip)
• macOS — Intel: OpenAgents-0.1.0-stable-darwin-x64.dmg (or .zip)
• Linux — x64: .AppImage, .deb, or .rpm
• Linux — arm64: .AppImage, .deb, or .rpm
• Windows — x64: OpenAgents-0.1.0-stable-win32-x64-portable.zip (portable,
  unsigned — see the experimental note)

macOS: open the DMG and drag OpenAgents to Applications. Signed with our
Apple Developer ID and notarized by Apple, so it opens without Gatekeeper
warnings.

Linux: chmod +x the AppImage and run it (needs FUSE), or install the
.deb / .rpm with your package manager.

Windows: unzip the portable and run OpenAgents.exe. It is not
code-signed, so Windows SmartScreen will warn on first run — click More
info → Run anyway. Windows updates are manual (download a newer portable);
it is not on the signed auto-update feed.

What ships

• A cross-platform desktop shell (Effect Native on Electron).
• Chat with multiple provider lanes (Codex, Claude, Grok, Apple FM) and a hosted
  chat path.
• Full Auto — readiness-gated parallel coding across provider lanes — and the
  per-turn harness event log behind it.
• Early sovereign-identity and history-recall (RLM) surfaces.

What's verified

The release pipeline was exercised end to end and independently checked:

• macOS (arm64 + x64): code-signed with our Apple Developer ID, notarized
  by Apple (accepted), stapled, and Gatekeeper-verified (spctl reports
  Notarized Developer ID).
• Linux (x64 + arm64): all six artifacts ed25519-signed and verified
  fail-closed against the pinned release key.
• Distribution + update infrastructure: a signed release set was promoted
  atomically to the stable channel through our own release coordinator and is
  served live from our own infrastructure (updates.openagents.com), verifiable
  against the pinned key. No unsigned fallback anywhere in the chain.
• Launches on a clean machine: the Linux x64 build was installed and launched
  on a clean Arch Linux host and visually confirmed running.

Experimental — included, not yet fully verified

• The agent/product features (chat, provider lanes, Full Auto, identity,
  history recall) are functional in development but are early and not
  exhaustively validated in this packaged build. Expect rough edges, and don't
  rely on Full Auto for unattended production work yet.
• In-app automatic updates: the update feed is live and the verify → stage →
  apply → launch-receipt → rollback machinery exists, but the full clean-machine
  install → update → rollback cycle has so far only been partially observed
  (Linux x64). Updating from inside the app may not be smooth yet.
• GPU acceleration on Linux: on hosts without GPU drivers the app falls back
  to software rendering (harmless; you may see a benign MESA-LOADER log line).
• Windows is an unsigned experimental portable. It is built from the same
  0.1.0 source and passes the packaging/integrity gates, but it is not
  Authenticode-signed (SmartScreen warns), not on the signed auto-update feed,
  and was not launch-verified on a live Windows desktop. Treat it as a preview.

Reproducibility

The whole build → sign → notarize → promote → serve flow is documented and
reproducible in the repo:
docs/deploy/2026-07-21-atomic-coordinator-rc-promotion-and-tailnet-linux-acceptance-runbook.md,
with per-artifact digests and evidence in
docs/deploy/receipts/2026-07-21-desktop-0.1.0-stable-release.md.