Record Store v0.1.1

First release published as container images. Everything before this was built
from a repository checkout.

Added

• Object sharing: share links, capability tokens, and unlock tickets, in the new
  record-store-sharing crate, with a share viewer and embed links in the console.
• Safe inline object preview for images, text, PDFs, and media, in the management
  API and the console.
• Per-bucket CORS configuration across the domain model and the S3 protocol layer.
• A documentation site built with MkDocs Material, covering getting started,
  concepts, guides, SDKs, administration, deployment, cluster operation, security,
  operations, reference, and troubleshooting, published to GitHub Pages.
• Console screens for metrics, durability, rebalance, service account detail, and
  bucket lifecycle rules; a command palette with entity commands and keyboard
  navigation; audit filtering by source IP and request ID; and a collapsible sidebar.
• A Compose file for Coolify deployments at deploy/docker/docker-compose.yaml.
• Container images published to the GitHub Container Registry for linux/amd64
  and linux/arm64, with SPDX SBOMs per image and architecture, and SHA-256
  checksums covering every release asset. Images are published unsigned; see
  Verifying a Release.

Changed

• Renamed the product from OES to Record Store throughout: crate and binary names,
  the RECORD_STORE_ environment variable prefix, Protobuf packages under
  proto/record-store/, Dockerfiles, Compose files, the example configuration file
  (now record-store.example.toml), documentation, and the compatibility tests.
  Deployments carrying the old environment variable prefix must be updated.
• Reworked object storage onto a streaming local filesystem backend.
• Rebuilt the console's visual language on design tokens, with accessibility and
  focus-visible improvements throughout, and a redesigned login page.
• The console now labels the deployment mode and checks cluster capability before
  offering cluster-only views.

Fixed

• Cluster membership no longer fails outright when quorum is momentarily
  unavailable; the membership barrier waits instead.
• The console tolerates a browser that refuses localStorage access rather than
  failing to render the theme toggle.

Documentation

• README documents AWS response checksum validation and path-style addressing.
• Added installation, container image, release verification, and maintainer
  release documentation for the published images.

Containers

Published to the GitHub Container Registry for linux/amd64 and linux/arm64.
One pull resolves the architecture it is run on.

docker pull ghcr.io/openelementslabs/record-store:0.1.1
docker pull ghcr.io/openelementslabs/record-store-console:0.1.1

A version tag selects a release; a digest selects an exact artifact. Pin the
digest in production:

ghcr.io/openelementslabs/record-store@sha256:6e49fed425c13b364bc4ebebd82044f696712bd9b01a2882d32e26b2e8b21dbb
ghcr.io/openelementslabs/record-store-console@sha256:1fb87e34ed09254f78f041da83f7d0b6022b7a7c2ce951c2914853d5136943d8

0.1.1 is immutable. A fix is released as the next patch version, never as a
rebuild of this one.

Verification

Confirm the image reports the version it is tagged with:

docker run --rm --entrypoint record-store ghcr.io/openelementslabs/record-store:0.1.1 --version

Inspect the published manifest, its digest, and its platforms:

docker buildx imagetools inspect ghcr.io/openelementslabs/record-store:0.1.1

Verify the downloadable archives against the published checksums:

sha256sum -c SHA256SUMS      # macOS: shasum -a 256 -c SHA256SUMS

Assets

Linux binary archives contain record-store and record-store-server, taken from
the published images so the archive and the container hold the same build. An
SPDX SBOM is attached per image and per architecture.

Images are published unsigned: GitHub's artifact attestation service is not
available to this repository, so there is no gh attestation verify to run. The
release tag is signed, and SHA256SUMS covers every asset here. See
Verifying a Release.

macOS builds are not published; build from source with cargo build --release.