Voice Transcriber v1.0.0

Voice Transcriber v1.0.0

Dictate a thought, review it, and intentionally keep or discard the text on Linux.

See the workflow

Watch the three-state guided demo
made with synthetic sample text, then read the
support matrix
before installing.

What changed

Added

• A public privacy notice and threat model spanning microphone capture, local
  VAD, bounded memory, provider requests, credentials, exports, opt-in text
  history, logs, local executables, and release supply chain.
• Privacy regression tests for raw-audio non-persistence, secret and provider
  detail redaction, history-off defaults, explicit text storage permissions,
  and deletion.
• Tag-driven release automation that produces a checksum, CycloneDX SBOM,
  deterministic test report, GitHub provenance and SBOM attestations, and
  downloadable Sigstore bundles.
• A contributor map with architecture, no-key development, fake-fixture, UI,
  packaging, and issue-to-PR guides; plus eight maintained public tasks.
• An FAQ, explicit public-feedback loop, and technical/user launch stories
  with original cover art.

Changed

• Expanded CI to Python 3.9, 3.11, and 3.14 with branch coverage, wheel/sdist
  builds, hash-pinned dependency audit, Bandit, Ruff, and compilation.
• Hardened Flatpak verification with documented linter exceptions, mirrored
  AppStream media, an offline no-download rebuild, installed-bundle smoke, and
  compatibility-safe reporting.
• Release notes now lead from a visual demo to verified installation, support,
  privacy delta, benchmark receipt, and bounded help-wanted tasks.

Privacy

• The runtime data path is unchanged: local VAD precedes Groq transmission,
  raw audio is not persisted by the app, transcript history stays disabled by
  default, and exports remain explicit.
• Release and diagnostic evidence adds no analytics, crash upload, transcript
  collection, recording collection, or project server.
• The experimental local provider remains source-only, explicitly flagged,
  user-supplied, and disabled in Flatpak; v1 does not relabel it as supported.

Verification

• Fifty-nine deterministic unit tests, Ruff, source compilation, release
  version checks, and release-note surface tests pass locally before the tag.
• Candidate commit 1db98066a75329fc5ac5b6b13cf3a3be15fa4428 passed CI run
  33019179553 on Python 3.9, 3.11, and 3.14 plus the dependency/security job;
  Flatpak run 33019179602 passed lints, online build, offline rebuild,
  install/GTK/CLI smoke, and removal; CodeQL run 33019179363 passed all three
  detected languages with no open alerts at verification time.
• The tag workflow records the exact release commit and workflow URL in its
  downloadable test report. Physical microphone/desktop combinations remain a
  separately labelled community gate.

Install and verify

Download the x86_64 Flatpak and its .sha256 file from this release, then run:

sha256sum --check voice-transcriber-1.0.0-x86_64.flatpak.sha256
flatpak install --user ./voice-transcriber-1.0.0-x86_64.flatpak

The artifact maps to commit c2244664fda6cc1603fada2ee60632e00c403d39. This release also publishes a CycloneDX
SBOM and downloadable Sigstore provenance/SBOM-attestation bundles. Verify online
with gh attestation verify voice-transcriber-1.0.0-x86_64.flatpak --repo OthmaneBlial/audio-capture.

Privacy delta

The versioned changelog above contains the complete Privacy subsection for
this release. The enduring microphone-to-export contract is documented in the
privacy notice
and threat model.

Support boundary

The package targets x86_64 Linux, GTK 3, Wayland/fallback X11, and the system
PulseAudio/PipeWire route. Automated package and accessibility checks are not a
substitute for the separately recorded real-microphone gate. Read
docs/SUPPORT.md.

Benchmark and help wanted

Published benchmark receipts live in
benchmarks/results/.
Small contributor tasks are labelled
good first issue
and help wanted.