NeuroTune v0.8.0-alpha.3 — Provider Selection and Diagnosis Reliability

NeuroTune v0.8.0-alpha.3 — Provider Selection and Diagnosis Reliability

Unsigned prerelease for controlled Windows 11 x64 testing, not a stable/general release or a promise of performance gains. Keep independent backups and use a disposable VM for system-changing tests. A green build and matching hashes do not certify native recovery or compatibility.

Downloads

• Installer: NeuroTune_0.8.0-alpha.3_x64-setup.exe — unsigned per-machine NSIS installer.
• Portable: NeuroTune-0.8.0-alpha.3-win-x64.zip — extract the complete folder, including both self-contained agents and the WPR profile. MIT license, README and release notes are included.
• Checksums: SHA256SUMS — verify downloaded bytes before running them.

Windows 11 x64 and WebView2 are required. Normal UAC approval is required; System Protection is required before Apply. Portable means no installation, not no elevation or persistent data. SmartScreen may warn because the binaries are not Authenticode signed. SHA-256 identifies bytes, not an authenticated publisher. Earlier releases remain unchanged.

Changes since alpha.2

• Complete model selection: API/local connections show an explicit Available models dropdown with all IDs returned by the selected endpoint, independent of the model already typed. Manual exact IDs remain supported. Discovery does not silently replace an API model; changing endpoint, protocol or credential clears stale choices. Model availability is provider-controlled: deepseek-v4-flash appears only if returned by the provider or explicitly entered manually. Discovery does not prove inference quota, diagnosis or image support.
• Clearer provider failures: safe HTTP status and ChatGPT app/plan allowance messages precede generic fallback explanations. No raw provider response bodies, automatic retries, alternate provider/model or API-billing fallback are added. This improves visibility; it does not establish or claim to fix the original VM DeepSeek failure's unknown cause.
• Retained incomplete review: failed investigations preserve local findings and their failure cause across restart, visibly marked Not completed. They grant no approval/Apply authority. Finish without changes closes the run explicitly while retaining its report.
• Earlier recovery preflight: legacy journals and unfinished retained runs block complete/advanced diagnosis before scan, capture or provider work. Errors name blocking paths, saved provider settings survive history-load failures, and Refresh rechecks history.
• PrimeBuild attribution: discreet, visible by PrimeBuild branding in full and compact navigation.
• Public documentation cleanup: user, provider, privacy and safety guides remain public; internal plans, historical audits and machine reports are no longer tracked. Current README screenshots use mocked data.
• Coherent alpha.3 metadata: npm/Cargo lockfiles, Tauri, .NET and UI versions agree.

Safety, privacy and upgrade boundaries

AI output is untrusted advice, not arbitrary shell, Registry or firmware write authority. Apply still requires registered/reinspected actions, persisted approval, separate high-risk consent, quality-valid workload Baselines, verified restore point/backups and per-action verification/journaling. Manual guidance and generated scripts remain inert. Failed writes attempt verified rollback; unfinished recovery remains visible.

System-wide diagnostics, imported reports and screenshots never unlock Apply. Scheduling/ISR/DPC traces are not FPS, ping or end-to-end input-latency measurements; accepted comparisons require matching repeated 3+3 workload captures. Advisory audit has no optimization Apply. Neither assistant runs during capture. Defender operations have separate consent and may quarantine/remove files; restore points do not guarantee reversal.

Only consented prepared evidence reaches the selected provider. Redaction is best-effort, not anonymization. Raw ETL stays local; screenshot pixels are not anonymized, may be resent each turn and are not persisted in run journals. Optional System One remains default-off with separate download/cloud consent. No vendor driver, SCEWIN binary, model weights, credential, runtime journal, BIOS writer or security bypass is bundled.

Settings, measurements and DPAPI credentials remain under %LocalAppData%\NeuroTune; protected operation/run journals use %ProgramData%\NeuroTune-journals\<Windows user SID>. Nonempty legacy operations/runs are not automatically imported or trusted. Use the previous build to resolve/review prior writes, preserve independent backups and archive only reviewed journals. Never delete pending recovery or copy editable JSON into protected storage.

See security/upgrade guidance, alpha testing, provider setup, privacy/security, execution boundaries and optional components.

Build provenance and completed checks

• Source/tag commit: 3747bdefe97f5b8e57dce7e77c0c99d98c171776, reviewed PR #17 merged into main; includes #15/#16 fixes. Git tree: 2b6310e1f6d22cc7dce64af6af58bab491df373e.
• Fresh Windows x64 build with self-contained single-file agents and locked Rust dependencies. Local source paths were remapped; clean sidecar compilation avoids carrying stale unremapped incremental outputs.
• Local checks: 163 .NET tests excluding WindowsIntegration, 50 UI tests, 3 Rust tests, .NET format, frontend typecheck/lint/build, Rust fmt/standard Clippy, metadata and mocked browser regressions for models, legacy preflight, incomplete reviews, layouts, languages and privacy/security.
• Independent main CI records the full Windows build, tests, audits, installer and packaging results for this exact source commit.
• npm/NuGet: no known vulnerable dependencies. Cargo audit: no vulnerability entries; six unmaintained transitive-crate warnings and one Linux glib unsoundness warning, with no suppressions. Not a security certification.
• Read-only package checks: versions/commit identities, exact current documents, complete ZIP, matching fresh sidecars, production configuration without diagnostic WebView overrides, no local username path in binaries, and installer/portable equivalence except Tauri's expected three-byte NSIS bundle-kind marker. Installer extracted, not installed or executed. Packaged-agent checks used local state/offline parsing and rejected missing consent; no OAuth/provider, driver or writer execution.

Exact-installer install/uninstall, upgrades, elevated ACL denial, interruption/restart/recovery, actual Defender behavior, DPI/Narrator, live provider/vision access, optional components and physical workload gains remain separately authorized Windows 11 acceptance work. Source/mock and packaging checks do not certify those behaviors.

SHA-256

66ef516417bbf50df9aec0e31d72c39326ba88ce1cf1cff58d41b342d6d15795  NeuroTune_0.8.0-alpha.3_x64-setup.exe
7c872995091ca2f48f6097889984ccdd519cb2bba8459807bb6275ca0164e5e2  NeuroTune-0.8.0-alpha.3-win-x64.zip