NeuroTune v0.8.0-alpha.4 — DeepSeek Flash Diagnosis Reliability

NeuroTune v0.8.0-alpha.4 — DeepSeek Flash Diagnosis Reliability

Unsigned Windows 11 x64 prerelease for controlled testing, not a stable/general release or a promise of performance gains. Use a disposable VM and independent backups for system-changing tests. Alpha.1, alpha.2 and alpha.3 tags/assets are immutable and unchanged; alpha.3 does not contain these DeepSeek corrections.

Updated diagnosis

• Built-in DeepSeek uses documented JSON output and an explicit system-level planner contract, without assuming support for arbitrary custom/local endpoints.
• Stable short investigation-local evidence references are resolved exactly to original IDs before validation/storage. Unknown/unprovided IDs, oversized/repeated requests, unsafe tools and fabricated explicit values still fail closed. No fuzzy matching or extra privacy permission.
• Already-provided facts remain citable but no longer appear as new-evidence requests. Ordinary read-only follow-ups omit module; only driver-details accepts an observed .sys basename.
• Omitted finding values are resolved from the exact validated local fact. Model interpretation remains unverified assessment, not a measured observation or proof of a cause.
• Safe allowlisted validation causes identify the failed stage, without raw responses/arbitrary exception text. A validated retry clears its earlier stored error. No automatic inference retry, substitute model/provider or billing fallback.
• All manifests/lockfiles/components/UI/docs align to alpha.4. A shared-store test fixture is serialized to avoid a demonstrated test-only file-lock race; production recording checks are unchanged.

Downloads

Asset	Bytes	SHA-256
NeuroTune_0.8.0-alpha.4_x64-setup.exe	49,636,692	5a2f58b592a613f481b0ff5057bf9c08875291f45c7478839e2c26ecb964f83d
NeuroTune-0.8.0-alpha.4-win-x64.zip	67,212,697	5ecd7ef3fd94444b18fdbe4db5883e8378cd677fec72c791847e0d0718890bcc
SHA256SUMS	208	6ee2538d4dee758a64f42c72feeccc1450d82e77776a3335a15fac3443eb8f42

Extract the complete portable folder. Portable means no installation, not no elevation or persistent data. WebView2 and normal UAC approval are required. Installer is unsigned per-machine NSIS; SmartScreen warnings are possible. SHA-256 identifies bytes, not an authenticated publisher or installation safety.

Provenance and verification

Publication routing correction: GitHub initially published this draft under
untagged-cc498b76523640be4de3 instead of its intended version tag. The release
was reassociated with the existing annotated v0.8.0-alpha.4 tag; both refs
resolve to the same verified 1b1ddc0 commit. No tag ref, asset byte or checksum
was rewritten, and the temporary ref is retained for audit. Earlier releases
are unchanged.

• Annotated v0.8.0-alpha.4 source: merged main commit 1b1ddc0a32dabe933a7d14d89180c0da328f8a29, tree 57476b413f141e02fcd8ff2b9d0c94b8ece4cce8; includes functional corrections from #18 and release preparation from #19. GitHub verifies the merge commit's signature.
• Required successful main-source build: workflow run 37644540165, dispatched explicitly on that exact main commit after GitHub's PR/ref metadata became inconsistent. No autoapproval, main force-push, policy change or administrator merge was performed by the assistant.
• Fresh serial production build: clean/remapped self-contained .NET Agent/Telemetry, remapped Rust/Tauri, locked dependencies, NSIS and complete portable ZIP. Both sidecars embed 0.8.0-alpha.4+1b1ddc0a32dabe933a7d14d89180c0da328f8a29; UI embeds alpha.4. No diagnostic WebView overrides, debug port/profile or local username paths in the checked binaries.
• Local gates: 179 selected backend, 50 UI and 3 Rust tests, .NET format, frontend typecheck/lint/build, Rust fmt/standard locked Clippy, metadata and mocked browser regressions. README screenshots are mocked illustrations, not host/provider evidence.
• npm/NuGet/Cargo audits report no vulnerability entries; Cargo retains six unmaintained and one Linux glib unsoundness warning, without suppression.
• Installer extracted, not executed/installed: exact fresh sidecars/profile and embedded versions checked; UI differs only by Tauri's expected three-byte NSIS bundle-kind marker. Portable resources/documents/checksums match. Packaged state/offline parsing/redaction and consent-rejection checks passed without OAuth, provider inference, drivers or writers.
• Draft GitHub downloads match the local asset bytes/checksums and API sizes/digests. The actual GitHub tagged-source ZIP matches all 190 tagged blobs; internal plans, private artifacts and runtime journals are excluded.

Actual host evidence — not installer acceptance

On 2026-10-07 the configured deepseek-flash connection was exercised through the real desktop UI, native scans, WPR/ETL analysis and provider investigation. The reviewed functional corrections produced a validated explicit UI retry and a fresh Complete diagnosis: 12 accepted turns, 15 findings, 10 proposals, no fallback/error, Apply disabled. Real model discovery preserved Flash. No browser/provider mock or alternate ChatGPT model was used for those results.

All five owned 30-second system-wide diagnostic captures completed with valid quality/zero lost events; raw ETL was deleted after analysis, runs finished without changes, WPR stopped, inspected action values/operation history unchanged and settings byte-identical. The selected 12-turn/10-minute budget was not increased. Instrumentation used a private WebView profile and loopback-only CDP, removed from subsequent production builds. Private host profiles/journals/screenshots are not shipped.

This validates the corrected read-only source flow, not every provider/model, unattended reliability, exact alpha.4 installer/upgrade/uninstall, workload Baselines/performance gains, ACL denial, interruption/recovery, Defender, physical DPI/Narrator, live vision or optional components. Apply/rollback/recovery acceptance remains separately authorized in a disposable VM. No installation, Apply, rollback, optional-component installation or Defender remediation was run on the host.

Upgrade and safety

Preserve old recovery data. Nonempty legacy LocalAppData operations/runs are not imported, deleted or trusted automatically. Resolve/review prior writes with the previous build and archive only reviewed records; never delete pending recovery or copy editable JSON into protected journals.

AI output remains untrusted advice. System-wide diagnostics, imported reports and screenshots do not unlock Apply. Registered/reinspected actions still require persisted approval, matching workload Baselines, separate high-risk consent, restore point/backups and per-action verification. Scripts/manual proposals stay inert; neither AI runs during capture. Optional components stay default-off/not bundled; Defender has separate consent and may quarantine/remove files.

See release notes, testing, providers and upgrade safety.