Kvieta Alpha 4.2

Kvieta Alpha 4.2

Alpha 4.2 improves setup, onboarding and everyday navigation. It is an unsigned
Windows x64 community prerelease, not a final production release.

Highlights

• Setup starts at 960×620 and can shrink to 800×500. Smaller work areas reduce
  the initial size further. Native resize borders, narrower spacing and vertical
  scrolling keep long steps accessible. The close control now fits its icon.
• Language selection uses TR/EN badges instead of flags. Recovery codes are
  presented as readable tiles while copy, file export and acknowledgement remain.
• The first Control Center launch opens a guided tour that highlights controls
  and navigates through pages appropriate to the selected mode. Back/Next, Esc,
  and the top-right skip button are supported; ? and F1 reopen it.
• Today emphasizes remaining time, measured usage and the next plan. Rule-count
  and blocked-app-count tiles are removed from this overview.
• Applications contains most-used apps and all of today's measured usage grouped
  by application name into browsers, communication, productivity, entertainment
  and other applications. Insights mode can view usage without rule editing.
• Settings is grouped into appearance/general, protection, privacy and maintenance.
  Rhythm details have a prominent expandable header. Cards reflow in narrow
  windows, and persistent 100–150% zoom includes the sidebar and header.

Behavior and recovery fixes

• Setup and the application share a time picker with hour/minute selection and
  direct keyboard input. Invalid plan times remain subject to validation.
• Application selection accepts multiple EXEs and performs identity capture away
  from the UI thread; rule changes still require Save.
• Phone enrollment no longer shows the recovery-code replacement warning.
  That warning remains attached to actual code replacement. The post-install
  enrollment offer is recorded as shown even when cancelled, and waits for the
  guided tour to finish. Manual enrollment remains available in Settings.
• Flexible Personal mode avoids unnecessary relaxation delays and extra-time
  requests. Delays when relaxing an existing stronger policy remain intact.
• Device controls use an available theme brush; session thoughts rotate locally.

Installation and migration

Use Kvieta-Setup-Alpha-4.2.exe for guided setup. Numeric MSI version 4.2.0
supersedes published Alpha 4 (1.0.0) and local Alpha 4.1 builds (4.1.x). The
existing update path is intended to preserve settings, history, recovery material
and protected policy. Phone pairing itself does not invalidate recovery codes.
No account or hosted service is introduced by this release.

Validation and known limitations

Local validation includes formatting, Debug/Release builds and smoke tests,
public-build bypass checks, package metadata and source-manifest checks. WPF
renders cover compact setup and main-window layouts, including 840×540 at 150%
zoom with synthetic usage. Regression checks cover guided navigation/skip,
responsive layout, typed times and durable first-run preferences.

The package is not Authenticode-signed; Windows SmartScreen may show an unknown
publisher warning. Verify the attached SHA-256 files before installation.
Application categories are inferred from names and may fall under Other.
Live phone enrollment and the complete Windows/VM upgrade, multi-monitor, DPI,
sleep and protection lifecycle matrix still require field validation. Offscreen
render checks do not replace that testing. See the repository's security and
release-readiness documentation for the remaining alpha limitations.

Attached: Setup EXE, standalone MSI, their SHA-256 files and release-manifest.json.

Kvieta Alpha 4

Kvieta Alpha 4 completes the planned pre-V1 product software packages around
honest measurement, daily Rhythm goals, focus closure, policy explanation,
runtime health, notice priority, and local-data control. The numeric MSI version
remains 1.0.0 for in-place servicing; the public package label is Alpha-4
and the GitHub tag is kvieta-alpha-4.

Notice priority and My data

• Adds a shared notice priority, event identity, merge key, and expiration model.
  Current time warnings replace stale ones, duplicate announcements are suppressed,
  expired notices do not flood the user after sleep, and low-priority celebration
  UI does not take focus from authorization dialogs.
• Adds Settings > Privacy and data > My data, showing local categories,
  retention and date range before export or deletion. JSON/CSV previews explicitly
  disclose application-name inclusion and excluded secrets.
• Separates deletion of detailed usage, reset of Rhythm Streak/Protectors, and
  deletion of all usage plus rhythm. Confirmation is required and none of these
  scopes removes plans, PIN state, clock safety, security identity, or Guardian policy.

Safe preview, visible health, and coherent endings

• Adds a clearly labelled, synthetic time-expiry preview that never starts a
  session, schedules notifications, changes local data, or invokes protection.
  Example actions only explain behavior, and protected modes refuse the preview
  while Guardian health needs attention.
• Separates measurement, Guardian, and latest local-save health. Disabled,
  not-required, checking, stale, recovered, and error states no longer collapse
  into one reassuring indicator; retry, repair, and diagnostics keep their
  existing local authorization boundaries.
• Models focus completion/early ending separately from daily limit, plan end,
  and application limit. Simultaneous focus success and an access boundary now
  retain the success while suppressing an invalid continue action, with stable
  event identities preventing duplicate outcomes.

Protection outcome and recovery review

• Adds a shared policy-derived outcome model for setup and in-app transitions
  into Family or Protected Personal use. It explains the actual time-expiry
  action, active plan days, immediate protection increase, Guardian requirement,
  and the standard-user/separate-administrator boundary.
• Keeps acknowledgement informational: it cannot replace PIN verification,
  recovery preparation, Guardian provisioning, or Windows administrator consent.
• Requires first-time Family transitions to prepare and explicitly acknowledge
  one-time recovery codes before the policy can be saved. Plain codes are shown
  only for delivery; settings retain verifier records rather than code content.
• Rejects a Family transition atomically when its PIN or recovery preparation is
  missing, while update/repair cancellation leaves an existing protected policy
  unchanged.

Honest first-week measurement

• Separates measurement disabled, no observation yet, confirmed measured zero,
  collecting baseline, ready comparison, backup recovery, and unreadable local
  data instead of presenting every missing state as zero usage or improvement.
• Adds one mode-appropriate first action for incomplete weeks: enable local
  measurement, start a 25-minute focus, review today's plan, or review today's
  summary. Measurement remains optional and does not weaken plans or protection.
• Shows the exact current and previous seven-day periods with their valid-day
  counts, explains awareness, app-rule, and focus counters as separate metrics,
  and withholds reduction suggestions until both periods are comparable.
• Migrates usage data to schema 9 with an explicit awareness-observation marker;
  positive legacy records remain measured while unknown legacy zeroes stay neutral.
• Keeps setup templates editable and verifies that update/repair flows preserving
  existing settings do not reapply a selected template over user choices.

Focus closure and explainable policy state

• Adds an optional, 80-character focus intention that stays only in the live
  session view model and is never persisted to usage history, diagnostics, or
  sharing. Quick Focus remains immediate and does not require an intention.
• Distinguishes completed and early-ended focus sessions, shows actual active
  time and daily-goal progress, and offers same-duration continuation only
  through the current schedule and limit checks.
• Introduces one shared explanation model for Today, session/block surfaces,
  and application-rule previews: what happened, which rule caused it, when it
  changes if known, and which action is available.
• Uses the real application enforcement predicate for read-only rule previews,
  identifies clock, schedule, limit, pending-policy, temporary-allowance, and
  Guardian states, and avoids inventing an end time when none is known.
• Serializes extra-time prompts on the session surface so repeated clicks cannot
  open parallel approval flows; all grants still use the existing local PIN path.

Daily goals, suggestions, and the seven-day rhythm

• Adds one mode-appropriate daily goal. Flexible Personal mode can use a focus
  minute or completed-session target, Insights requires an explicit summary
  review action, and protected modes measure balance without granting authority.
• Snapshots goal type and amount per day, shows real progress, and applies a
  changed goal from the next day instead of rewriting today's result.
• Makes suggestions explain their seven-day basis and exact old-to-new change,
  then updates only that setting after confirmation. Reminder/hide failures keep
  the card visible, reminders return while the app is open, and hidden cards can
  be restored from Settings.
• Adds a bilingual, icon-and-text seven-day rhythm strip with selectable goal,
  progress, and outcome details. The explicit share action renders the same
  seven-day results, and milestone celebrations persist so they appear once.
• Starts Quick Focus without publishing unrelated unsaved Settings edits.
• Migrates settings to schema 10 and Rhythm preferences to schema 2.

Rhythm correctness and persistence

• Keeps an unfinished current-day focus or summary goal pending until day
  close, so merely starting to use the PC cannot spend a Rhythm Protector early.
• Snapshots the daily Rhythm goal, balance limit, planned-rest state, approved
  allowance, and final outcome in the local usage record. Later mode or schedule
  changes no longer reinterpret finalized days.
• Migrates local usage data to schema 9. Legacy days without a trustworthy goal
  snapshot remain neutral instead of being rewarded or penalized using today's settings.
• Preserves current streak, best streak, Protector balance, and successful-day
  count in a compact checkpoint when detailed usage history is trimmed.
• Records temporary allowances as their approved minute amount instead of
  excusing the entire day. Focus and summary goals still require their own behavior.
• Adds regressions for pending current-day goals, schedule isolation, mode
  changes, legacy neutral days, approved allowances, and retention checkpoints.

Focus timing

• Decouples Quick Focus progress from the daily usage counter and advances it
  only by active seconds actually accepted by the session engine.
• Splits active time at local midnight before rolling the daily ledger, keeping
  the focus countdown continuous while attributing usage to the correct day.
• Persists an active focus session ID, target, and elapsed active time so a
  recorded partial session can return after a process restart without counting
  the unknown time while Kvieta was closed.
• Makes focus completion repeat-safe across stale concurrent saves and clears
  persisted focus state when the user explicitly ends the session.
• Clarifies in both languages that deleting usage data also resets the current
  and best Rhythm Streak and Rhythm Protectors while leaving plans and protection unchanged.

Alpha 4 correctness and security fixes

• Derives in-app protection-transition copy from the actual target mode, expiry
  action, Guardian requirement, and recovery state instead of claiming Windows
  lock or increased protection for every transition.
• Counts only completed focus sessions of at least five minutes toward a
  session-count Rhythm goal; shorter custom sessions still retain their elapsed
  focus time without inflating the streak target.
• Prevents a Rhythm-only reset from immediately recreating today's streak from
  activity recorded before the reset while preserving raw local usage.
• Keeps measurement health in the waiting state until a real local observation
  exists, even when another ledger write has a recent timestamp.
• Resolves historical rule application names for JSON and CSV exports and uses
  an explicit deleted-application fallback instead of exporting blank names.

Alpha 4 validation and known limits

• Debug and Release builds and smoke-test configurations pass with zero warnings
  and zero errors. Documentation, public-build bypass, installer metadata,
  embedded MSI, checksum, and manifest gates are required for the tagged package.
• This remains an unsigned community prerelease. Windows SmartScreen may show an
  unknown-publisher warning; the package is not Authenticode-signed.
• Final V1 still requires the documented real-device Guardian, lifecycle,
  upgrade, accessibility, multi-monitor/DPI, and long-running usage matrix.

Kvieta Alpha 3

Kvieta Alpha 3 is an unsigned community prerelease focused on a clearer, more engaging pre-V1 experience while keeping all usage data local to the Windows device.

Highlights

• Purpose-led setup with five editable templates and the first Rhythm goal shown before installation
• A redesigned Today view with top applications, yesterday comparison, the next plan, custom Quick Focus, and repeat-last-focus
• Direct application-rule creation for daily limits, plan-only access, focus blocking, unrestricted use, and permanent blocking
• Calm 15/5/1-minute wrap-up actions with controlled breaks, permitted extra time, and direct planning for tomorrow
• A local Rhythm Streak with rest days, milestones, Rhythm Protectors, allowance/recovery fairness, and weekly focus reporting
• Privacy-safe 1200×630 weekly image cards plus persistent apply, remind-later, and hide choices for local suggestions

Behavior, security, and migration

• Family and protected extra-time paths retain administrator verification, including requests made before time reaches zero
• Session-warning actions cannot bypass permission checks
• Existing settings and protected policy remain compatible
• Usage history migrates locally to schema 7 for focus completion and Rhythm fairness markers
• No account or cloud upload is introduced

Validation

• Formatting verification passed
• Debug and Release builds passed with 0 warnings and 0 errors
• Debug and Release smoke tests passed
• Bilingual documentation and public-build bypass checks passed
• Package metadata and release manifest verified against commit 63811a142eb91ca2c3d217a67f989e24a3103515
• Setup EXE SHA-256: d63e4ae3462ae4e99ce680ddd9c754629a079cd51a4107aadf06ccde04024e28
• MSI SHA-256: 97282b7d08c7c42ffcbe3ba9422e89da9bb40fa17080ef7810c3796ce4cf9397

Known limitations

Broad physical-device coverage for clean installation and Alpha upgrades, Guardian lifecycle, multi-monitor/DPI, sleep/hibernate, repair/uninstall, and extended real-world use remains open before final v1.0.0.

This package is intentionally unsigned. Windows SmartScreen may display an Unknown publisher warning. Verify downloads with the attached SHA-256 files before running them.

Kvieta Alpha 2.1

Kvieta Alpha 2.1 is an unsigned community preview focused on usability and reliability.

Highlights:

• Weekly schedule planning directly in setup for managed modes
• Clearer seven-day activity bars and roomier application usage cards
• Improved trusted-device enrollment, transfer, and administrator approval
• Refined administrator, bonus-time, tray, session, and setup surfaces
• Controlled uninstall with optional local-data removal and completion feedback
• Expanded scheduling, Guardian identity, and companion regression coverage

Validation:

• Debug and Release builds passed with 0 warnings and 0 errors
• Debug and Release smoke tests passed
• Documentation and public-build checks passed
• Package metadata and release manifest verified against commit 4928649

This package is intentionally unsigned. Windows SmartScreen may display an unknown-publisher warning. Verify downloads with the attached SHA-256 files before running them.

Kvieta Alpha 2

Kvieta Alpha 2 is the current recommended community preview for Windows.

Highlights

• Compact wheel-style hour and minute picker for weekly schedules.
• Refined Recovery Center and stable recovery-code copy/download flow.
• Direct and automatic recovery after Windows clock corrections.
• Administrator and Control Center time no longer consumes the managed user's allowance.
• Guardian PIN authorization, repair, and protected-window reliability improvements from Alpha 1 field testing.
• Crisp vector Kvieta branding throughout the app and setup.

Alpha 2 can be installed directly over an earlier Kvieta Alpha package. Existing settings, usage history, recovery material, and protected policy are preserved.

This community preview is intentionally unsigned. Windows SmartScreen may display an Unknown publisher warning.

Setup EXE SHA-256: 44444d2c07add93b5b44e374b4de5a426e7b8759efced119c5252485edf0dd2b

Release source commit: 0444bd21d4e58ccf2538b87c3e37d49fee44d9a1

Kvieta Alpha 1 Hotfix 2

Kvieta Alpha 1 Hotfix 2 keeps administrator dialogs visibly above the protected full-screen session surface.

Fixed

• Administrator-exit PIN dialogs now join the session surface's topmost z-order group.
• Bonus-time approval dialogs use the same protected modal presentation.
• PIN dialogs explicitly activate and focus the PIN field after loading.
• The protected surface remains full-screen and topmost; the fix does not expose the desktop.

Hotfix 2 includes the Guardian community-version authorization correction from Hotfix 1.

Install

Run Kvieta-Setup-Alpha-1-Hotfix-2.exe over the existing Alpha 1 or Hotfix 1 installation and keep the existing settings. This community preview is intentionally unsigned, so Windows SmartScreen may display an Unknown publisher warning.

Verification

• Setup EXE SHA-256: 0c9a974072929e47369efdd951bdc42341a836814aa447f48d8299fbf70e5f72
• MSI SHA-256: 02af7e53fa7536052ec0c2bc30777cc4629f88a83cd0e3b9a290f33f58307962
• Source commit: 56c24620180d64b267bcd61747ca3ec954e65149

The checksum files and release manifest are attached.

Kvieta Alpha 1 Hotfix 1 (superseded — use Hotfix 2)

Warning

Superseded: Download Kvieta Alpha 1 Hotfix 2 instead. It includes the Guardian PIN authorization fix and keeps administrator dialogs visible above the protected session surface.

Kvieta Alpha 1 Hotfix 1 fixes the Guardian authorization bug that could make every valid administrator PIN appear incorrect in the original Alpha 1 package.

What was wrong

The original public EXE used a human-readable product version such as Alpha-1+<source-commit>, while Windows Installer registered numeric version 1.0.0 and the executable carried numeric file version 1.0.0.0. Guardian attempted to parse the human-readable product version as a numeric version and rejected the otherwise valid, installer-managed, SHA-256-matched client before checking the PIN.

What changed

• Guardian now reads the numeric Windows file version.
• Three- and four-part versions such as 1.0.0 and 1.0.0.0 are normalized before comparison.
• Regression coverage exercises the real Kvieta assembly metadata and community-package identity path.

Install

Download and run Kvieta-Setup-Alpha-1-Hotfix-1.exe over the existing Alpha 1 installation. Existing settings and protected policy are preserved. The original Alpha 1 package cannot be repaired into this fix because the affected binary itself must be replaced.

This community preview is intentionally unsigned. Windows SmartScreen may display an Unknown publisher warning.

Verification

• Setup EXE SHA-256: e13297d9713acdcae13ec67473749aebb03b864c9f27544a3d5cfb3ac0b8f13b
• MSI SHA-256: e644df2fb415318d7f0df19d15ec91e1499c1aa2e0ad2ead72fc718416adb44b
• Source commit: 4ed321023926438a88dea77d2b2b85e5dc2db47d

The checksum files and release manifest are attached.

Kvieta Alpha 1 (superseded — use Hotfix 2)

Warning

Superseded: Download Kvieta Alpha 1 Hotfix 2 instead. It includes the Guardian PIN authorization fix and keeps administrator dialogs visible above the protected session surface.

Highlights

• Complete Kvieta identity across the app, setup experience, tray, Windows executable, installer, and documentation.
• Three usage modes: Tracking only, For myself, and For someone I manage.
• Weekly schedules, daily limits, controlled breaks, focus sessions, application rules, and local usage history.
• Optional trusted-phone enrollment and local PIN recovery with QR transfer, comparison codes, expiry, replay protection, and explicit revocation.
• More reliable Guardian startup, repair, policy handoff, administrator exit, and protected-session lifecycle.
• Safer install, update, repair, reconfiguration, rollback, and removal flows.

Download

For most people, download Kvieta-Setup-Alpha-1.exe. The standalone MSI is included for managed or unattended installation.

This community preview is intentionally unsigned. Windows SmartScreen may display an Unknown publisher warning.

Verification

• Setup EXE SHA-256: a29169986307434d819e1d7dbb11c30d768058548ce1ef1a166978b93fc87871
• MSI SHA-256: 29334604fec9f6f577bb830951446c7533bf6e7cb5493fa799ac075e18838fdb
• Source commit: 9e688766347a83be133b9abc7328fd5999e9949f

The checksum files and schema-v2 release manifest are attached.

Important boundary

Protected mode is designed primarily for a standard Windows account managed through a separate administrator account. No desktop application can guarantee absolute resistance against someone with physical access and Windows administrator privileges. This is an early preview; the broader installer, DPI, Guardian, escape-path, and Windows lifecycle matrix remains open before final v1.0.0.

Otium Alpha 2

Otium Alpha 2

Alpha 2, ilk topluluk sürümünden sonra gerçek Windows cihazlarında yapılan testlerden çıkan büyük güvenilirlik ve kurtarma güncellemesidir.

Öne çıkan yenilikler

• Güvenilir telefon: Kurulumda veya Kontrol Merkezi'nden isteğe bağlı QR eşleştirme, kısa ömürlü doğrulama istekleri ve tek etkin güvenilir cihaz.
• PIN kurtarma: Yönetici PIN'i unutulduğunda güvenilir telefondan onay veya çevrimdışı tek kullanımlık kurtarma kodu.
• Daha sağlam Guardian: Yönetici çıkışı, korumalı oturum geçişi, servis başlatma/onarım, policy aktarımı ve dosya kilitleri yeniden düzenlendi.
• Kurulum ve güncelleme: Eski Alpha kurulumlarını güncelleme/onarma, yarım kalan kurulumdan kurtarma, yeniden yapılandırma ve uygulama içinden kaldırma geliştirildi.
• Tek pencere yaşam döngüsü: Aynı anda ikinci Kontrol Merkezi veya ikinci oturum ekranı oluşması engellendi.
• Oturum iyileştirmeleri: Uygulama kuralları, güç menüsü, Windows kilidi, yönetici doğrulaması ve korumalı ekran geçişleri düzeltildi.
• Daha anlaşılır arayüz: PIN istemleri, telefon eşleştirme, hata/progress durumları ve Otium açık/koyu teması iyileştirildi.

Güvenlik ve gizlilik

• Telefon eşleştirme ve onay istekleri imzalı, kısa ömürlü, tekrar oynatmaya karşı korumalı ve hız sınırlıdır.
• PIN, yeni PIN, kurtarma kodları ve kullanım verileri telefona gönderilmez.
• Kullanım verileri ve planlar cihazda kalır; hesap gerekmez.
• Alpha 2 bilerek imzasız bir prerelease olarak yayımlanmıştır. Windows SmartScreen Bilinmeyen yayıncı / Unknown publisher uyarısı gösterebilir.

İndirme

Çoğu kullanıcı için Otium-Setup-Alpha-2.exe yeterlidir. MSI dosyası yönetilen veya sessiz kurulum içindir.

Setup SHA-256
073bee551ce3d6a907eca67cbc76e237448a503eb4c4632b944127ad8ae1c090

MSI SHA-256
5822fba5f8abb9f49604cf58b93c03e0c0b028e086e270f406c52add91b5dc79

Release commit: ca2181cd811c7ad2c05a05fe9b85bdff87f730a9

---

English summary

Otium Alpha 2 adds optional trusted-phone enrollment and PIN recovery, hardens Guardian and administrator-exit transitions, repairs update/removal flows for older Alpha installations, prevents duplicate management/session windows, and fixes application rules, power actions, locking, setup, and protected-session regressions found during real-device testing.

This is an intentionally unsigned community prerelease. Verify the SHA-256 checksum before installing.

Otium v1.0.0-alpha.1 — First community prerelease

v1.0.0-alpha.1 is the first public test package for real-device feedback. It is an unsigned Windows community prerelease, not the final V1 release. It consolidates installer, recovery, diagnostics, usage-mode, personal-protection, Guardian, and security work completed after v0.16.1.

The final v1.0.0 tag will only be created after the remaining Windows escape-path, public community package integrity, installer lifecycle, and real-device test requirements have been completed.

Highlights

• Replaced the old technical mode names with three user-facing usage modes: Tracking only, For myself, and For someone I manage.
• Added Flexible, Balanced, and Guarded personal-protection levels.
• Added Guardian-backed personal protection without turning a self-selected PIN into an instant escape mechanism.
• Converted Flexible mode into a user-controlled manual focus session.
• Hardened the Control Center, session surface, tray, and single-instance window lifecycle.

Flexible personal mode

• Removed the weekly schedule page and allowed-hour enforcement.
• Disabled forced daily-limit enforcement.
• Sessions now start only after an explicit user action.
• Added a stopwatch that starts from 00:00, pauses during a break, resumes correctly, and resets when the session ends.
• Application rules apply only while a Flexible focus session is active.
• Guardian is never required, while local usage history continues to work.

Balanced personal mode

• Retains weekly schedules, daily limits, application rules, and delayed relaxation of restrictions.
• Keeps Guardian disabled while preserving the personal change-delay policy.
• Reuses a single background session controller instead of creating new windows during navigation.
• Hides the Control Center from the taskbar before presenting the session surface.

Guarded personal mode

• Added Guarded · Guardian as the strictest personal-protection level.
• Uses an internal cryptographic Guardian credential instead of a user-created administrator PIN.
• Lowering protection is queued using the configured personal change delay.
• Guardian applies an expired relaxation even when the Control Center is closed.
• Opening the Control Center does not silently disable enforcement.
• Windows administrator recovery remains the emergency uninstall and repair path.

Managed and protected use

• Preserved administrator-PIN verification for For someone I manage.
• Fixed protected administrator exit and Control Center transitions.
• Strengthened Guardian enrollment, protected-policy synchronization, recovery, and version compatibility checks.
• Restricted test-only unlock behavior to Development builds.

Security hardening completed for Alpha.1

• Removed the offline administrator-PIN verifier from user-readable protected policy copies. Public policy files now contain a non-verifying marker while the real verifier remains restricted to Guardian and administrator storage.
• Routed protected-mode PIN checks through authenticated Guardian IPC with persistent throttling, replay protection, and migration of older policy files.
• Serialized PIN-dialog verification so parallel clicks or Enter presses cannot submit multiple attempts concurrently.
• Removed the installer elevation time-of-check/time-of-use gap. The elevated setup process now extracts and verifies its embedded MSI inside an ACL-restricted ProgramData staging directory before invoking Windows Installer.
• Added process-start observation and verified parent ancestry for launcher and child-process application rules.
• Preserved protected credential redaction when settings or pending policy targets are copied back to the user profile.

Alpha.1 behavior and reliability fixes

• Removed the Sign out limit action after a real-use test exposed a repeated Windows sign-out loop. Existing settings using it migrate to the safer Windows lock action.
• Changed usage-mode selection so Protected mode and Guardian policy changes are staged in the interface and applied only after Save succeeds.
• Prevented duplicate PIN submissions while Guardian verification is in progress.
• Replaced frequent system-theme registry polling with Windows preference-change notifications.
• Consolidated Guardian IPC request handling and reduced repeated application-rule matching work.
• Improved Recovery Center sizing and scrolling on constrained displays.
• Confirmed the basic protected surface and secondary-display shields on a physical two-monitor setup.

Community package

• Added an unsigned community package kind that uses the Release configuration and excludes every development/test bypass.
• Kept community artifacts technically separate from Debug test installers.
• Produces a self-contained Setup EXE, standalone MSI, SHA-256 files, and a schema-v2 release manifest tied to the exact source commit.
• Verifies setup/MSI metadata, embedded package integrity, release configuration, artifact sizes, hashes, and the absence of public-build test unlock markers.
• Windows SmartScreen may show an unknown-publisher warning because Alpha.1 is intentionally unsigned.

Window and startup reliability

• Fixed a Tracking-only startup crash caused by an invisible maximized WPF window.
• Prevented rapid Session Screen clicks from creating duplicate session surfaces.
• Prevented repeated Control Center requests from creating duplicate management windows.
• Added transition guards around session and Control Center navigation.
• Replaced the stale Awareness label with Tracking only.
• Normalized irrelevant personal-protection fields outside personal mode.

Recovery, diagnostics, and privacy

• Added Guardian health and version compatibility reporting.
• Added privacy-safe diagnostic export without PINs, recovery secrets, window titles, or document content.
• Added last-known-good settings recovery and installer repair flows.
• Added delayed policy-change details and recovery audit events.
• Kept all usage data local to the device.
• Expanded the Recovery Center into a System Health view with separate application, installer, Guardian, and local-data status.
• Added one-click privacy-safe diagnostic export from the health surface.

Windows lifecycle

• Added a serialized lock, unlock, suspend, and resume state policy.
• Atomically pauses active timing before suspend and resumes only when the system was not locked.
• Preserves the user-controlled Break state after Win+L and rebuilds the protected display topology after resume.
• Records bounded, content-free lifecycle audit events for diagnostics.

Open-source project foundation

• Added the MIT License, a support policy, and matching English/Turkish usage guides.
• Corrected stale RC, two-mode, and planned Application Identity claims in both READMEs.
• Documented the deliberate unsigned community-release direction without treating Development bypasses as release security.
• Added a CI documentation gate for bilingual status, modes, install/update, uninstall, support, and license coverage.

Removed or deferred

• Removed unstable one-click application suggestions from this release.
• Moved reliable live suggestion refresh to the post-v1 roadmap.
• Kept AppLocker and WDAC integration as a future optional protection level because availability depends on Windows edition and policy.

Known Alpha.1 limitations and final V1 blockers

• Balanced session-surface recovery has been hardened and passed the initial single-monitor manual test; Explorer restart, virtual desktops, and the wider repeatable Windows matrix remain open.
• The unsigned community packaging path is ready, but the published Alpha.1 artifact must be built from and matched to its release commit.
• Clean install, Protected Guardian enrollment, expiry behavior, repair, and uninstall are the first post-publication Alpha.1 field tests on a separate Windows device. Upgrade and rollback remain part of the broader final V1 matrix.
• Reboot, Win+L, sleep, hibernation, Explorer restart, user switching, Remote Desktop, multiple monitors, and standard-user scenarios remain in the final Windows matrix.

Validation completed

• Debug and Release builds complete with zero warnings and zero errors.
• Core smoke tests pass in both configurations.
• Settings migration, delayed relaxation, Guardian credentials, protected-policy synchronization, and manual Flexible sessions have automated regression coverage.
• A real-process startup diagnostic confirmed that the Tracking-only startup crash no longer occurs.
• Protected PIN redaction, legacy Sign-out migration, and save-gated Protected mode transitions have automated regression coverage.
• The unsigned Release community package passed metadata, embedded MSI, manifest, SHA-256, and public-build bypass verification.

Download and integrity

Use Otium-Setup-1.0.0-alpha.1.exe for the normal bilingual setup experience. The standalone MSI is provided for managed or unattended installation.

This community prerelease is intentionally unsigned. Windows SmartScreen may show an Unknown publisher warning. Verify the SHA-256 value before running it:

• Setup EXE: 8736c995fc3e7add6020c30fdc2fbf2d10d1aaaf1786cd64d9b10acfb3d76260
• MSI: ceabdde9ffcf8f0a17637fe430cca2500aad06d58c08a0fbe557f1220a79608e
• Source commit: 4dd94ca68b4c9c3e93c1de8db15be7ce3260782e