OpenZero 7.3.1 - independent local workspace

OpenZero 7.3.1 - independent local workspace

OpenZero nodes operate with their own local configuration, model runtime, tools,
knowledge and optional peer connections. No owner-hosted login, central model
node or company database is required for the supported local runtime.

This update fixes three concrete independence problems:

• The workspace serves its required Socket.IO client locally. The unmodified
  official 4.7.1 browser distribution retains its MIT license and verified npm
  SHA-512 provenance; loading the local panel no longer depends on a CDN.
• Fresh installs choose local computation. CLI and panel share exact model-route
  selection: local Llama, Qwen, GPT-family and namespaced Ollama aliases do not
  imply permission to send prompts to Groq. Explicit cloud/hybrid choices remain
  available; a saved key alone does not choose a cloud route.
• OLLAMA_AUTO_REPAIR_ENABLED=false now prevents model-error repair jobs from
  starting. Messages distinguish disabled repair, cooldown and a newly started
  background repair that may download software or models.

python node_status.py provides a read-only configuration report without network
requests or runtime writes. The owner-authorized GET /api/node/independence
endpoint provides the same summary without API keys, endpoint values, private
peer state or prompts. It describes configuration rather than claiming that a
model has been installed or inference has completed.

Validation for source commit d608c39686ea30a4f152698ea6062d07f34660d8:

• 158 Python tests passed, including a disposable boot of the actual production
  WSGI entry with HTTP transport blocked: local panel and vendor asset 200,
  owner status 200, remote status 403, Socket.IO connection/disconnection and zero
  external HTTP attempts. This boot check does not run model inference.
• 21 browser-extension tests and Manifest V3/static security validation passed.
• GitHub public checks passed on the same source commit.
• The runtime ZIP has 138 entries, including an integrity ledger verifying all
  137 payload files. Runtime keys, .env, models, uploads and private state are
  excluded. The installer pins its runtime and extension assets to this release.

Review the Linux installer before running it, and verify both the installer and
runtime checksum files. Existing user configuration is preserved. Custom
OPENZERO_RELEASE_BASE_URL and OPENZERO_INSTALLER_BASE_URL mirrors remain
available; checksums fetched from the same source detect mismatches rather than
providing an independent publisher signature.

Models, dependencies and software must be present before disconnected use.
Optional web search, user-selected APIs, external voice services, downloads and
explicit peer connections have their own network requirements. This is not a
distributed-training, pooled-inference or general network-isolation claim.

The release contains source and installer scripts, not model weights or a
preinstalled operating-system image. Windows source tests and Linux GitHub checks
do not establish a new Linux production installation on this user's PC.
Original OpenZero source-available terms and all upstream licenses remain in
effect. The separate ZERO ONE privacy notice is updated for its 8.5 source
features; that notice does not establish Store release or installation state.