Noda 1.0.2

Download Windows Setup (x64) · Checksums · Validation details

Noda 1.0.2

Stable version — Windows 10/11 x64 with AVX2.

Changes

• New profiles prepare semantic search automatically. Setup remains small; the
  approximately 1.1 GB model is downloaded on first preparation and cached.
• Semantic-search setup disappears after the model is ready. Recovery remains
  available for disabled or unavailable search; explicit text-only choices persist.
• Remove runtime/startup badges and healthy Qdrant labels from Settings and Chat.
• Disable fine-tuning, including manual and scheduled paths, and remove simulated
  success metrics and placeholder model exports. Ordinary note processing is retained.
• Restrict privileged IPC to the registered local main document. Block app-page
  replacement and privileged popups; supported external links use the OS browser.
• Notes open in formatted Markdown preview, including existing Obsidian notes.
  Switch to editing with the eye button; drafts survive mode changes and refresh.
• Saved connections and backlinks appear below the note body. Open related notes
  by mouse or keyboard; lists refresh in the active project's context.
• Setup uses the current uninstaller to prepare an upgrade rather than relying on
  a broken legacy beta uninstaller. Locked applications and redirected uninstaller
  paths are rejected before replacing files.
• Includes the coordinated dependency fixes from beta.17 and the local beta.18–19
  interface improvements. Optional AI stages can legitimately produce no tags or links.

Install and update

The Setup asset is Noda-Setup-1.0.2-x64.exe with a matching SHA256SUMS.txt.
The full source repository remains available separately; model weights are not bundled.

1. Back up project folders and %APPDATA%\Noda, and fully exit Noda through the tray.
2. Run Setup, retaining the current installation folder when updating.
3. Open Noda from the Start menu. New profiles start in English; saved choices remain.
4. Initial runtime and model preparation requires internet access and additional disk space.

The Windows executable is unsigned pending a code-signing certificate. No trusted
publisher identity is asserted. The app does not include automatic version updates.

Verification and limits

• Isolated source suites: 748 Python tests and 28 subtests; 658 Node tests.
• Python combined line/branch coverage: 36.62% across the curated runtime
  manifest. This is not complete application coverage.
• Native installer fixture: fresh install, normal upgrade, recovery from exit 2,
  locked-file rejection, reparse-point rejection and uninstall retaining external notes.
  This fixture uses its own application ID and does not modify the installed Noda.
• npm audit: zero reported vulnerabilities at preparation time. This does not cover
  all Python/native components or establish absence of security defects.
• Native English/Russian Settings and Chat checks preserve drafts, project isolation,
  recovery and keyboard focus. Seven real-Electron trust scenarios verify local IPC,
  foreign-document rejection, navigation/popup blocking and safe external-link routing.

Clean-machine validation of the exact release installer, interruption recovery and
broad real-model evaluation remain separate checks. Older project backups may be
needed for a downgrade; replacing the executable alone does not revert queue formats.

Known security issues and compliance scope
remain applicable, including unsupported developer/import configurations and separate
Accelerate, DiskCache and PT2 deserialization concerns. The standard packaged profile
uses pinned local model data, disables remote model code and does not enable training.
Use trusted model sources and avoid attacker-controlled checkpoint/cache files.
The stable label is not a security, licensing or regulatory certification.

Noda 1.0.2-beta.17

Noda 1.0.2-beta.17

Dependency security update for the private Windows beta.

Changes

• Replace the dependency versions affected by the previous 19 GitHub alerts, including all five high-severity findings.
• Update compatible Python runtime and test-tool pairs together, retaining a hash-pinned Windows CPU environment.
• Update the two affected packaging glob consumers without replacing legacy APIs used by other build tools.
• Include pip 26.3 and refresh the exact-version third-party notices and source provenance.

The complete npm audit reports zero vulnerabilities. Separate Accelerate, DiskCache and PyTorch PT2 concerns remain; see dependency security status. Other findings in COMPLIANCE.md are not resolved by this dependency update.

Install or update

Download Windows x64 Setup. Verify it using the attached SHA256SUMS.txt. The repository remains private; downloads require an account with access.

1. Back up your project folders and app profile, save edits, and fully exit Noda through its tray menu.
2. Run this version's Setup and then open the installed Noda from the Start menu.
3. Allow the app to prepare the updated local runtime. Runtime and model downloads require internet access.

Existing project folders and profile data are stored separately from the installed application. This beta has no automatic updater. The previous beta.16 artifact is preserved and still contains its original dependencies.

Verification and limits

Local Windows validation passed 739 Python tests, 28 subtests and 626 Node tests, with no skipped tests. The new checks exercise real CPU inference and safe-weight loading, Dataset/Arrow storage, file locks, local file access, packaging filters and ASAR creation. Exact CI results, the source revision and installer checks are recorded in the release's VALIDATION.txt; verify the downloaded Setup using SHA256SUMS.txt.

The installer remains unsigned. Clean-machine installation, real downloaded-model inference, upgrade/recovery and backup restoration remain separate acceptance checks. Passing tests and addressing the original GitHub alerts do not constitute public-release security approval.

Project-owned materials use PolyForm Noncommercial 1.0.0. Third-party terms and previously granted MIT permissions remain unchanged.

Noda 1.0.2-beta.16

Noda 1.0.2-beta.16

Download Windows Setup (x64) · SHA256 checksums

Private prerelease for Windows 10/11 x64 with an AVX2-capable processor.

Install or update

1. Download and run Noda-Setup-1.0.2-beta.16-x64.exe.
2. Follow Setup, then open the installed Noda from the Start menu or desktop shortcut.
3. On first launch, allow time for the local runtime and selected models to download. Internet access is required for these downloads.

Updating: back up your project folders and app profile, save edits, and fully exit Noda through its tray menu before running this version's Setup. This beta has no automatic updater.

Changes

• New profiles start in English; existing saved language choices are retained.
• Windows folder validation rejects abbreviated 8.3 paths before project activation or backup. Choose full folder paths; junctions and symbolic links remain unsupported.
• The source repository, documentation and bundled license notices are prepared for this version.

Known limitations

Audit update (2026-11-13): Additional desktop trust-boundary, optional training/diagnostic and developer-model licensing findings remain open. See the current compliance and publication status. They are not fixed in this beta.

The installer is unsigned. A complete first launch on a clean Windows profile and real-model inference have not yet been validated for this build.

Known dependency issues remain: 19 repository alerts, including 5 high. See the security notes. This private beta is not approved for public binary distribution.

Model speed and memory requirements vary. Generated titles, tags, links and answers can be wrong.

Verification and remaining public-release checks

Windows CI passed: 732 Python tests and 620 Node tests, with no skips. Dependency installation, pip check and license integrity also passed.

Tested application source: c6ec25d6. The installer archive and bundled notices were inspected without running Setup.

Installer SHA256: d6d214cc64f418dd30a47700207f65a1aebc95f06cab443f72aa50ddeb84983d.

Before public distribution, complete clean installation and first-run checks, upgrade/recovery and backup restoration with synthetic data, resolve applicable security findings, and review the exact downloaded runtimes and models.

Project-owned materials use PolyForm Noncommercial 1.0.0. Third-party licenses and prior MIT grants remain unchanged.