v0.1.0

Binaries

No Rust toolchain needed. Download the asset for your platform,
check it against sha256sums.txt, and run it. Linux builds are
static (musl); Windows ships verify.exe inside a .zip.

Platform	Asset
Linux x86_64	verify-v0.1.0-x86_64-unknown-linux-musl.tar.gz
Linux aarch64	verify-v0.1.0-aarch64-unknown-linux-musl.tar.gz
macOS Apple silicon	verify-v0.1.0-aarch64-apple-darwin.tar.gz
macOS Intel	verify-v0.1.0-x86_64-apple-darwin.tar.gz
Windows x86_64	verify-v0.1.0-x86_64-pc-windows-msvc.zip

$ sha256sum -c sha256sums.txt
$ tar -xzf verify-v0.1.0-x86_64-unknown-linux-musl.tar.gz
$ ./verify-v0.1.0-x86_64-unknown-linux-musl/verify ./CASE-2026-1842

Born public, born tagged.

Added

• Normative specification, schema v1: bundle layout, SHA256SUMS seal
  algorithm with metadata sidecar and bundle_hash promise, provenance
  proof rules (notary, disk_image), the post-seal allowlist, symlink
  prohibition, and the additive-only versioning policy.
• verify CLI and library: hash-only verification with streamed file
  hashing, set parity between manifest and disk, tamper rejection naming
  the file, and the exit contract (0 verified, 2 rejected, 3 usage).
• Canonical fixture set: minimal-full-coverage, coverage-gaps,
  notary-provenance, disk-image-provenance, and the negative
  tampered-original vector.
• CI: test, clippy -D warnings, the fixture gate, and a no-network crate
  guard over Cargo.lock.