BaseVault 0.2.2

The first BaseVault release built in the open — the app is now developed in a public repository, and every build ships with cryptographic proof of where it came from.

Verifiable builds

• Build-provenance attestation. Every release artifact (the .dmg and the updater bundle) carries a GitHub-native, Sigstore-signed, transparency-log-backed build-provenance attestation. You can confirm a download was built by this repository's release workflow from a specific commit — not repackaged or swapped downstream:

  gh attestation verify BaseVault_0.2.2_aarch64.dmg --repo basevault-ai/basevault
  

• In-app attestation visibility. When confidential inference is configured, the app checks the enclave's live attestation at startup and hourly and surfaces the result — so the trust state is something you can see, not take on faith.
• Open source. The application source is public, alongside the signed-and-notarized release flow that produces these builds.

Chat & retrieval

• Query your files directly — scope a question to a specific file, get source-line citations, and see per-document records in results.
• More reliable citations, including on follow-up turns.
• A clear transient-error message instead of an occasional blank reply, with the underlying retry surfaced.

Models & reliability

• Automatic model fallback on load and transient failures, so a momentary provider hiccup no longer sinks a stage.
• Updated default models for local mode and chat.
• Improved retry tracking and status in run details.

Interface

• Run tree opens insights and actions by default.
• Timestamps render in your local timezone.
• Restored per-stage call-count credit in the run view.