Skip to content

TruthBeacon v0.4.0 — The Final Release: Comprehensive Test Suites, Perceptual Defense & Production Hardening

Choose a tag to compare

@boredpolymath boredpolymath released this 11 Oct 23:54
· 42 commits to main since this release

TruthBeacon v0.4.0 — The Final Release: Comprehensive Test Suites, Perceptual Defense & Production Hardening

Bored Polymath Studios — Identity Ground-Truth & Community Stewardship


Overview

TruthBeacon v0.4.0 represents the final polished milestone of TruthBeacon. This release integrates patched RustFFT for robust perceptual image hashing, establishes comprehensive unit test coverage across both frontend and backend modules, redesigns the official distribution portal for clarity and speed, hardens gateway concurrency against mutex poisoning, and certifies complete cryptographic provenance across all cross-platform deliverables.


What's New & Hardened in v0.4.0

1. Perceptual Avatar Defense & RustFFT Integration

  • Deterministic Discrete Fourier/Cosine Transforms: Integrated an in-tree patch for rustfft supporting robust 64-bit perceptual hashing (pHash) against adversarial avatar manipulations, rotations, and color shifts.
  • Supply-Chain Verification: Updated deny.toml and audit configurations to ensure complete supply-chain hermeticity and zero copyleft dependencies.

2. Comprehensive Test Suites & Quality Assurance

  • Frontend ES Module Unit Tests: Added complete automated unit test suites (tests/ and ui/tests/) covering app.js, audit.js, discord_setup.js, dompurify.js, ipc.js, modals.js, notifications.js, state.js, triage.js, utils.js, and vault.js.
  • Backend Test Suite Integrity: Certified 215/215 passing Rust unit and integration tests with zero failures and zero compiler warnings under clippy -D warnings.
  • Adversarial Red Team Certification: 100% mitigation rate maintained across script-mixed homoglyphs, zero-width spaces, and DCT perceptual avatar clones.

3. Modernized Website & Download Portal

  • Focused Deliverable Matrix: Streamlined official downloads to macOS Universal 2 (.dmg), Windows 64-bit (.exe), and Linux Universal (.AppImage).
  • Interactive Verification: Single-click SHA-256 verification commands tailored for macOS zsh, Linux bash, and Windows PowerShell, alongside detached GPG signatures.
  • Enhanced SEO & Structured Data: Complete schema.org/SoftwareApplication integration with secure HTTP headers.

4. Concurrency & Security Resilience

  • Mutex Poisoning Prevention: Hardened token guard handling to prevent poison cascading during token authentication failures.
  • URL Scheme Validation: Enhanced URI sanitization in dompurify.js to ensure robust protocol validation against malformed schemes.