Castlabs c2pa-python 0.31.0+stardustproof.6 (stable fMP4)

castlabs-stable-fmp4-release:0.31.0+stardustproof.6

Castlabs c2pa-python 0.31.0+stardustproof.6 immutable stable hotfix. Profile stable-fmp4-v1; context castlabs-stable-fmp4. Single-file fragmented MP4 ladder signing, identity-guarded cleanup, fragmented refusal and legacy TFRA fixes on native 0.80.0, default OpenSSL crypto. TFRA diagnosis, original per-entry fix and fixture contributed by BibinBaby444. Regenerate previously corrupted assets from the unsigned master. No live-video VSI runtime. See the attached schema-2 evidence and SHA-256 sidecars.

Castlabs c2pa-python 0.37.12.dev4 (VSI)

castlabs-vsi-release:0.37.12.dev4

Castlabs c2pa-python 0.37.12.dev4 immutable prerelease. Conformance Program 0.2 / C2PA 2.4 candidate (successor to the published dev3; crJSON 2.4 conformance): live-video VSI merged with contentauth main 6c92bc32, single-file fMP4 Merkle and TFRA fixes, caller-controlled validation time and purpose-scoped trust. See the attached schema-2 evidence and SHA-256 sidecars.

Castlabs c2pa-python 0.37.12.dev3 (VSI)

castlabs-vsi-release:0.37.12.dev3

Castlabs c2pa-python 0.37.12.dev3 immutable prerelease. Conformance Program 0.2 / C2PA 2.4 candidate (successor to dev1 run 35961050991 and dev2 run 35997070721; neither was released): live-video VSI merged with contentauth main 6c92bc32, single-file fMP4 Merkle and TFRA fixes, caller-controlled validation time and purpose-scoped trust. See the attached schema-2 evidence and SHA-256 sidecars.

Castlabs c2pa-python 0.31.0+stardustproof.5 (stable fMP4)

castlabs-stable-fmp4-release:0.31.0+stardustproof.5

Castlabs c2pa-python 0.31.0+stardustproof.5 immutable stable hotfix. Profile stable-fmp4-v1; context castlabs-stable-fmp4. Single-file fragmented MP4 and legacy TFRA fixes on native 0.80.0, default OpenSSL crypto. TFRA diagnosis, original per-entry fix and fixture contributed by BibinBaby444. Regenerate previously corrupted assets from the unsigned master. No live-video VSI runtime. See the attached schema-2 evidence and SHA-256 sidecars.

Stable maintenance is consolidated on castlabs/c2pa-rs:fix/stable-single-file-fmp4 at the unchanged native commit 589174898eca4c2c42289d3251c0619420806f43; see castlabs/c2pa-rs#4. The broken .4 release and tag were removed because that build lacked the legacy TFRA correction. Use .5 and regenerate affected assets from unsigned masters. This cleanup does not change the .5 tag, artifacts, checksums, or evidence.

Upstream tracking:

• TFRA: contentauth/c2pa-rs#2709 and contentauth/c2pa-rs#2710
• Single-file fMP4: contentauth/c2pa-rs#2714 and contentauth/c2pa-rs#2715

Native source is also identified by the annotated castlabs-sdk-v0.80.0+stardustproof.5 tag, pointing to the same 58917489 commit. No native rebuild or asset replacement was performed.

Castlabs c2pa-python 0.37.8.dev5 (VSI)

castlabs-vsi-release:0.37.8.dev5

Castlabs c2pa-python 0.37.8.dev5 immutable prerelease. Successor to immutable dev4; enforces exact DynamicAssertion callback sizing for every signing path. See the attached schema-2 evidence and SHA-256 sidecars.

Castlabs c2pa-python 0.37.8.dev4 (VSI)

castlabs-vsi-release:0.37.8.dev4

Castlabs c2pa-python 0.37.8.dev4 immutable prerelease. Corrected after failed dev1 run 34030865864 and dev2 run 34057763620, and dev3 run 34065998820. See the attached schema-2 evidence and SHA-256 sidecars.