LedgerPDF v0.2.0

LedgerPDF v0.2.0 adds a focused review workflow before a binder leaves your desk.

What’s new

• Review Center: review open notes and crosses, source coverage, page-status progress, connector integrity, and AI run history in one place, with direct page jumps and run-level undo.
• Send-out preflight: permanent flattened copies now show items needing attention and advisories first, with an explicit second confirmation when open review items remain.
• Time-aware review status: Reviewed or N/A resolves findings that existed at that moment; a later finding reopens the page without erasing the prior review evidence.

Downloads

• LedgerPDF-0.2.0-mac-arm64.dmg — Apple silicon macOS; signed, notarized, and stapled.
• LedgerPDF-0.2.0-mac-arm64.zip — Apple silicon macOS portable archive; signed and notarized.
• LedgerPDF-0.2.0-win-x64.exe — Windows x64 per-user installer; currently unsigned, so SmartScreen may show an unrecognized-publisher warning.
• SHA256SUMS.txt — checksums for all three artifacts.

LedgerPDF remains alpha software. Keep source documents and backups; do not make a binder your only copy of anything.

LedgerPDF v0.1.4

LedgerPDF v0.1.4

This alpha release makes LedgerPDF's AI-work counts explicit and internally consistent.

What changed

• The status bar now shows shapes alongside marks and tapes.
• The ambiguous by AI label is now AI-created items, with a tooltip explaining that it totals marks, tapes, and shapes.
• AI History now distinguishes logged actions from items currently present in the binder.
• Each Undo button reports the exact number of marks, tapes, shapes, links, and bookmarks it will remove.
• The History count and the underlying revert operation now share one calculation, preventing them from drifting apart.

For example, the binder that previously showed 40 marks · 10 tapes · 65 by AI now shows 40 marks · 10 tapes · 15 shapes · 65 AI-created items.

Downloads

• macOS Apple silicon: the DMG and ZIP are signed with Ledger Labs LLC's Developer ID, notarized by Apple, and stapled.
• Windows x64: the installer is currently unsigned, so Windows may show a SmartScreen warning. The exact installer passed clean per-user install, registration, packaged-app, and uninstall checks in CI.
• SHA256SUMS contains hashes for all three artifacts.

LedgerPDF is still alpha software. Keep source documents backed up and review exported work before relying on it.

Verification

• Source commit: 39359cde5a4e8b61998de9b68524b5352cb51c09
• Windows release-candidate run: 31640112865
• Public CI: macOS, Windows, and CodeQL all passed
• macOS: signature, Gatekeeper, notarization/stapling, packaged UI, frozen engine, export, recents, MCP, renderer protocol, and ZIP extraction checks passed
• Windows: package build, per-user installer registration, launch, packaged-app verification, and uninstall passed
• Model verification: 261/261 checks passed
• MCP verification: 133/133 checks passed
• Dependency audits: zero npm production vulnerabilities and no known Python vulnerabilities
• Secret scan: no leaks found across the public history

LedgerPDF v0.1.3

LedgerPDF v0.1.3

This alpha release makes flattened PDF copies clearer and safer to reopen.

What changed

• LedgerPDF now detects copies whose marks were flattened into permanent page content.
• Before importing one as a new plain binder, the app explains that its visible marks are no longer editable and defaults to Cancel.
• The warning recognizes both newly created flattened copies and legacy LedgerPDF flattened exports.

This prevents a printed note icon from looking like a broken clickable comment: in a flattened copy, the icon is page content rather than an editable PDF annotation.

Downloads

• macOS Apple silicon: the DMG and ZIP are signed with Ledger Labs LLC's Developer ID, notarized by Apple, and stapled.
• Windows x64: the installer is currently unsigned, so Windows may show a SmartScreen warning. The exact installer passed clean per-user install, registration, packaged-app, and uninstall checks in CI.
• SHA256SUMS contains hashes for all three artifacts.

LedgerPDF is still alpha software. Keep source documents backed up and review exported work before relying on it.

Verification

• Source commit: 1c331a0c80a53f7c8d472d5dc92be3f3bfcc9b8d
• Windows release-candidate run: 31618501099
• Public CI: macOS, Windows, and CodeQL all passed
• macOS: signature, Gatekeeper, notarization/stapling, packaged UI, frozen engine, export, recents, MCP, and renderer-protocol checks passed
• Cross-viewer verification: annotated and flattened marks aligned in both PDFium and Poppler
• Dependency audits: zero npm production vulnerabilities and no known Python vulnerabilities
• Secret scan: no leaks found across the public history

LedgerPDF v0.1.2

LedgerPDF v0.1.2

This alpha release makes iterative agent exports safer and less cluttered.

What changed

• binder_export can reuse the same canonical output path when the existing file is byte-for-byte the last export recorded by that binder.
• If a person edits or replaces that PDF—or if the path points to an unrelated file or a symlink—the export is refused rather than overwritten.
• The engine rechecks the existing file immediately before its atomic replacement, protecting against another process changing it during the export.
• There is no overwrite: true escape hatch: the safety decision is enforced from recorded provenance and SHA-256 hashes.

In ordinary use, an agent can now mark, export, revise, and re-export to one stable filename. Human-touched files remain protected.

Downloads

• macOS Apple silicon: the DMG and ZIP are signed with Ledger Labs LLC's Developer ID, notarized by Apple, and stapled.
• Windows x64: the installer is currently unsigned, so Windows may show a SmartScreen warning. The exact installer passed clean per-user install, registration, launch, packaged-app, and uninstall checks in CI.
• SHA256SUMS contains hashes for all three artifacts.

LedgerPDF is still alpha software. Keep source documents backed up and review exported work before relying on it.

Verification

• Source commit: ebc5eb8898148b1d55b394f3f65a2cafafbe44a2
• Windows release-candidate run: 31581103175
• Public CI: macOS, Windows, and CodeQL all passed
• macOS: signature, Gatekeeper, notarization/stapling, packaged UI, frozen engine, export, recents, MCP, and renderer-protocol checks passed
• Dependency audits: zero npm production vulnerabilities and no known Python vulnerabilities
• Secret scan: no leaks found across the public history

LedgerPDF v0.1.1

LedgerPDF v0.1.1

Security and reliability update, released 2026-08-11.

This release makes LedgerPDF's agent-access controls match what the interface says: approved folders are authoritative, every window reads the real live-agent state, and concurrent work fails safely instead of silently replacing newer binder data.

Security and reliability

• Made the visible approved-folder list authoritative and removed shipped environment overrides.
• Added cross-process binder leases and live revision checks for user/agent and agent/agent races.
• Prevented standalone agents from silently overwriting unrelated binders, exports, or cover memos.
• Made new and reopened windows query authoritative live-agent state.
• Clarified the difference between the on-screen binder switch and persistent approved-folder access.
• Made long mark and shape notes wrap instead of clipping.
• Added a Tesseract fallback when macOS Vision OCR fails at runtime.

Downloads

• macOS Apple silicon: LedgerPDF-0.1.1-mac-arm64.dmg (recommended) or .zip. The application and DMG are signed with Ledger Labs LLC's Developer ID, notarized by Apple, and stapled.
• Windows x64: LedgerPDF-0.1.1-win-x64.exe. This per-user installer does not require administrator access. It is not code-signed yet, so Windows SmartScreen may show an unrecognized-publisher warning. See the Windows installation guide.
• Verification: SHA256SUMS contains the SHA-256 digest of each distributable.

Release verification

• Source commit: 6e8e0b7c13784536b133f0d284882991a901e4bf
• Windows run 31535513491 built the exact source commit and passed the complete application suite, native installer registration/uninstall test, and packaged-app verification.
• macOS was built from a clean checkout of the exact source commit. The application, DMG, and ZIP-extracted application independently passed strict signature, Gatekeeper, notarization-staple, packaged-renderer, frozen-engine, PDF export, recents, MCP, and approved-folder checks.
• Public Git history and release files passed secret scanning; npm, Python, and CodeQL vulnerability checks are clean.

This is alpha software. Keep independent copies of important documents and do not make LedgerPDF the only copy of anything.

LedgerPDF v0.1.0

LedgerPDF v0.1.0

Initial public alpha, released 2026-08-11.

LedgerPDF is a local-first desktop workpaper binder for tax and accounting professionals. It assembles PDFs, spreadsheets, documents, and images into one bookmarked PDF; supports marks, notes, stamps, calculator tapes, and page reordering; and exposes the same open binder to local MCP clients.

The application itself makes no network calls: no accounts, telemetry, cloud storage, or auto-update service. See DATA-FLOW.md and SECURITY.md before using it with client information.

Downloads

• macOS Apple silicon: LedgerPDF-0.1.0-mac-arm64.dmg (recommended) or .zip. The application and DMG are signed with Ledger Labs LLC's Developer ID, notarized by Apple, and stapled.
• Windows x64: LedgerPDF-0.1.0-win-x64.exe. This is a per-user installer and does not require administrator access. It is not code-signed yet, so Windows SmartScreen may show an unrecognized-publisher warning. See the Windows installation guide.
• Verification: SHA256SUMS contains the SHA-256 digest of each distributable.

Release verification

• Source commit: 2cd2c61a4f4536b89cf4706f86e797973abac6a5
• Windows installer tested on physical 1366×768 Windows hardware, including fresh-install wording, per-user installation, Installed Apps registration, launch, and registered uninstall.
• macOS application and DMG independently passed strict code-signature, notarization-ticket, Gatekeeper, packaged-renderer, frozen-engine, PDF export, recents, MCP, and approved-folder boundary checks.
• Public history, secret scanning, dependency scanning, and CodeQL reviewed before publication.

This is alpha software. Keep independent copies of important documents and do not make LedgerPDF the only copy of anything.