v0.4.1 Windows Test Build

English

Karma v0.4.1 is a Windows x64 prerelease for testing that reopens the console after an update and also checks the Gitee mirror for updates. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

The console reopens after an update

• Updating has to close the console to replace its files, and until now it stayed closed after a successful update. Once the update is applied (or rolled back), the service now reopens the console for the signed-in user.
• This already works for the update to this version: the newly installed service reopens the console itself. If the console is already open again or nobody is signed in, nothing is started.

Updates are also checked on Gitee

• Besides GitHub Releases, the service now checks the Gitee mirror, which is useful where GitHub is slow or unreachable. The newest version found on either source is installed; that version is downloaded from GitHub first and from Gitee if the download fails.
• Packages from Gitee pass exactly the same checks as packages from GitHub: the Ed25519 manifest signature, per-file hashes, and a strictly higher version.
• The version you upgrade from performs the check, so Gitee is used from the next update after v0.4.1 is installed.

Upgrading

• v0.3.12 through v0.4.0 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.4.1-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the update acceptance checklist and the ONNX inference acceptance checklist.

简体中文

Karma v0.4.1 是 Windows x64 测试预发布版，升级后会自动重新打开控制台，并且也会从 Gitee 镜像检查更新。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

升级后自动重新打开控制台

• 升级时必须关闭控制台才能替换文件，此前升级成功后控制台一直保持关闭。现在升级完成（或回滚）后，服务会为当前登录的用户重新打开控制台。
• 升级到本版本时即已生效：新安装的服务会自行重新打开控制台。如果控制台已被重新打开或当前无人登录，则不会再启动。

也从 Gitee 检查更新

• 除 GitHub Releases 外，服务现在也会检查 Gitee 镜像，适合 GitHub 访问缓慢或无法访问的网络。两个来源中版本最高者会被安装；该版本先从 GitHub 下载，下载失败时改用 Gitee。
• 来自 Gitee 的升级包与 GitHub 的完全一样要通过校验：Ed25519 清单签名、逐文件哈希和严格更高的版本号。
• 检查更新由升级前的版本执行，因此安装 v0.4.1 之后的下一次升级才会用到 Gitee。

升级

• v0.3.12 至 v0.4.0 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.4.1-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 升级验收清单 和 ONNX 推理验收清单中的项目。

v0.4.0 Windows Test Build

English

Karma v0.4.0 is a Windows x64 prerelease for testing that makes the repeat-closure restriction length configurable and raises its default to two hours. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Configurable repeat-closure restriction length

• The repeat-closure limit card on the Application Control page has a new Restriction length (minutes) field next to the counting window and closure count. It accepts 1–10080 minutes (up to 7 days).
• The default restriction rises from one hour to two hours. Policies saved by earlier versions have no restriction length and use the new two-hour default.
• Lengthening the restriction only needs an ordinary administrator session. When a super password is set, shortening it is treated as weakening protection and requires the super password, like shortening the counting window or raising the closure count.
• A new length applies to restrictions established afterwards; applications already restricted keep their original end time.

Upgrading

• v0.3.12 through v0.3.21 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.4.0-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist.

简体中文

Karma v0.4.0 是 Windows x64 测试预发布版，重复关闭限制的封禁时长现在可以设置，默认值提高到 2 小时。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

可设置重复关闭限制时长

• “应用管控”页的重复关闭限制卡片在“统计时间”和“关闭次数”旁新增 限制时长（分钟） 输入框，可填写 1–10080 分钟（最长 7 天）。
• 默认限制时长由 1 小时提高到 2 小时。早期版本保存的策略没有限制时长，按新的 2 小时默认值处理。
• 延长限制时长只需普通管理员会话。已设置超级密码时，缩短限制时长属于削弱保护，需要超级密码，与缩短统计时间或提高关闭次数相同。
• 新时长只对之后触发的限制生效；已被限制的应用仍按原结束时间解除。

升级

• v0.3.12 至 v0.3.21 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.4.0-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目。

v0.3.21 Windows Test Build

English

Karma v0.3.21 is a Windows x64 prerelease for testing that recognizes images in small player windows and makes application rules follow a program by its file name. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Small player windows are recognized

• A player window shrunk to about 202×115 or smaller was not recognized. Its size was judged on the downscaled frame used for inference (long edge at most 640 px), where such a window is only a few dozen pixels and was dropped as too small; enlarging it would only have produced a blur.
• Moving regions are now measured at the display's native resolution and kept when their short edge is at least 64 px. A moving region that would be small for the model is copied straight from the native-resolution capture and then enlarged to the model input, so it stays sharp. Avatars, cursor trails, and tickers are still ignored.

Application rules match by program file name

• Application control now records only the program file name (.exe), whether you type it, pick an installed application, batch-add applications, use one-click allow, or allowlist an evidence item. A rule applies to the program wherever it is installed or copied, as long as the file name is the same (case-insensitive).
• Rules saved with a full path by earlier versions match by their file name from now on and show only the file name. Application categories (used by blocking schedules and browser recognition) resolve their members by file name too.

Upgrading

• v0.3.12 through v0.3.20 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.21-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist, including the new small-window items.

简体中文

Karma v0.3.21 是 Windows x64 测试预发布版，现在可以识别缩小的播放器小窗，应用规则也改为按程序文件名匹配。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

识别缩小的播放器小窗

• 播放器窗口缩小到 202×115 左右及更小时无法识别。原因是尺寸在用于推理的缩小画面（长边最多 640 像素）上判断，这样的小窗只剩几十像素，被当作过小区域丢弃；即使放大，也只是一片模糊。
• 现在动态区域按显示器原始分辨率计算尺寸，短边至少 64 像素即单独识别。对模型来说偏小的动态区域会直接从原始分辨率的采集画面中拷贝出来，再放大到模型输入，画面保持清晰。头像、鼠标轨迹和滚动字幕仍会被排除。

应用规则按程序文件名匹配

• “应用管控”现在只记录程序文件名（.exe）：无论手动填写、从已安装应用中选择、批量添加、一键允许还是从证据加入白名单，都是如此。只要文件名相同（不区分大小写），程序换了安装位置或被复制到别处，规则照样生效。
• 早期版本按完整路径保存的规则，今后也按其文件名匹配，列表中只显示文件名。应用类别（供断网屏蔽和浏览器识别使用）的成员同样按文件名解析。

升级

• v0.3.12 至 v0.3.20 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.21-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目，包括新增的小窗识别项目。

v0.3.20 Windows Test Build

English

Karma v0.3.20 is a Windows x64 prerelease for testing that stops two built-in title keywords from closing ordinary pages. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Fewer false title-keyword closures

• The built-in Japanese keyword “s ＆ m” matched anywhere in a title, so titles such as “IEEE Journals & Magazine | IEEE Xplore” closed the browser (“journals & magazine”). It has been removed; the English keyword “s&m” still blocks the term as a whole word.
• The built-in keyword “3p” also matched inside words such as “3pm”. It now matches only the whole word and has moved to the keywords prone to false positives, which are off by default.
• The built-in list now has 2,542 terms: 1,590 strict and 952 prone to false positives.

Upgrading

• v0.3.12 through v0.3.19 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.20-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist.

简体中文

Karma v0.3.20 是 Windows x64 测试预发布版，修正了两个会误关普通网页的内置标题关键词。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

减少标题关键词误判

• 内置日文关键词“s ＆ m”会在标题任意位置匹配，导致“IEEE Journals & Magazine | IEEE Xplore”这类标题被关闭（“journals & magazine”）。该词已删除；英文关键词“s&m”仍按整词拦截。
• 内置关键词“3p”也会匹配“3pm”等单词内部。现改为只匹配整词，并移入默认关闭的易误报词。
• 内置词库现为 2,542 个词：严格 1,590 个，易误报 952 个。

升级

• v0.3.12 至 v0.3.19 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.20-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目。

v0.3.19 Windows Test Build

English

Karma v0.3.19 is a Windows x64 prerelease for testing that records which keyword closed a window. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Matched keyword in the audit log

• When a window is closed because its title matches a keyword, the audit log now shows the keyword after the reason, for example “Window title keyword "ss**"”. The keyword is masked before the Service writes it: its last Chinese character, or otherwise its last two English characters, become *, and the first letter is kept.
• Window titles are still never recorded. Restriction summaries on the Application Control page keep grouping closures by reason alone. Entries written before this version have no keyword and show the reason only.

Upgrading

• v0.3.12 through v0.3.18 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.19-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist.

简体中文

Karma v0.3.19 是 Windows x64 测试预发布版，在审计日志中记录是哪个关键词导致窗口被关闭。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

审计日志显示命中的关键词

• 因窗口标题命中关键词而关闭窗口时，审计日志会在原因后显示该关键词，例如“窗口标题命中关键词“赌球直*””。关键词由 Service 打码后才写入：最后一个汉字，或者最后 2 个英文字符，以 * 代替，首个字母保留。
• 仍不记录窗口标题。“应用管控”页的限制汇总仍只按原因分组。此版本之前写入的记录没有关键词，只显示原因。

升级

• v0.3.12 至 v0.3.18 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.19-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目。

v0.3.18 Windows Test Build

English

Karma v0.3.18 is a Windows x64 prerelease for testing that applies website allowlists and blocklists to every browser. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Website allowlists in every browser

• Website rules now read the address bar of every known browser, including 360, QQ, Sogou, and Quark, and of any application whose category is set to Browser in Application Control. Before, only Chrome, Edge, Firefox, Brave, Opera/Opera GX, Vivaldi, and Arc were read, so an allowlisted site in another browser could still be closed because of a keyword in its title.
• When a title keyword or a remembered title would close a browser whose address bar could not be read for a moment (for example while it is being edited), the Agent reads it again briefly before acting, so an allowlisted site whose title contains a keyword stays open.

Upgrading

• v0.3.12 through v0.3.17 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.18-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist.

简体中文

Karma v0.3.18 是 Windows x64 测试预发布版，让网址黑白名单对所有浏览器生效。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

网址白名单对所有浏览器生效

• 网址规则现在会读取所有已知浏览器（包括 360、QQ、搜狗、夸克）以及在“应用管控”中类别设为 浏览器 的应用的地址栏。此前只读取 Chrome、Edge、Firefox、Brave、Opera/Opera GX、Vivaldi、Arc，其他浏览器中的白名单网站仍可能因标题含关键词而被关闭。
• 标题关键词或记住的标题将要关闭某个浏览器，而它的地址栏暂时读不到（例如正在编辑地址栏）时，Agent 会先短暂重读，因此标题含关键词的白名单网站不会被关闭。

升级

• v0.3.12 至 v0.3.17 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.18-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目。

v0.3.17 Windows Test Build

English

Karma v0.3.17 is a Windows x64 prerelease for testing that protects critical event evidence with the super password and makes the video-code keyword list easier to read. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Critical evidence needs the super password to delete

• Once a super password is set, deleting evidence marked Critical (risk score of at least 95%) requires it. The console asks for the super password when needed.
• A bulk deletion that includes any critical item is refused as a whole without the super password, so nothing in it is deleted. High-risk evidence can still be deleted with the ordinary administrator session.
• Without a super password, the administrator deletes evidence as before.

Video codes in their own keyword group

• The Keywords page now lists the 1,809 video code prefixes in a separate Video codes group instead of among Japanese words; codes match window titles in any language.
• Each prefix is shown as DCX-### instead of DCX-123: any 3–4 digits match, such as DCX-001, DCX 1234, or DCX0456. Hover over a prefix for matching examples. Adding a code no longer asks for a language. Matching itself is unchanged.

System settings

• The security note card was removed from System settings.

Upgrading

• v0.3.12 through v0.3.16 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.17-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist.

简体中文

Karma v0.3.17 是 Windows x64 测试预发布版，用超级密码保护“严重”事件证据，并让番号关键词列表更易读。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

删除“严重”证据需要超级密码

• 设置超级密码后，删除标为 严重 的证据（风险分不低于 95%）需要超级密码，控制台会在需要时提示输入。
• 批量删除中只要包含严重证据，未提供超级密码时整批都会被拒绝，一条也不删除。“高风险”证据仍可用普通管理员会话删除。
• 未设置超级密码时，管理员删除证据的方式与之前相同。

番号单独分组

• “关键词”页面把 1,809 个番号前缀单独列为 番号 分组，不再混在日语词中；番号匹配任何语言的窗口标题。
• 每个前缀显示为 DCX-###，不再显示为 DCX-123：后接任意 3–4 位数字都会命中，如 DCX-001、DCX 1234、DCX0456。鼠标悬停可查看匹配示例。补充番号时不再需要选择语言。匹配规则本身没有变化。

系统设置

• 移除了“系统设置”中的“安全说明”卡片。

升级

• v0.3.12 至 v0.3.16 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.17-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目。

v0.3.16 Windows Test Build

English

Karma v0.3.16 is a Windows x64 prerelease for testing that detects explicit video playing in only part of the screen, such as a video embedded in a web page or a shrunken player window. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Focused recognition of moving regions

• Image recognition used to classify only the whole screen, squeezed into the 224×224 model input. A video covering a quarter of the screen became a small patch surrounded by unrelated page content, so its risk score stayed below the enforcement threshold.
• The Agent now compares consecutive frames of each display on an 8-pixel grid. Areas that keep changing, such as an embedded video, a small player window, or a rotating image carousel, are cropped and classified on their own, in addition to the whole screen. The highest score is used for closing the window and for evidence; the evidence image is still the whole screen.
• Avatars, emoji, cursor movement, tickers, and full-screen video (which the whole-screen inference already sees clearly) are not cropped. At most two regions per frame are classified, so image inference costs up to three times as much per display while such a video plays, and nothing extra while the screen is still.
• A small still image in a web page is still judged only as part of the whole screen and can be missed when it covers too little of it.
• The motion grid keeps only per-cell brightness in zeroized memory; it is never logged, saved, or sent.

Upgrading

• v0.3.12 through v0.3.15 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.16-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the ONNX inference acceptance checklist, including the new embedded-video and small-player checks.

简体中文

Karma v0.3.16 是 Windows x64 测试预发布版，新增对只占屏幕一部分的色情视频的识别，例如网页中内嵌的视频或缩小的播放器窗口。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

动态区域重点识别

• 此前图像识别只对整个屏幕进行，整屏画面被压缩到 224×224 的模型输入。只占屏幕 1/4 的视频因此只剩一小块，周围又是大量无关网页内容，风险分数达不到处置阈值。
• Agent 现在按 8 像素网格比较每个显示器的相邻帧。持续变化的区域（如网页内嵌视频、小窗播放器、轮播图片）除整屏识别外还会被裁剪出来单独识别，取最高分用于关闭窗口和保存证据；证据图片仍为整屏画面。
• 头像、表情、鼠标移动、滚动字幕以及全屏视频（整屏识别已能看清）不会被裁剪。每帧最多额外识别 2 个区域，因此播放这类视频时每个显示器的图像推理开销最多约为原来的 3 倍，画面静止时不增加。
• 网页中静止不动的小尺寸图片仍只按整屏识别，占比过小时可能漏检。
• 动态网格只在会清零的内存中保存每格平均亮度，不写入日志、不保存、不发送。

升级

• v0.3.12 至 v0.3.15 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.16-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成 ONNX 推理验收清单中的项目，包括新增的内嵌视频与小窗播放器检查。

v0.3.15 Windows Test Build

English

Karma v0.3.15 is a Windows x64 prerelease for testing that closes windows whose titles contain adult video codes (番号) such as SSIS-123. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Video codes in window titles

• The built-in title keywords gain a Video codes category with 1,809 code prefixes, such as SSIS, JUY, SNIS, IPX, and MIDE. A title matches when a prefix is followed by 3–4 digits, with or without a hyphen or space in between: SSIS-123, SSIS 123, SSIS123, SSIS - 123, and full-width forms all match. SSIS-12, SSIS-12345, and XSSIS-123 do not.
• 1,642 prefixes are always active. The 167 that also appear in ordinary titles are off by default and follow the existing “Also use terms prone to false positives” switch. These include two-letter prefixes (DV, BF), months and weekdays (NOV, WED), currencies and technical abbreviations (BTC, DPI, SCP), and common words (STAR, LOVE). JUL and SSIS stay always active, so titles such as “Jul 2024” or “SSIS 2019” (SQL Server Integration Services) are also closed; add an exemption keyword if one of them is a false positive.
• On the Keywords page, administrators can add their own prefixes: choose the Video codes category and enter a prefix of 2–16 letters or digits. The match mode is fixed to Code pattern. The category filter also lists video codes.
• Prefixes were collected from the MDCx, OpenAver, darkeye, webtor, dhtsearch, and dan211 projects. Sources and licenses are listed in assets/keyword-lists/NOTICE.md.

Upgrading

• v0.3.12 through v0.3.14 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.15-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the network enforcement acceptance checklist.

简体中文

Karma v0.3.15 是 Windows x64 测试预发布版，新增按成人影片番号（如 SSIS-123）识别窗口标题并关闭窗口。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

窗口标题番号识别

• 内置标题关键词新增 番号 类别，收录 1,809 个番号前缀，如 SSIS、JUY、SNIS、IPX、MIDE。标题中出现前缀后接 3–4 位数字即命中，中间可有连字符或空格：SSIS-123、SSIS 123、SSIS123、SSIS - 123 以及全角写法均命中；SSIS-12、SSIS-12345、XSSIS-123 不命中。
• 1,642 个前缀始终生效。另有 167 个前缀在普通标题中也常出现，默认不生效，随现有的“同时启用易误报词”开关开启。它们包括两字母前缀（DV、BF）、月份与星期（NOV、WED）、货币与技术缩写（BTC、DPI、SCP）以及普通单词（STAR、LOVE）。JUL 和 SSIS 始终生效，因此“Jul 2024”或“SSIS 2019”（SQL Server Integration Services）这样的标题也会被关闭；如有误报，可添加豁免词。
• 管理员可在“关键词规则”页面自行补充番号：类别选择“番号”，输入 2–16 个字母或数字组成的前缀，匹配方式固定为“番号格式”。类别筛选也可只看番号。
• 番号前缀来自 MDCx、OpenAver、darkeye、webtor、dhtsearch 和 dan211 等项目，来源与许可见 assets/keyword-lists/NOTICE.md。

升级

• v0.3.12 至 v0.3.14 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.15-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成网络执行验收清单中的项目。

v0.3.14 Windows Test Build

English

Karma v0.3.14 is a Windows x64 prerelease for testing that makes it quicker to put closed applications into categories and makes unsaved settings easier to notice. Windows hardware acceptance is pending; EXEs and setup still lack Authenticode signatures and may trigger SmartScreen.

Categorize closed applications from the audit log

• Each app-closure entry in the Audit Log now has an application type selector. Choosing a category puts that program in it, so a blocking schedule for the category also blocks the program from the network or from running. A program that already has a rule keeps its action; a new one uses “Explicit content only”. Common browsers always stay in the Browser category.
• The change takes effect after Save settings, like any other policy change.

Console layout

• Applications now shows the Application types panel above the application list.
• Save settings and Lock console moved from the page header to the sidebar, below System Settings. When settings are changed but not saved, the sidebar shows an “unsaved changes” notice and the save button is highlighted until you save.

Upgrading

• v0.3.12 and v0.3.13 can update to this version from the console or automatically. v0.3.11 and earlier must run Karma-windows-x64-test-v0.3.14-setup.exe once and enter the administrator password. Existing local policy, evidence, and audit data are retained.

The Ed25519 signature authenticates upgrade contents; it does not replace Windows Authenticode. Have the supervisor keep the Windows administrator account and use a standard account daily.

Real Windows testing must still cover the items in the network enforcement acceptance checklist.

简体中文

Karma v0.3.14 是 Windows x64 测试预发布版，可更快地把被关闭的应用归入类别，并让未保存的设置更醒目。Windows 真机验收仍待完成；EXE 和安装器仍无 Authenticode 签名，可能触发 SmartScreen。

在审计日志中为被关闭的应用归类

• 审计日志中每条应用关闭记录新增“应用类型”选择框。选择类别后，该程序即加入此类别，针对该类别的断网屏蔽规则也会禁止它联网或启动。已有规则的程序保留原处置方式；新加入的程序为“仅色情内容处置”。常见浏览器始终属于“浏览器”类别。
• 与其他策略修改一样，点击“保存设置”后生效。

控制台布局

• “应用管控”页面中，“应用类型”面板移到应用列表上方。
• “保存设置”和“锁定控制台”按钮从页面顶部移到左侧菜单栏“系统设置”下方。修改设置但尚未保存时，菜单栏会提示“有设置未保存”，保存按钮保持高亮，直到保存为止。

升级

• v0.3.12 和 v0.3.13 可通过控制台或自动更新升级到此版本。v0.3.11 及更早版本需先运行一次 Karma-windows-x64-test-v0.3.14-setup.exe 并输入管理员密码。默认保留现有本地策略、证据和审计数据。

Ed25519 签名验证升级内容，不能替代 Windows Authenticode。建议监督人保管 Windows 管理员账户，日常使用标准账户。

Windows 真机仍需完成网络执行验收清单中的项目。