v0.2.5 — TSA-stamped recordings, mutation-hardened parsers

What's new

• screen-record --tsa <url> — RFC 3161 timestamp stamp baked into the record->seal chain (stamp-then-sign; live FreeTSA E2E proven). video --tsa likewise.
• Fixed: MP4 walker 64-bit largesize branch was dead code (mutation-testing find) — valid largesize boxes now skip correctly.
• OBS auto-seal writes self-contained playable .rvid for MP4 recordings.
• sync_trust.py trust-list URL pinned to https (bandit find).
• +51 mutation-hardened tests across container/signer/jumbf: signature-verification paths have ZERO surviving mutants; C2PA encoders pinned byte-exact (CBOR/DER boundary vectors); cai_region_hash pinned with offline-computed SHA-256.
• Quality gate: dependabot, cross-compile matrix, coverage jobs, TruffleHog, shellcheck, pip-audit, fuzz corpus replay, SonarCloud CI-based.

Downloads

• RISE-0.2.5.pkg — one-click macOS installer
• CLI binaries: macOS ARM64, Windows x64, Linux x64/ARM64 (static musl)

v0.2.4 — Record straight to .rvid (uuid box, faststart)

Native .rvid recording

Select the format first, record, get a sealed file — no second command:

rise-core screen-record --start --key my.key --device me --out rec.mov
rise-core screen-record --stop     # -> rec.rvid (playable MP4, signed manifest embedded)

• --stop now seals IN PROCESS into .rvid (was: print a manual command)
• Records to <out>.part; the .rvid only exists once sealed (crash-safe)
• Screen device auto-detected (avfoundation "Capture screen" — was hardcode 1 = a webcam!)
• MP4 embedding now uses a uuid box with the registered RISE UUID (C2PA convention); legacy rise 4CC files still verify
• Foreign uuid boxes never match (anti-transplant)
• Long recordings: manifest capped at ~256 evenly-sampled frames
• ffmpeg +faststart for stream-friendly output
• Browser verifier + RISE Viewer updated for both box forms

Downloads: RISE-0.2.4.pkg (one-click macOS) + 4 CLI binaries.

v0.2.3 — .rise for photos, .rvid for videos

Extension split

Following the .webp/.webm model — one family, two classes:

Extension	Media	OS routing
.rise	sealed image (JPEG/PNG bytes)	image viewers
.rvid	sealed video (playable MP4 bytes)	video players

• macOS UTIs: .rvid → org.rise.sealed-video (conforms public.mpeg-4)
• Windows registry: .rvid → PerceivedType = video
• Linux shared-mime-info: .rvid → video/mp4
• Daemons (macOS + Windows) now emit .rvid for video seals
• Spec: RISE-01 §2.1
• RISE-0.2.3.pkg — one-click macOS installer with the updated format registration

v0.2.2 — One-file format (JPEG + PNG + MP4)

The format change

.rise is now ONE self-contained file for every media type — the proof lives inside the media, sidecars are gone:

Media	Mechanism	File stays valid for
JPEG	APP11 JUMBF (C2PA 2.4)	any viewer, c2patool
PNG	ancillary risE chunk before IDAT	any PNG decoder
MP4	top-level rise box at EOF	any player — video .rise now plays

• rise-core video seals into a PLAYABLE MP4 with the manifest embedded (was: JSON sidecar)
• pack/unpack handle all three containers
• First-embedded-manifest-wins: attacker-appended boxes/chunks are ignored (fail-closed)
• RISE Viewer: opens JPEG/PNG/MP4 .rise, live pixel-vs-sealed-hash check
• Spec: RISE-01 §2.2 Containers

Downloads

• RISE-0.2.2.pkg — one-click macOS installer (CLI + format registration + viewer + auto-seal daemon)
• CLI binaries: macOS ARM64, Linux x64/ARM64 (musl, static), Windows x64

v0.2.1 — Installer + Viewer

What's new

• RISE-0.2.1.pkg — one-click macOS installer:
  • rise-core CLI at /usr/local/bin
  • RISE Format.app — registers .rise as a system format (UTI: org.rise.sealed-image conforms to public.jpeg)
  • RISE Viewer.app — opens .rise files: image + live seal check (pixels vs sealed hash)
  • Auto-seal daemon (LaunchAgent) — seals new photos/videos on Desktop/Movies automatically
• Uninstall: bash uninstall.sh (ships in repo under bindings/installer/macos/)

Download

RISE-0.2.1.pkg   (1.8 MB, macOS 11+, unsigned — right-click > Open on first run)

Existing v0.2.0 CLI binaries remain available.

RISE v0.2.0

Cross-platform CLI: hash, sign, verify, keygen, pack, unpack, stamp. PQC dual-sign (ML-DSA-65).