Kavor 1.0.4

Highlights

Adds Kavor-managed updates to macOS arm64 and x64 through architecture-specific ZIP packages, differential
blockmaps, and one consolidated stable update channel.
Keeps the architecture-specific DMG as the human download while the updater selects the matching ZIP,
downloads it in the background, and installs it through Kavor's coordinated normal-quit path.
Preserves https://download.agentkavor.com as the permanent fallback on every platform and for every updater
failure.

Corrected the macOS release contract that enabled the automatic updater in packaged applications without
publishing the ZIP and latest-mac.yml files required by Electron Updater.
Prevented one macOS architecture job from replacing the other architecture's update metadata by validating each
native ZIP and consolidating both entries during publication.
Added immutable SHA-256 coverage for both macOS updater ZIPs and blockmaps, exact asset verification before
promotion, and native package gates for the generated metadata.
Renamed the obsolete initial-release package configuration to the direct-distribution contract used by current
releases.

Download Kavor from https://download.agentkavor.com. The page detects the current platform and also exposes all
available packages.

Windows x64 uses the assisted per-User NSIS installer. The installer is currently unsigned, so Microsoft
SmartScreen may require explicit confirmation.
macOS 13+ provides separate arm64 and x64 DMGs. Builds are ad-hoc signed but not notarized; follow the download
page's Gatekeeper instructions. After this version is installed, later accepted releases can download and
install automatically when Kavor quits normally. The manual download remains available at all times.
Linux x64 provides AppImage and DEB packages. AppImage supports Kavor-managed updates; DEB updates are installed
manually from the download page.

Windows ARM64 and Linux ARM64 packages are not included until their native PTY, SQLite, process-containment,
and packaged-runtime gates can run on matching CI environments.
Windows direct downloads do not yet have an Authenticode publisher certificate.
macOS packages do not yet have Developer ID signing or notarization. Gatekeeper may require manual confirmation,
and replacing an ad-hoc build may cause macOS to request access to Kavor Safe Storage in Keychain again.
Microsoft Store distribution is not part of this release.