DevBox v0.1.0 — public functional preview

DevBox v0.1.0 — public functional preview

This is the first source-linked public preview of DevBox.

Integrity and source

• Public source commit: 459cfada103837e0950f6d3599ad205bf626c8b2
• License: Apache-2.0
• The release manifest binds the installer to the exact public Git commit.
• SHA256SUMS.txt covers the installer, manifest, third-party notices, and CycloneDX SBOM.
• DevBox-source-v0.1.0.zip is an additional clean source archive; GitHub also provides its standard tag archives.

Included product work

• compact Codex-inspired dark desktop layout and animated DevBox wordmark
• real thread operations, dark in-app confirmation, timestamps and persistent history
• Enter-to-send, right-click clipboard actions, message edit/copy/regenerate controls
• real 300 MiB-per-file drag-and-drop validation
• persistent real activity timeline for provider calls, commands, evidence, and failures
• real Git change capsule with per-file additions/deletions
• configurable startup intro and non-blocking capability inspection
• ConPTY execution path, Git/worktree, GitHub/Vercel command routes, provider and policy foundations

Signing status

This preview is intentionally unsigned and therefore published as a prerelease. Windows reports both the installer and installed executable as NotSigned. The SignPath Foundation application dossier is included in the repository, but Foundation approval and signing-policy onboarding are external steps that cannot be represented as completed before approval.

After approval, the repository will use the required attribution: Free code signing provided by SignPath.io, certificate by SignPath Foundation.

See CODE_SIGNING_POLICY.md, SIGNPATH_APPLICATION.md, and release-manifest.json for the exact status and remaining release blockers.