Skip to content

v2.12.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 18:48
v2.12.0
6d787b7

Features

  • simplify call checks and add encrypted moving QR transfers
  • add offline native Vouch prototype and device unlock
  • add fully offline optical Connect with resumable commitments
  • simplify in-person checks and bind holder-approved vouch names
  • make Signet Vouch a people-first private trust experience
  • copy saved people securely between local devices
  • make mobile checks installable and pairing resumable
  • add private group vouches without accounts or relays
  • add mobile pairing and an encrypted local vault
  • add a simple offline pair verification tool

Bug Fixes

  • clarify encrypted device copy wording and retain live checks
  • separate mobile setup links and record deployment checks
  • separate pair setup from word refresh and let either phone resume

Reproducible build: byte-identical output verified across two independent CI runners.

Artefact integrity

file:      canary-kit-2.12.0.tgz
size:      166274 bytes
sha256:    b1777736dc0e2ddcd02f16b5a3af1eb33f67e6a35fcb78db57e22d0a1848ed22
sha512-mjlaqtlnC2MghWgtA9FZcu2KH0AUIlKl8u9c8ycKbt25wztL22R4LkjruA2McDx8U9bzkHv20SNxi2nLLvz3zA==

Verify against the registry tarball:

curl -sLO https://registry.npmjs.org/canary-kit/-/canary-kit-2.12.0.tgz
shasum -a 256 canary-kit-2.12.0.tgz

Signet Vouch is live at https://canary-words.cocoacod256.chatgpt.site/. It provides phone-first Listen/Speak checks, rotating normal/duress words, an encrypted local vault, resumable offline setup, private vouches and encrypted selected-person copying. The tagged source reproduces all six deployed files exactly. A saved pair checks shared-secret continuity; platform membership and account identity remain separate.

The iOS/Android apps are development prototypes. The earlier iPhone/Pixel NFC trial reached matching words; the installed Bluetooth fix, latest native UI and real video-call QR transfers await physical acceptance. Browser camera, credential and radio providers are fixtures. The exact device/build boundaries are recorded in native/evidence/physical.json. The scoped UK assessment is in local/legal/.

Assets 4
Loading