PLANK 1.1.030

PLANK 1.1.030

Changes since 1.0.143,
the previous published release.

Upgrade Host and Client together. Network loss recovery now uses RaptorQ 2;
its recovery format is incompatible with 1.0.143.

Client

• Improve sustained audio synchronization with Mac Hosts using Host timestamps and smooth resampling. Protect playback from excessive catch-up when the output device needs more data.
• Restore video-clock tracking on the Linux hardware-rendering path.
• Forward your microphone from Linux or macOS to a Mac Host, with a toolbar mute control. New configurations start muted.
• Forward supported webcams from Ubuntu to a Mac Host. Camera forwarding starts off.
• Show In Session status, with an optional username when the Host administrator allows it.
• Optionally remember the last successful bookmark username; never save passwords.
• Take over your active Mac session from another Client, including when the Mac is locked.
• Remember Host identities and ask before accepting a changed identity.
• Install the Mac Client with a PKG, permission setup and an uninstaller.
• Improve connection cancellation, shutdown and Wacom recovery after switching apps or Spaces.
• Read the built-in changelog by clicking the version number.

Host

• macOS: add PLANK Microphone and PLANK Camera for remote application input.
• macOS: route remote audio through PLANK Output, with volume and mute support and restoration after disconnect.
• macOS: improve login-screen transitions, session takeover and recovery after startup or user changes.
• macOS: document administrator settings in /etc/plank/host.conf and simplify permission setup and optional-device removal.
• Linux: improve virtual-monitor ordering and release held tablet contact when forwarding pauses, without recreating the tablet.
• Linux: bound operating-system authentication checks so a stalled backend does not indefinitely block other authentication requests.
• Both platforms: upgrade network loss recovery and harden malformed-data handling, cancellation and queue overflow.

Validation notes

All four packages passed their hosted build and package gates from main commit
e515fe411d5185d3236a8b5c19a14b012375183e:
Linux Host,
Linux Client,
macOS Host, and
macOS Client.
Both Mac installers are signed, notarized and stapled. Privacy and clipboard
regression checks also passed. No machines were automatically upgraded.

The Linux Host passed three loss-matrix repetitions at 150 Mbps through 5% loss
in the loopback fixture. Hardware-dependent tablet tests were skipped on the
builder; these results do not replace real hardware or WAN qualification.

The audio changes have automated finite-queue, resampling and clock-drift tests.
A long real-world listening test of the latest playback guard and measured
absolute A/V synchronization remain pending. Existing hardware qualification
requirements, including the latest Wacom lifecycle changes, still apply.

Mouse lag over the Mac System Settings Wallpaper/Screen Saver panels, the Linux
physical-display provenance edge case and clipboard immediate-paste stress
qualification remain deferred. This release does not claim to resolve them.

Packages

• Linux Host: Rocky Linux 9.7, x86-64 RPM.
• Linux Client: Ubuntu 26.04, x86-64 DEB.
• macOS Host: macOS 27 or newer, Apple Silicon PKG.
• macOS Client: macOS 15 or newer, Apple Silicon PKG.

SHA256SUMS uses the downloadable package filenames. manifest.json records
exact source revisions, dependency pins and package-validation status separately
from live functional acceptance.

GitHub source archives omit submodules. To obtain the complete source:

git clone --recurse-submodules --branch v1.1.030 https://github.com/instinctual/plank.git

PLANK 1.0.143

PLANK 1.0.143

Changes since 1.0.137

• Correct absolute mouse coordinates at the right and bottom image edges in
  both the Client and shared input sender. Prevent valid edge interaction from
  becoming an out-of-bounds packet that the macOS Host rejects. Preserve ordered
  button/key events and strict Host validation.
• Remove the Linux Host's inherited delayed-left-release/synthetic-right-click
  workaround. Deliver buttons immediately and retain disconnect/session cleanup.
• Apply the fast-send policy to Linux Host: remove application datagram pacing
  and use the same 1 Gbps minimum rate-derived Quinn window budget as macOS.
  This does not set the encoder bitrate to 1 Gbps or change FEC, MTU or queue sizes.
• Stop treating macOS screen-lock notification alone as permanent revocation
  of an authenticated graphical session. Logout, user switching, sleep, changed
  console ownership, permission loss and expired admission remain protected;
  the macOS lock screen still requires normal OS authentication.
• Allow administrators to read macOS system Host logs without granting write
  access. Private user logs, credentials and keys retain their protections.
• Add privacy-safe session-stop/transport-failure classification and bounded
  input timing summaries, with new lifecycle, input-boundary and package tests.

The operator accepted these changes after candidate testing and reported no
further waiting popup during the latest observation. Versions 1.0.138–1.0.142
were integration candidates; 1.0.143 is the fresh mainline rebuild.

Packages

• Linux Host: Rocky Linux 9.7, x86-64 RPM.
• Linux Client: Ubuntu 26.04, x86-64 DEB.
• macOS Host: macOS 27+, Apple Silicon, signed/notarized PKG.
• macOS Client: macOS 15+, Apple Silicon, signed/notarized DMG.

All products are rebuilt on GitHub-hosted builders from main. Exact-input
dependency caches may be reused; application/transport compilation and packaging
run fresh. No machine is automatically upgraded. NVIDIA driver qualification
remains capped at 595.91.07.

SHA256SUMS uses downloadable filenames; manifest.json records package-source
commits, dependency pins and validation separately from live acceptance.
GitHub source archives omit submodules; clone the complete release with:

git clone --recurse-submodules --branch v1.0.143 https://github.com/instinctual/plank.git

Validation and known limitations

All four product builds and both signed Mac package gates passed from main
commit 86c435ed8ba9c5b143048c5a6f8db5d6870606bf:

• Four-product build and Linux packages.
• Signed/notarized Mac Host, attempt 2.
• Signed/notarized Mac Client.
• Privacy checks and clipboard regressions.

Local release checks passed all 48 CI-policy tests, seven portable CTest suites,
23 macOS installer-script checks and diagnostic-label/timing tests. Hosted
privacy and clipboard regression checks passed. Candidate tests passed Client
input-boundary suites, Mac lifecycle/session tests, native log-access checks,
Linux input cleanup and fast-send/baseline transport tests. Hardware-dependent
UHID skips are not hardware acceptance.

The final Linux RPM was packaged with BUILD_TESTS=OFF; the subsequent input
test build did not replace or repackage it. Its lifecycle suite passed 25
shuffled iterations, with three hardware-dependent UHID skips each. No new
live hardware tests or package installations were performed during this rebuild.

The signed macOS Host's first attempt timed out receiving one audio packet in
a C ABI loopback test, after its video and fingerprint-trust checks passed.
One unchanged rerun and the independent ordinary Mac Host build passed. No
test timeout or assertion was relaxed; the initial timeout's cause remains
unconfirmed. Final mainline build results are recorded in the handoff.

Mouse lag over macOS System Settings' Wallpaper and Screen Saver panels remains
unresolved and is explicitly deferred. It is distinct from actual screen-lock
handling; this release does not claim to fix it or every possible reconnect.
Synthetic lock/authority tests do not replace live lock/unlock and user-switch
qualification. Broader permission, Wacom, color, network and long-session gates
still apply.

The existing Linux physical-display lease/provenance mismatch and clipboard
immediate-paste stress gate remain open. macOS 27 beta results require final-OS
revalidation. Unrelated pending PRs and RK3576 research are not included.

PLANK 1.0.137

PLANK 1.0.137

Changes since 1.0.135

• Add authenticated plain-text clipboard synchronization between the macOS
  Host and macOS Client. Clipboard access belongs to the active desktop session;
  it is not enabled at the login screen. Mac Client ↔ Linux X11 Host transfers
  remain supported.
• Apply a shared 512 KiB UTF-8 clipboard limit to the supported Mac/Linux
  endpoints. Reject oversized, malformed or embedded-NUL text without truncating
  it. Files, images, rich text and a Linux Client clipboard backend are not
  included.
• Resume clipboard transmission from the unsent chunk under queue pressure,
  rather than restarting the transfer or disconnecting video. Improve session
  validation and cleanup, preserving newer locally copied text. Clipboard
  contents are never logged.
• Independently verify the required Vulkan Loader allocation-failure patch
  during Linux Host dependency bootstrap, cache validation and package preflight.
  Add twelve regression cases, including precise handling of intentionally
  omitted upstream test files and Unicode filenames. The Loader repair itself
  was already included in 1.0.135; no graphics driver or dependency pin changes
  are introduced here.

The operator accepted the 1.0.136 clipboard candidate before merging. Version
1.0.136 was used for candidate validation; 1.0.137 is the new mainline release.
Upgrade Host and Client together: the macOS launch contract now explicitly
negotiates clipboard support using schema 3.

Packages

• Linux Host: Rocky Linux 9.7, x86-64 RPM.
• Linux Client: Ubuntu 26.04, x86-64 DEB.
• macOS Host: macOS 27+, Apple Silicon, signed/notarized PKG.
• macOS Client: macOS 15+, Apple Silicon, signed/notarized DMG.

All packages are rebuilt from main on GitHub-hosted builders, not relabeled
candidate artifacts. Verified dependency caches may be reused; application
compilation and packaging run fresh. NVIDIA headers retain the 595.91.07 driver
ceiling. This release does not install or deploy software automatically.

SHA256SUMS uses downloadable asset filenames. manifest.json records exact
source revisions and package validation with platform-organized catalog paths.
GitHub source archives omit submodules; clone the complete release instead:

git clone --recurse-submodules --branch v1.0.137 https://github.com/instinctual/plank.git

Validation and limitations

All five release workflows passed at package-source commit
41cffcddaf487acd84b293fe1792d3406bfe8d64:

• Four-product build and Linux packages.
• Signed/notarized macOS Host.
• Signed/notarized macOS Client.
• Clipboard regressions.
• Private-information checks.

The Mac Client passed 156 native Qt test results. Mac Host native pasteboard
tests passed; Linux Xvfb passed 13 backend cases and five negative controls.
Shared clipboard wire validation passed under ASan/UBSan. Local validation
passed seven portable CTest suites, twelve dependency-patch regressions, 43
CI-policy tests and the release-version contract.

Mac signing/notarization/stapling and temporary-key cleanup passed. Linux
dependency, private-runtime, version and package gates passed, including Host
log-directory ownership and Client no-autostart checks. Linux Host performed a
cache-cold dependency bootstrap; all nine required patches were verified during
bootstrap, package preflight and cache sealing. Mac and Linux Client dependency
caches restored and passed independent verification.

No new live hardware tests or installations were performed for this rebuild.
Existing operator acceptance does not replace qualification for every display,
permission, Wacom or network combination.

Immediate paste after a new copy remains a stress-test item: native clipboard
writes are asynchronous and there is no applied-write acknowledgment. Reliable
chunk ordering and retry tests do not establish an atomic copy/paste guarantee.
Clipboard interruption, ownership, reconnect and large-transfer stress remain
part of the qualification matrix.

The existing Linux physical-display lease inconsistency can still reject a
connection with an invalid composite-source/provenance error; this release does
not claim to fix it. macOS 27 beta results require final-OS revalidation.
Remaining unmerged PRs and RK3576 research are excluded.

Package checksums

Download	SHA256
plank-host-1.0.137-1.el9.x86_64.rpm	a706b780f02cee6517a3694fee0b8e9574f234d8e720f35624a8a70b2b701579
plank-client_1.0.137_amd64.deb	3fc1c4d401250ec67bd188dc406befef5fdc98658ceda33fe6f0a637287aa997
plank-host_1.0.137_arm64.pkg	88555151a3067f7736fcbf7a20d9d8a962cc7acb76ea2496f39b6880678757b1
plank-client_1.0.137_arm64.dmg	d2704173da6a2f7be506bd1b9cfe1b7aa81ba607ad49f6aa79ba28dbaaa4e358

PLANK 1.0.135

PLANK 1.0.135

Changes since 1.0.124

• Add macOS system-shortcut capture through the existing capture preference.
  With capture active and the stream focused, Command-Tab and Command-Space
  reach the Host; captured Command-Q behavior remains intact. Capture resumes
  after a three-finger Spaces swipe away and back, without needing a click.
  Background shortcuts remain local, and returning does not override explicit
  capture release or revoked Accessibility permission.
• Request Accessibility permission at ordinary Client startup, or when capture
  is enabled in idle Settings, rather than behind an active stream. Previously
  granted permission does not prompt again. CLI autoconnect requires prior
  authorization through the ordinary launcher.
• Add plain-text clipboard synchronization between the macOS Client and Linux
  X11 Host, with negotiated support, bounded transfers, ownership checks and
  disconnect cleanup. Both peers must be updated. Mac Host and Linux Client
  clipboard backends, files and images are not included.
• Add a compact Network RTT indicator to the toolbar, using the same measured
  value as the onscreen statistics. Resize the bitrate slider to match its
  Encoder Target segment without changing toolbar height or input routing.
• Fix a Metal overlay replacement race that could briefly omit the toolbar
  during redraws. Keep the previous complete image until its replacement is
  ready, including when allocation fails.
• Integrate macOS multi-display Metal presentation and raw-HID Wacom support,
  with fullscreen/pointer cleanup and delayed input-release recovery. One
  Apple Silicon Client package now targets macOS 15 and newer using SDK 27;
  newer APIs remain available behind runtime checks. The Mac Host still
  requires macOS 27.
• Preserve mouse-move/button ordering and release delivery under input queue
  pressure. Include the Linux virtual-HID Pause-key release correction.
• Incorporate reviewed x264 and Vulkan dependency updates, including the
  Vulkan allocation-failure repair and reproducible patch gates. Update Rustls
  to 0.23.45 and reviewed CI Actions; add dependency-maintenance checks.
  NVIDIA headers remain pinned for the existing 595.91.07 driver ceiling.

The separate Linux physical-monitor mode-change contribution and other
unmerged PRs are excluded. No application datagram pacer is restored.
1.0.134 was withheld before publication and is superseded by this release.

Packages

• Linux Host: Rocky Linux 9.7, x86-64 RPM.
• Linux Client: Ubuntu 26.04, x86-64 DEB.
• macOS Host: macOS 27+, Apple Silicon, signed/notarized PKG.
• macOS Client: macOS 15+, Apple Silicon, signed/notarized DMG.

Release packages are rebuilt from main, not renamed branch artifacts.
SHA256SUMS uses downloadable asset filenames; manifest.json records exact
source revisions and package validation with platform-organized catalog paths.
GitHub source archives omit submodules; clone the complete release instead:

git clone --recurse-submodules --branch v1.0.135 https://github.com/instinctual/plank.git

Validation and limitations

The operator accepted live macOS system-shortcut forwarding, the Spaces-return
repair and Mac Client ↔ Linux Host plain-text clipboard transfer. All four
mainline product builds passed from source
af74d8b8fdf9bb58cf096eeb10fb5aaba01a19d4. The Mac Client passed 153 native Qt
results and five Metal overlay regression groups. Both Mac packages passed
signing, notarization, stapling, package checks and temporary-key cleanup.
Linux package, private-FFmpeg, dependency, version and payload gates passed,
including the Host log-directory and Client no-autostart checks. Dependency
caches were independently verified; application compilation and packaging ran
fresh. Privacy, clipboard and local portable regression checks passed.

Build	GitHub run
Four-product build, including release RPM/DEB	35330999876
Signed macOS Host	35331000308
Signed macOS Client	35331003759

All downloaded packages passed SHA256 verification and were collected with
exact source provenance under artifacts/packages/releases/1.0.135/.

Package	SHA256
plank-host-1.0.135-1.el9.x86_64.rpm	198ef27454243d9300c1b11cdd861540f4defef906797cdf561996bd614800bd
plank-client_1.0.135_amd64.deb	910a7030ed68cd68172fbf22a45d0276024419a9ca1f92fe2853c0de2d782f49
plank-host_1.0.135_arm64.pkg	811452516a1688b685216e0abcdccb497bf0dc67b2c91915545bc03e49599245
plank-client_1.0.135_arm64.dmg	e910f0b39573ea0cfba5f45c4d42a651d6dfe9879fed2d05bedd703060601803

Build success is not a substitute for hardware qualification. Explicit live
checks remain for startup permission timing, the final overlay repair, identical
Client-package behavior on macOS 15/27, permission-denial/revocation and
Wacom/clipboard interruption and reconnect stress. A Linux physical-display
lease inconsistency can still reject a connection with an invalid composite-
source/provenance error; this release does not claim to repair it. macOS 27 beta
results need final-OS revalidation. No deployment is included in this release
operation.

PLANK 1.0.124

PLANK 1.0.124

Changes

• Fix macOS Command-Q quitting both the remote application and PLANK. With
  keyboard capture active and the stream focused, Command-Q belongs only to
  the remote session. Local shortcut behavior returns when capture is released.
• Replace the macOS Quit bridge with explicit application-exit ownership.
  Menu/Dock Quit cancels startup or an active/reconnecting session and waits
  for resource cleanup before exiting. Ordinary Disconnect keeps PLANK open.
• Add native shortcut and application-lifecycle regression tests to every
  macOS Client build, including repeated Quit and overlapping cleanup.

Linux runtime behavior, Host implementations and transport are unchanged.
Clipboard synchronization PRs remain under review and are not included.

Packages

• Linux Host: Rocky Linux 9.7, x86-64 RPM.
• Linux Client: Ubuntu 26.04, x86-64 DEB.
• macOS Host: macOS 27+, Apple Silicon, signed/notarized PKG.
• macOS Client: macOS 27+, Apple Silicon, signed/notarized DMG.

All packages are rebuilt from main, not renamed candidate artifacts.
SHA256SUMS uses downloadable asset filenames. manifest.json records exact
source revisions and package validation using platform-organized catalog paths.
GitHub source archives omit submodules; use a complete source clone:

git clone --recurse-submodules --branch v1.0.124 https://github.com/instinctual/plank.git

Validation scope

The operator accepted macOS Client 1.0.123's quit behavior. Its native shortcut
and lifecycle suites passed alongside existing topology, toolbar and reconnect
tests. All four mainline builds passed at exact source
cb01cfe84504d7a74dfa78c5b79d701c8277bf6e:

• Linux Host
• Ubuntu Client
• macOS Host
• macOS Client

All four restored and independently verified dependency caches. Application
compilation and packaging ran fresh. Both Mac packages passed Developer ID
signing, notarization, stapling and Gatekeeper. The macOS Client passed seven
native shortcut cases and six application-lifetime cases, plus existing
topology/toolbar/reconnect suites. Linux dependency, version and payload gates
passed. All downloads were SHA256-verified and collected under
artifacts/packages/releases/1.0.124/. Local CI, lifecycle/fullscreen source
guards and all five root CTest suites passed.

Hardware acceptance is not inferred from build success. macOS 27 beta results
remain subject to final-OS revalidation. No deployment is part of this release.

PLANK 1.0.120

PLANK 1.0.120

Mainline release of Linux and macOS Host/Client packages. Changes below are
relative to macOS Host 1.0.106 and Client 1.0.105.

macOS display and fullscreen

• Native fullscreen Spaces support restores trackpad gestures for switching
  between fullscreen applications.
• Fullscreen Match Client uses the current display's logical size, backing-pixel
  density and camera safe area. Retina displays retain their 2x desktop scale;
  ordinary 1x displays remain 1x. This prevents tiny remote UI and unnecessary
  side borders without stretching the video.
• Notched displays retain the system-owned top safe area so remote menus are
  not obscured. Displays without a camera inset retain their full usable area.
• Mac Hosts accept exact dynamically requested desktop dimensions rather than
  restricting Match Client to a predefined resolution list.
• Authenticated display preparation wakes the desktop and waits boundedly for
  usable geometry. Real remote input reports console activity, addressing
  native login-screen password rejection while the console is inactive.

Use matching 1.0.120 Host and Client packages for the updated Mac display
negotiation. Start a fresh fullscreen connection to apply Match Client sizing;
toggling window mode does not renegotiate an existing remote desktop.

Authentication and reconnect

• Abandoned macOS authentication setups no longer unnecessarily occupy setup
  capacity. Successful authentication clears failure backoff; diagnostics
  distinguish credential rejection from backend errors without logging secrets.
• Temporary authenticated display/topology readiness retries retain their
  setup authorization within its original expiry. Cancellation, rejection,
  ownership change or failed launch still revoke it.
• Client reconnect attempts respect the configured Ask/Disconnect deadline.
  Keep Waiting explicitly resumes attempts; definitive authentication, TLS
  and permission failures stop instead of repeatedly submitting credentials.
• A connection completing after its deadline is discarded rather than left
  hidden behind an unanswered prompt.

Linux Host and transport source revisions are unchanged; their existing
encoding, color, input and network behavior is retained.

Packages

Product	Platform	Package
Host	Rocky Linux 9.7, x86-64	RPM
Client	Ubuntu 26.04, x86-64	DEB
Host	macOS 27+, Apple Silicon	Signed/notarized PKG
Client	macOS 27+, Apple Silicon	Signed/notarized DMG

macOS support remains experimental; beta-OS results need final-OS revalidation.
Existing setup and permission requirements still apply. Publishing this release
does not install it or change workstation configuration.

Verification and source

All four packages were cold-bootstrapped and rebuilt from mainline commit
53c7c3988f88a440f1cffeda0ce61ed526de6c43, identified by the release tag:

• Linux Host build
• Ubuntu Client build
• macOS Host build
• macOS Client build

Build, dependency-patch, version and uninstalled package gates passed. Both Mac
packages passed Developer ID signing, notarization, stapling and Gatekeeper.
The fullscreen candidate received operator acceptance. Fresh live tests of
these exact release artifacts and exhaustive recovery/display combinations
were not performed; package checks do not replace hardware acceptance.

SHA256SUMS uses release-asset filenames. manifest.json records exact source,
dependency revisions and validation states using platform-organized local
catalog paths. The subsequent dependency-cache work is not part of this release.

GitHub source archives omit submodules. Obtain complete matching source with:

git clone --recurse-submodules --branch v1.0.120 https://github.com/instinctual/plank.git

PLANK 1.0.106

PLANK 1.0.106 — macOS Host audio and display resilience

macOS Host-only release; existing Clients remain compatible. Linux Host, shared
Client, transport, authentication and codec/color behavior are unchanged. For
the unchanged Linux Host and Linux/macOS Clients, use the
1.0.105 packages.

• Streamed desktop audio follows the Mac's default output volume and mute.
  Physical-speaker suppression during capture remains enabled. Fixed-volume
  outputs use unity gain; failed control reads do not unexpectedly unmute.
• Audio-buffer overflow discards stale queued audio and resumes using actual
  source timestamps instead of permanently disabling capture.
• Other failures of an active desktop audio tap can restart audio independently
  of video/input, after complete teardown, with at most three retries per
  connection. Denied startup consent is not repeatedly requested.
• Audio failures now identify the failing stage; overrun and restart events
  are logged to the existing product log.
• Display recovery no longer reapplies settings to an existing offline virtual
  display, a path associated with a WindowServer abort. It requests wake and
  waits boundedly for the same output. A permanently unavailable display still
  fails clearly, without creating duplicate displays or rebooting the Host.

The operator validated volume/mute and reported good behavior on the candidate,
then approved merging. This is not exhaustive long-duration audio, output-device
switching or sleep/recovery qualification. The original audio interruption's
precise cause remains unproven; the new diagnostics distinguish failure paths.

The Apple Silicon installer requires macOS 27 or newer. It was rebuilt from
main at 4b634071d0aa96c5568e90068f5f42b7cd953365, not relabeled from a branch
package. Developer ID signing, notarization, stapling, Gatekeeper and automated
audio/display/installer checks passed in
the hosted build.
The release tag identifies that exact package source commit. See the attached
manifest and checksums for package provenance. No automatic deployment is made.

PLANK 1.0.105

PLANK 1.0.105

Full mainline rebuild of the public Linux and macOS Host/Client packages.
Changes below are relative to release 1.0.103; the macOS Host fixes were also
provided in the accepted 1.0.104 candidate and subsequent mainline installer.

Fixes

• macOS Host: recover an inactive, PLANK-owned virtual display when an
  authenticated connection cannot read its topology. Recovery retains the last
  successful resolution, is bounded and ownership-checked, and does not change
  physical monitor modes or create duplicate displays.
• macOS Host installer: fix owner-only application resources that could produce
  a prohibited icon or a "damaged or incomplete" launch error for ordinary
  users. Public app bundle permissions are now checked in the assembled app,
  staged payload and finished installer. Private keys and installed private
  state retain their restricted permissions.

Build and distribution

• Clean, pinned-source GitHub-hosted builds for all four platform/product
  combinations, with source revision and dependency-patch checks.
• Protected macOS Developer ID signing and notarization on disposable runners,
  with temporary-keychain cleanup. Explicitly requested signed builds on allowed
  branches proceed without a separate approval prompt; public pull-request
  builds do not receive signing credentials.
• Updated CI actions for Node.js 24 and expanded installation/configuration
  documentation.
• No Linux Host, shared Client or transport dependency revisions changed from
  1.0.103. Those packages are rebuilt at the common release version, not relabeled.

Packages and requirements

Product	Platform	Package
Host	Rocky Linux 9.7, x86-64	RPM
Client	Ubuntu 26.04, x86-64	DEB
Host	macOS 27, Apple Silicon	Signed/notarized PKG
Client	macOS 27, Apple Silicon	Signed/notarized DMG

macOS support remains experimental and requires macOS 27. Existing permissions
and platform setup requirements still apply. See docs/README.md and
docs/development/acceptance-criteria.md for remaining hardware qualification
gates. No automatic installation or workstation configuration change is part
of publishing this release.

Verification and source

All four packages were clean-bootstrapped and rebuilt on GitHub-hosted runners
from 78e068edf9240de44e2aea5949dd94df713468b0, the commit identified by the
release tag. Build and uninstalled package gates passed. Both macOS artifacts
passed Developer ID signing, Apple notarization, stapling and Gatekeeper checks.
The Host's synthetic display-recovery/TLS and finished-package permission tests
passed; the Linux Client's exact-decoder, private-FFmpeg, dependency, version
and no-autostart gates passed. The RPM's log-directory and manifest gates passed.

The earlier macOS Host candidate received operator acceptance. Fresh live
hardware/session tests of these exact release artifacts were not performed;
that distinction is retained in the manifest. No Linux/Client runtime changes
are introduced by this rebuild.

The release assets include SHA256SUMS and manifest.json. The checksum file
uses release-asset filenames; the manifest records exact build commits,
dependency revisions, target platforms and package checks using the local
platform-organized catalog paths. Build/package checks do not substitute for
live display, audio, input or hardware-decoder acceptance.

GitHub source archives omit submodules. Obtain complete matching source with:

git clone --recurse-submodules --branch v1.0.105 https://github.com/instinctual/plank.git

PLANK 1.0.103

PLANK 1.0.103

Public Host and Client source and packages for Linux and macOS.

Packages

Platform	Host	Client
Rocky Linux 9.7 / Ubuntu 26.04, x86-64	Rocky Linux RPM	Ubuntu DEB
macOS 27, Apple Silicon	Signed/notarized PKG installer	Signed/notarized DMG

macOS support remains experimental and requires macOS 27. Review the platform
installation/build documentation and acceptance criteria before deployment.

Changes

• Removed unused ENet, nanors and inherited GameStream implementation from the
  Host's header-only protocol dependency.
• Made build-path sanitization reproducible across compiler, dependency and
  packaging steps, with fail-closed package checks.
• Preserved the current streaming, color, input and authentication code paths.

Validation and provenance

All four packages were built from mainline commit
06bc71add24d7b7bddd19db1a9c2e914f0cb8383, which this release tag identifies.
Clean build and uninstalled package checks passed. Both macOS packages passed
signing, notarization, stapling and Gatekeeper checks. The final macOS Client
passed a certificate-verified TLS 1.3 loopback using its bundled OpenSSL.
Nine focused build-path tests, five portable CTest entries and privacy CI passed.

Fresh live-session/hardware acceptance was intentionally skipped for this
release; it is not claimed as passed. Package/source scans found no supplied
secrets or operator build-path matches, subject to the documented audit scope.

SHA256SUMS verifies the downloaded package filenames. manifest.json records
source commits, checksums, target platforms and package validation; its paths
refer to the local platform-organized artifact catalog.

GitHub's automatic source archives do not include submodule contents. To obtain
the matching complete source, use a recursive Git clone of this release tag:

git clone --recurse-submodules --branch v1.0.103 https://github.com/instinctual/plank.git

See docs/README.md, docs/development/build/ and
docs/development/acceptance-criteria.md for supported build paths and remaining
qualification requirements. Upstream license notices and attribution are retained.