AIRS 0.3.0 Preview — build 4

Public source sanitation update — October 25, 2026

Current source commit for v0.3.0: 51f6e4c331f2e3d7eebe7bce23173164e9f217d6. Tag object: 51f6e4c331f2e3d7eebe7bce23173164e9f217d6.

The sanitized source ZIP has SHA-256 4f65366be83e639afd92162f42621e934f4c77e860f47f7ee35210a2cf6cbdbc. The source reconciliation supplement records the previous/current source and tag identities, changed source-archive checksums, and retained accepted app identities.

This update replaces source ZIPs and their source-checksum entries and adds the reconciliation supplement. Signed app ZIPs and original qualification/download records are unchanged. Accepted build, test, signing, notarization and functional results are reused within their original scope. No new app build, re-signing, notarization or unchanged test run was performed. Rewritten historical source is not asserted to reproduce the retained signed binaries.

Personal development context was removed while legal attribution was preserved. Historical review-profile source uses the already-qualified portable temporary-directory getter. Original source fields in older qualification records remain historical observations; use the reconciliation chain for their current lineage.

---

Original release notes — historical publication record

AIRS 0.3.0 (build 4) is an Apple silicon preview for macOS 14 or newer. The app is Developer ID signed, notarized, and stapled. Apple accepted submission 8a4546f3-48d3-4991-9d5b-a66b7255099d with no issues; local ticket validation and distribution assessment passed.

This preview adds bounded declaration observations for app bundles without CFBundleExecutable, requested-slice component entitlement availability, portable inspection projects, exact project-manifest preservation with staged-package preflight, and Python CLZ-v32 report import admission parity. Resource observations do not create executable or entitlement authority. Selected programs are treated as data and are not executed.

The four outstanding native availability states passed in the isolated qualification app: supported ARM64 explicit read, missing requested slice disabled, declaration-only missing capability disabled, and reopened imported evidence disabled. The native log recorded 96 capture-related AppKit geometry diagnostics, so a clean-log claim is not made. Accepted unchanged runtime, dependency, and behavior receipts were reused; no broad corpus pass or new engine-result aggregate is claimed. See qualification-summary.json and SHA256SUMS.txt beside the archives.

The source archive and release tag correspond to frozen source revision 377cf2baa82e335bb42ebf75fe454e7be30c83e2. Private development history and local evidence are excluded. Later AIRS development changes for signing slice coverage and dSYM attachment selection are merged in the separate jdotc1/AIRS repository, but are not included in this frozen build.

Clean older-OS, Intel-host, second-machine reconstruction, capacity, and the stronger external C4 paired-consumer workflow remain unqualified. Retain prior app versions and saved data when upgrading; this release does not reset preferences or retained reports.