AIRS 0.3.3 Preview — build 7

Public source sanitation update — October 25, 2026

Current source commit for v0.3.3: 13aa965165d6e5b0217b6f4cc8b700f83ca265c6. Tag object: 26fe8ae52eb207432a3be1cf052d512ab95269d0.

The sanitized source ZIP has SHA-256 e5d058ae613e0e785f6155ffe441e1426306a6ee19b13f07e0fea9be28c191c1. The source reconciliation supplement records the previous/current source and tag identities, changed source-archive checksums, and retained accepted app identities.

This update replaces source ZIPs and their source-checksum entries and adds the reconciliation supplement. Signed app ZIPs and original qualification/download records are unchanged. Accepted build, test, signing, notarization and functional results are reused within their original scope. No new app build, re-signing, notarization or unchanged test run was performed. Rewritten historical source is not asserted to reproduce the retained signed binaries.

Personal development context was removed while legal attribution was preserved. Historical review-profile source uses the already-qualified portable temporary-directory getter. Original source fields in older qualification records remain historical observations; use the reconciliation chain for their current lineage.

---

Original release notes — historical publication record

AIRS 0.3.3 Preview — build 7 adds bounded CFI control handling, structural signature evidence capture and saved review, and project-name search while retaining the corrected native Settings pane.

• Engine model arm64-bounded-cfi-control-v41: bounded CFI advances and remember/restore handling with explicit unsupported and refusal boundaries. Historical v40 parsing behavior remains available.
• Capture raw XML/DER signature evidence for a selected component, export the complete archive, and reopen it as historical evidence. Structural bytes do not establish signature validity, trust, effective permissions, or unwind correctness.
• Search project names without discarding a selected project's details. Portable-preview gates suppress competing pickers and distinguish current historical panels from preview content.

The Apple silicon app is Developer ID signed, notarized, and stapled. Apple accepted the new submission; ticket validation and the local distribution assessment passed.

Fresh native acceptance used owned fixtures for project reconstruction, ordinary and recipient preview gating, historical-panel visibility, project search, restoration of the original store, and signature capture/export/historical reopen. Optimized packaging and packaged v41 smoke checks passed. Prior scoped feature tests, runtime/vendor receipts, and Settings appearance qualification were reused; unchanged suites were not rerun.

This remains a preview. Real-image v41, clean-Mac/minimum-OS, Intel-app, and offline-download qualification are incomplete. Native control required a main-window traversal workaround. System Security performance diagnostics were logged during native UI-tree observation without an AIRS crash or observed hang; general performance is not qualified. Detailed signature fields were inspected in the reopened historical attachment; the live disclosure was not expanded by the control tools. No fresh CI pass is claimed.

Implementation/build/tag/source archive: b61f26e52ca9b42789943b4d7f7f0c360ee3c1c9. The source archive retains candidate-time release metadata. The attached qualification summary records completed acceptance and distribution results. Assets include the signed app ZIP, exact source ZIP, SHA256SUMS, and sanitized qualification summary.