PriorFolio 0.1.0a3

PriorFolio prepares IP disclosures and keeps their supporting evidence in a separate private archive.

Install: python -m pip install "priorfolio==0.1.0a3"

Changes since 0.1.0a2:

• Signed timestamps are on by default. Each run sends only the SHA-256 of evidence.json to DigiCert, Sectigo and FreeTSA. Like any web request, this reveals your IP address to them. Use --no-timestamp, or untick Request timestamps, to stay offline.
• Timestamp signatures are verified with OpenSSL 3 against pinned DigiCert, Sectigo and FreeTSA root certificates, when collected and on every verification, as of the time inside each token. Failing responses are discarded; without OpenSSL 3 they are kept and reported as "signature not checked". On macOS, install OpenSSL 3 with Homebrew.
• Every new run is read back and verified before it is reported as finished.
• Full and cloud backup copies. When a run holds files whose names suggest secrets (.env, keys, credentials), export a full copy to keep offline and a cloud copy of the same timestamped record without those files (--withhold-secrets, --withhold PATTERN). The cloud copy lists them in WITHHELD.txt and verifies every other file.
• 7-Zip instructions: put each copy in a password-protected 7-Zip archive with encrypted file names before it leaves your computer.
• Safer scanning: repositories whose own Git config defines clean filters or includes other config files are scanned without git status, so scanning never starts programs they name.
• The priorfolio-gui launcher explains a missing Tkinter; desktop checksum files now use Unix line endings.

Downloads:

• Windows x64: extract the ZIP, then open PriorFolio/PriorFolio.exe.
• Linux x64: extract the tar.gz, then run PriorFolio/PriorFolio.
• macOS arm64: extract the tar.gz, then open PriorFolio.app.
• Each desktop archive also contains PriorFolioCLI. A SHA-256 file is provided for each download, and SHA256SUMS covers every attached file.

Desktop downloads include Python and Tk. Install Git separately. These builds are unsigned; the macOS app is not notarized. Linux binaries are built on Ubuntu 22.04.

PriorFolio does not send email, upload files, or encrypt archives itself. Withholding is by file name, so a secret written inside an ordinary file stays in a cloud copy. Review disclosure text before sharing.

GPL-3.0-only. See the README for installation, use, and verification.

Validation: the Windows/Linux/macOS test matrix passed on Python 3.10, 3.12 and 3.15, including signature verification of recorded DigiCert, Sectigo and FreeTSA tokens on all three systems. Native bundles passed GUI startup and frozen-CLI backup/restore checks.

PriorFolio 0.1.0a2

PriorFolio prepares IP disclosures and keeps their supporting evidence in a separate private archive.

First PyPI release: python -m pip install "priorfolio==0.1.0a2"

Changes since 0.1.0a1:

• Exported backup ZIPs no longer add zip64 headers to small entries, so Info-ZIP unzip restores backups of projects with non-ASCII names without errors.
• priorfolio --gui explains how to install Tkinter when it is missing, instead of showing a traceback.
• Deleted run folders no longer keep the desktop app asking about a pending backup on every close; Previous runs labels them FOLDER NOT FOUND.
• Fuller PyPI classifiers, plus tests that keep the version, classifiers and source-archive allowlist consistent.

Downloads:

• Windows x64: extract the ZIP, then open PriorFolio/PriorFolio.exe.
• Linux x64: extract the tar.gz, then run PriorFolio/PriorFolio.
• macOS arm64: extract the tar.gz, then open PriorFolio.app.
• Each desktop archive also contains PriorFolioCLI. A SHA-256 sidecar is provided for each download.

Desktop downloads include Python and Tk. Install Git separately. These builds are unsigned; the macOS app is not notarized. Linux binaries are built on Ubuntu 22.04.

Export the complete private backup, keep it remotely, and verify that it arrived before recording confirmation. The app does not send email, upload files, encrypt archives, or validate timestamp signatures. Review disclosure text before sharing.

GPL-3.0-only. See the README for installation, use, and verification instructions.

Validation: the Windows/Linux/macOS test matrix passed on Python 3.10, 3.12 and 3.15, and the native bundles passed GUI startup and frozen-CLI backup/restore checks.

PriorFolio 0.1.0a1

PriorFolio prepares IP disclosures and keeps their supporting evidence in a separate private archive.

This first public alpha supports project descriptions, exact source snapshots, evidence verification, complete backup ZIPs, checksums, and reminders to confirm an email-to-yourself or cloud backup.

Downloads:

• Windows x64: extract the ZIP, then open PriorFolio/PriorFolio.exe.
• Linux x64: extract the tar.gz, then run PriorFolio/PriorFolio.
• macOS arm64: extract the tar.gz, then open PriorFolio.app.
• Each desktop archive also contains PriorFolioCLI and a SHA-256 sidecar is provided alongside the download.
• Python users can install the attached wheel or build from the source archive. PyPI publication is pending publisher configuration.

Desktop downloads include Python and Tk. Install Git separately. These initial builds are unsigned; the macOS app is not notarized. Linux binaries are built on Ubuntu 22.04.

Export the complete private backup, keep it remotely, and verify that it arrived before recording confirmation. The app does not send email, upload files, encrypt archives, or validate timestamp signatures. Review disclosure text before sharing.

GPL-3.0-only. See the README for installation, use, and verification instructions.

Validation: the complete Windows/Linux/macOS matrix passed on Python 3.10, 3.12, and 3.15. Measured application line coverage is 91.79%. Native bundles passed GUI startup and frozen-CLI backup/restore checks. Python distributions passed strict contents, metadata, installation, snapshot, restoration, and tamper checks. SHA256SUMS covers every attached package and desktop checksum sidecar.