Overtalk 0.1.0

Overtalk began on 30 September 2026 as a fork of the Meetily community edition
(v0.4.1, MIT). See where Overtalk comes from.
Packages for Linux, Windows and macOS are attached to the release; Linux is the
tested desktop path.

Record and transcribe on your computer

• Records the microphone and the call's audio without a meeting bot, and imports
  existing recordings. A recording made while the models download waits and is
  transcribed when the speech model arrives.
• Built-in speech recognition with Parakeet TDT 0.6B v3 (25 European languages); an
  optional speech worker runs Qwen3-ASR 1.7B (30 languages) in an OS-enforced sandbox
  with no credentials, app database or network (verified on Linux).
• A recording notice step: one sentence to paste or read aloud, saved with the
  meeting and in every export.

Notes that cite their sources

• Notes, decisions, actions and open questions, each linked to the passage it came
  from. Exports to PDF, DOCX, Markdown, text and JSON, with optional redaction.

Projects and briefs, all open source

• Meetings are filed into projects before they start (from the calendar invite) and
  after they end (from what was said), each choice with its reason.
• A brief before each meeting from past meetings, the calendar, connected tickets and
  the project, every line linked to its source.
• Voice memory that records the person's consent; recognition is off unless turned on.

Pass it on

• Share one meeting as a self-contained web page or an .overtalk file, with audio
  clips, the whole recording or none, and redaction. No upload or server.
• overtalk-cli and an MCP server for Claude Code, Claude Desktop, Codex, Cursor and
  VS Code, off until turned on, with a separate grant for each kind of access. The app
  proves its identity before a client sends its token.

Privacy and packaging

• A local usage report, kept on the computer; no telemetry.
• Optional private AI summaries through Privatemode, encrypted on the computer.
• Packages: a .deb and an AppImage for Linux, an installer and a portable zip for
  Windows, and a .dmg for macOS 14.2+ on Apple silicon (packaging/).

Known limits

• The Windows and macOS packages are not yet tried on real hardware or code-signed.
• The .deb is tested on Ubuntu 24.04; newer Ubuntu releases are untested.
• On real meetings the built-in speech engine misses many words: on the AMI test set
  (16 recorded meetings, 9 hours per condition) its word error rate is 34.8% on a
  headset mix and 38.3% on one table microphone, mostly deletions where people talk
  over each other. See evaluations/ami/README.md.

Prepared for publication (21 October 2026) (release status)

• GPU workers run under a launcher only when OVERTALK_GPU_LAUNCHER names one; the
  service no longer looks for a wrapper in a fixed home-folder location.
• An installed macOS app ignores OVERTALK_SERVICE, so another program cannot choose
  the engine that inherits the app's microphone and screen-recording permissions.
  macOS helpers are started by absolute path.
• The worker sandbox also blocks io_uring. One error message now goes through the
  privacy-filtered logger instead of standard error.
• Removed commands left from Meetily's separate backend (profile and backend
  connection checks), which nothing called and which logged email addresses.
• The About dialog shows the attribution Slint's licence requires. LICENSE.md is
  the plain MIT text, NOTICE.md lists models and compiled-in components, and the
  Debian copyright file names Meetily's copyright.
• Windows packaging pins its FFmpeg and NSIS versions; cargo-deny now checks
  licenses; three advisories in rustls-webpki and webpki roots are fixed.
• Added SECURITY.md, issue-template guidance and corrected build, privacy and
  contributor documentation. Removed unused upstream images, fonts, an unreferenced
  Visual Studio installer and the obsolete updater-signing scripts.
• The repository holds current documentation only, indexed in docs/README.md;
  internal development logs, dated audits and design-tool files are not published.
  docs/RELEASE-STATUS.md lists what must happen before a binary release.
• The app names itself Overtalk wherever people see a name, including notifications,
  the tray, a restart prompt and the audio client the desktop's microphone indicator shows.
  Compatibility identifiers (sonefold, com.judeam.sonefold) are unchanged.
• Removed the psychiatric-session template inherited from Meetily; Overtalk makes
  no clinical claims.
• The worker sandbox refuses read grants that contain the home, data or
  configuration folders, and the speech worker's interpreter grant no longer
  widens to such a folder.
• CI pins the Rust toolchain action to a reachable commit, keeps pull requests from
  cancelling runs on main, and checks formatting of every package; Dependabot
  groups routine updates; a vulnerable markdown-it is overridden.

Hardening and dependency updates (22 October 2026)

• CI now builds and tests the native app, engine and worker sandbox on Linux,
  Windows and macOS. Fixes it found:
  • The worker sandbox starts on Windows: it passes the system variables an
    AppContainer needs and keeps its capability record alive until launch.
  • It starts on macOS 26, where the loader must read the root folder, and grants
    the resolved paths of files (/private/var/...).
  • Starting an MCP connection on a computer up for less than an hour no longer
    panics.
  • The installed Windows engine sets private library permissions through the
    Windows API. Launching PowerShell for each file was slow, and on GitHub's
    runner it failed or timed out.
• Saving right after start-up could fail with "database is locked". Write
  transactions now take the write lock when they begin.
• Recording:
  • Each audio input stream stays on the thread that created it.
  • Recording state stays usable after a panic elsewhere.
  • The Core Audio callback, the tray icon and Microsoft connections return errors
    instead of panicking.
  • Every unsafe block states why it is sound, and the build enforces it.
• Removed unused code:
  • the no-op analytics layer;
  • 89 service commands that no interface called (about 5,900 lines of Rust and
    1,000 of TypeScript);
  • 14 unused dependencies.
• The .deb depends on the display, input and GL libraries the window loads at run
  time.
• Dependencies:
  • Rust: hyper 1, reqwest 0.13 (still trusting only the bundled Mozilla
    roots), sqlx 0.9 and rusqlite 0.39 on SQLite 3.54.1, keyring 4, whisper-rs 0.16
    (whisper.cpp 1.8.3), hmac 0.13 and sha2 0.11.
  • Web interface: Next.js 16, React 19, Tailwind CSS 4, BlockNote 0.56 with
    TipTap 3, and zod 4.
  • Speech worker: torch 2.14.1 and nagisa 0.3, and librosa 1.0 is allowed.
  • GitHub Actions: current major releases.
  • The Rust, npm and Python audits report no known vulnerabilities.
  • With keyring 4, if the Linux Secret Service is unavailable when credentials are
    first needed, they stay unavailable until Overtalk restarts.

Downloadable packages (23 October 2026)

• Pushing a version tag builds, tests and publishes the packages on GitHub Releases
  with one SHA256SUMS file and build-provenance attestations
  (.github/workflows/release.yml); python scripts/release.py <version> sets the
  version and makes the tag.
• Every package carries the licence texts of the Rust crates compiled into it. The
  AppImage adds the copyright files of the system libraries it bundles and an offer
  of their source.
• The Windows and macOS packages bundle an LGPL FFmpeg 9.0.2 with libopus 1.6.1,
  built in CI from source pinned by SHA-256. Each release attaches both source
  tarballs. Without libx264, the screen recorder there writes MPEG-4 video.
• On Ubuntu 23.10 and later, where AppArmor restricts unprivileged user namespaces,
  the .deb installs an AppArmor profile so the worker sandbox runs. CI checks that
  code injected into the launcher cannot use the profile's permissions. The
  AppImage cannot install one and warns at start-up.
• ctutils 0.4.5 fixes RUSTSEC-2026-0385.

Downloads

• Linux (Ubuntu 24.04+, Debian 13+), .deb: overtalk_0.1.0_amd64.deb
• Linux, other distributions, AppImage: Overtalk-0.1.0-x86_64.AppImage
• Windows 10/11 x64, installer: Overtalk-0.1.0-windows-x64-setup.exe
• Windows 10/11 x64, portable: Overtalk-0.1.0-windows-x64-portable.zip
• macOS 14.2+ (Apple silicon), .dmg: Overtalk-0.1.0-macos-arm64.dmg

Verify a download with sha256sum -c --ignore-missing SHA256SUMS, or its build
provenance with gh attestation verify <file> --repo judeam/overtalk.

• Windows: not code-signed yet, so SmartScreen warns; choose More info → Run anyway.
• macOS: not notarised yet; after the first launch is blocked, open System Settings → Privacy & Security → Open Anyway.
• Recording is tested on Linux; Windows and macOS builds pass CI but have not yet been tried on real hardware (release status).
• Source code for the bundled FFmpeg and libopus is attached to this release.