Phosphor 0.11.2

Phosphor 0.11.2 for Mac (Apple silicon)

0.11.2

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

a3271603a420905ea7a3531252efbd29a1965ffeee17beac8935b0634400bb51  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.11.2_aarch64.app.tar.gz

It must print exactly:

480126b44652b371ee7717e35955cdfbb68f6e61492270f157162c95e36f9ca3  Phosphor_0.11.2_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.11.2

It passes only for a file this repository's release workflow built from the tag v0.11.2, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.19

Phosphor 0.10.19 for Mac (Apple silicon)

0.10.19

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

8791e9c9eab8e754c28999edd7bd9cb1000e46763d85a80feff75831f1d30bf7  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.19_aarch64.app.tar.gz

It must print exactly:

dc12ef7f9613938eb342a9f6a16cae3dca8bd0ec64f949262610562fc7f60d9b  Phosphor_0.10.19_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.19

It passes only for a file this repository's release workflow built from the tag v0.10.19, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.18

Phosphor 0.10.18 for Mac (Apple silicon)

0.10.18

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

93c7bc67d7f7ab2f8564d5f747b0dff55605347b327fe8662e7db981ae213145  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.18_aarch64.app.tar.gz

It must print exactly:

c242185c0cf7f9c6c8d93866a44dc5b3428532cd2deda9b8fb15efd0e93e35b7  Phosphor_0.10.18_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.18

It passes only for a file this repository's release workflow built from the tag v0.10.18, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.17

Phosphor 0.10.17 for Mac (Apple silicon)

Phosphor 0.10.17

Every swap card says Done when its swap has run: the window carries every move in flight, and a card also ends on NEAR's proof that its own swap ran.

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

903556ef1427930efee373836a4c81e2f8b5c587473a6449ed8da6fdf045bdcd  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.17_aarch64.app.tar.gz

It must print exactly:

8b12c1e7eb358bcffd10578c0d87180c13e6dcd76040ef8e2fd87071b045ebfc  Phosphor_0.10.17_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.17

It passes only for a file this repository's release workflow built from the tag v0.10.17, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.16

Phosphor 0.10.16 for Mac (Apple silicon)

Phosphor 0.10.16

A vault can move to this Mac's Touch ID key, with a 24-word paper key as the only other way in. Agents spend only from a small allowance, and every move of vault money takes your Touch ID. docs/verify.md maps each security claim to its code, its test and the command that checks it.

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

5baa5ada545d007e7eb5f69eb55dbaad69ead8186d2caaa44c9adaa14c3efeac  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.16_aarch64.app.tar.gz

It must print exactly:

79b83790bc9a98d4753af22285964610d441b1978653a3322c81cefba574342b  Phosphor_0.10.16_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.16

It passes only for a file this repository's release workflow built from the tag v0.10.16, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.15

Phosphor 0.10.15 for Mac (Apple silicon)

Phosphor 0.10.15

A wallet becomes Phosphor-only with one Touch ID, a wallet with no phrase can back up its private key, a restore keeps the wallet until a Touch ID opens the new one, and the Touch ID vault runs on macOS 13.5 and later.

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

76887aeab2a0efb5e4e6596d0e274a4c29e446d95972e715fbd2aca5ea31cf8b  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.15_aarch64.app.tar.gz

It must print exactly:

73d339ad466c2c5401b543cf1b702269f126f863284924cee1d432135a6da748  Phosphor_0.10.15_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.15

It passes only for a file this repository's release workflow built from the tag v0.10.15, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.14

Phosphor 0.10.14 for Mac (Apple silicon)

Phosphor 0.10.14

Move cards name their coins from the first frame, a move turned away says nothing moved, and swaps the relay cannot price go through 1Click with the same checks.

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

e4a346a2cacded9d8bd338876744e40dd00704ac563a6a9424db066f04ad34b9  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.14_aarch64.app.tar.gz

It must print exactly:

43fe1857bcbd65eb0133bcf5266792ed3921934114ad21340a99cb34427abd62  Phosphor_0.10.14_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.14

It passes only for a file this repository's release workflow built from the tag v0.10.14, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.13

Phosphor 0.10.13 for Mac (Apple silicon)

Phosphor 0.10.13

Invite codes, and a security pass checked by two audits and a red team: agents from outside ask once, outside text waits for your OK, updates and launch are checked, swaps are capped against signed prices, and releases wait for your approval.

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

cd ~/Downloads && shasum -a 256 Phosphor-macOS-arm64.dmg

It must print exactly:

70970f60445eab0cabbe4b477d7dd352a16e4f69467dedede3f6a63f771b2143  Phosphor-macOS-arm64.dmg

The update archive, the file installed copies download, has its own line. To check it, download it from this page too, then:

cd ~/Downloads && shasum -a 256 Phosphor_0.10.13_aarch64.app.tar.gz

It must print exactly:

6efd2df590cb05a702b59741c7431e17537ee1b29baafa182e85581f735ff578  Phosphor_0.10.13_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor \
  --signer-workflow karimbabasf/phosphor/.github/workflows/release.yml \
  --source-ref refs/tags/v0.10.13

It passes only for a file this repository's release workflow built from the tag v0.10.13, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.12

Phosphor 0.10.12 for Mac (Apple silicon)

Phosphor 0.10.12

Signed with an Apple Developer ID and notarized: opens with a double click.
The Touch ID service answers only Phosphor.

Install. Open the DMG, drag Phosphor into Applications, open it from there.

Verify the download before opening it. In Terminal:

shasum -a 256 ~/Downloads/Phosphor-macOS-arm64.dmg

It must print exactly:

bdb332fc65cb08663fbefc5d0e9f0b0d7533797af809827fdc8c86915175205a  Phosphor-macOS-arm64.dmg
164617267b95bdc708f050ae07182210d4817df5925ebad55610742b63d57673  Phosphor_0.10.12_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor

It passes only for a file this repository's release workflow built, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.

Phosphor 0.10.11

Phosphor 0.10.11 for Mac (Apple silicon)

0.10.11: the header follows the chart

The Trade header follows the coin on the chart.
A market switch no longer snaps back.
Swaps now carry the phosphor label.

Install. Open the DMG, drag Phosphor into Applications, open it from there.
This build is not yet notarized by Apple, so on first open macOS says it cannot verify the app: click Done, then double-click Open Anyway in the DMG window, which opens System Settings at the Open Anyway button. Click it. Compare the checksum first.

Verify the download before opening it. In Terminal:

shasum -a 256 ~/Downloads/Phosphor-macOS-arm64.dmg

It must print exactly:

839f3fc37955e397fa634855f5fdad96c86c2a5fa07662777d39693f46d01de8  Phosphor-macOS-arm64.dmg
25183ce22f95822c0515f6e12be32ba0dba0d7c15c15a419a5fbace51c182570  Phosphor_0.10.11_aarch64.app.tar.gz

Check where it was built. With the GitHub CLI (brew install gh):

gh attestation verify ~/Downloads/Phosphor-macOS-arm64.dmg --repo karimbabasf/phosphor

It passes only for a file this repository's release workflow built, and it prints the commit it was built from, so you can read the exact code in the file you hold.

Installed copies are offered this version automatically; the update is signed and the app refuses one that is not. Only download Phosphor from this page or from https://phosphor.money.