v0.19.0

Crewbox box builds

One file, no install: download the binary for the machine that
will be the crew box, run it, and scan the QR it prints (or open
/connect on any screen). A fresh box mints its own event PIN.

Platform	File
Linux x64	crewbox-linux-x64-v0.19.0
Windows x64	crewbox-win32-x64-v0.19.0.exe
macOS	Crewbox-v0.19.0.dmg — universal, works on Intel and Apple Silicon
macOS (bare binary)	crewbox-darwin-arm64-v0.19.0 / -x64-
Android (sideload)	crewbox-v0.19.0.apk — or drop it into the box's data dir (any crewbox*.apk name) to serve it at /crewbox.apk

The .dmg is signed, notarised and stapled — it opens with no
warning, and with no internet. The bare crewbox-darwin-* binaries
are not signed and still need right-click → Open. Windows warns
about an unsigned app: More info → Run anyway. On Linux:
chmod +x then run.

Voice runs inside the box — nothing else to install. For a
dedicated festival rig (HTTPS so browsers get the mic, local
DNS, UPS), deploy/RUNBOOK.md is the day-of checklist.

Checking what you downloaded.
SHA256SUMS-v0.19.0 lists every
file's digest and
SHA256SUMS-v0.19.0.sig is its
signature. To check the bytes,
sha256sum -c SHA256SUMS-v0.19.0.
To check the signature came from us, see docs/UPDATING.md. A box
updating itself does both automatically and refuses anything that
fails.