v0.7.3
0.7.3 (2026-04-09)
🔒 Security
Artifact Verification
All release artifacts include Sigstore provenance attestations. Verify with the GitHub CLI:
# Download the source archive
gh release download v0.7.3 --repo microsoft/physical-ai-toolchain --pattern 'source-v0.7.3.tar.gz'
# Verify build provenance
gh attestation verify source-v0.7.3.tar.gz --repo microsoft/physical-ai-toolchain
# Verify SBOM attestation
gh attestation verify source-v0.7.3.tar.gz --repo microsoft/physical-ai-toolchain --predicate-type https://spdx.dev/Document