v0.6.0

Goldfinch v0.6.0

The WebContentsView migration release. Goldfinch now renders guest web pages and internal pages as native
main-process views (WebContentsView on a BaseWindow) instead of renderer-embedded <webview> tags — at
full behavior parity with before. This clears the architectural constraint behind a family of recurring
"DOM-correct ≠ render-correct" glitches, so what you see on screen is governed by real view geometry.

Highlights

• Native guest surface. Web tabs and internal goldfinch:// pages render via WebContentsView — no
  <webview> in the tab path. Everyday browsing, tabs, back/forward, address bar, favicons, popups-as-tabs,
  and persistent sessions all behave as before.
• Floating find bar that overlays the page instead of pushing it down; the long-standing find match-count
  cold-start glitch was root-caused and fixed.
• Menus over the live page. The kebab, container, page-context, site-info, and toolbar menus composite on a
  transparent overlay sheet above the live guest — the old freeze-frame mechanism is gone (no more stale-frame
  or menu-blip artifacts).
• Side panels (media / privacy) compress and slide over the live guest cleanly.
• Cross-view keyboard navigation. Ctrl+L focuses the address bar and Tab moves focus out of the page into
  the chrome, even while a page has focus; chrome Tab-order cycles without getting stuck.
• Privacy & trust preserved. Per-tab fingerprint farbling, per-jar Shields, container/burner/default
  partition isolation, and the internal-page trust model all carry over unchanged.
• Automation (MCP) surface — the full drive/observe/find/nav/devtools tool set works end-to-end over the
  loopback transport, with auth/origin/jar gating intact. Hardened this release: the internal goldfinch://settings
  session is now off-limits to the navigation ops even at the admin tier.

Installers

Windows (.exe, NSIS), macOS (.dmg, .zip), Linux (.AppImage, .deb).

⚠️ macOS: the app is not code-signed or notarized. macOS Gatekeeper will warn that the app "cannot be
opened because the developer cannot be verified." To open it: right-click (or Control-click) the app →
Open → Open the first time, or run xattr -dr com.apple.quarantine /Applications/Goldfinch.app. Signed +
notarized mac builds are planned for a future release once a Developer ID certificate is in place.

Known limitations / follow-ups

• macOS runtime verification is pending — v0.6.0's mac installer is build-verified in CI but not yet
  runtime-tested on a Mac; the cross-view keyboard flow and a few compositing details are verified on Linux and
  cross-fingers-pending on macOS.
• A handful of behavior checks (DevTools/CDP conflict, find match-count cold-start, focus-ring visibility) are
  environment-specific to the Linux dev rig and are treated as macOS-authoritative — carried to follow-up.

---

This release lands Mission 05 (WebContentsView Migration). Full technical history lives in the mission's flight
logs and debriefs.