Casefold Observatory 0.5.0 is a source release of the dependency-free Unicode identifier-collision laboratory.
Highlights
- bounded, deterministic NFC/NFD/NFKC/NFKD and case-policy analysis with minimal collision witnesses
- canonical ASCII JSON receipts with exact-source and semantic digests plus byte-exact replay verification
- hardened POSIX CLI with descriptor-relative reads and durable mode-0600 no-clobber receipt/report publication
- verified static offline HTML report with escaped logical code-point metadata and a restrictive hash-bound CSP
- reproducible visual evidence: real installed-CLI PNG/GIF/SVG outputs and real offline Chromium desktop, mobile, full-page, and scroll captures
- CI coverage across Python 3.11–3.14, distribution probes, evidence replay, and extended CodeQL
Verification
All committed evidence is generated from reviewed synthetic fixtures and bound to repository sources by canonical manifests. The browser lane renders the installed wheel in digest-pinned Chromium with the container network disabled and verifies a single document request with zero subresources.
Claim boundary
This release is not a confusable-character detector, authentication system, compliance certification, or claim that one Unicode policy is universally correct. Evidence fixtures are synthetic; receipts provide integrity and replay context, not authenticity, freshness, anonymity, or a production-security guarantee.
No prebuilt binaries are attached. GitHub provides the source archive for the reviewed commit.