v3.5.1

Downloads

Platform	Architecture	File
	Apple Silicon (M1–M5)	onebrain-aarch64-apple-darwin.tar.gz
	Intel	onebrain-x86_64-apple-darwin.tar.gz
	ARM64 (glibc · Pi 3/4/5 64-bit OS · Pi Zero 2 W)	onebrain-aarch64-unknown-linux-gnu.tar.gz
	ARMv7 32-bit (Pi 2 v1.1+ · Pi 3/4/5 32-bit OS)	onebrain-armv7-unknown-linux-gnueabihf.tar.gz
	ARMv6 32-bit (Pi 1 · Pi Zero · Pi Zero W)	onebrain-arm-unknown-linux-gnueabihf.tar.gz
	x86_64 (glibc)	onebrain-x86_64-unknown-linux-gnu.tar.gz
	x86_64 (musl / Alpine / static)	onebrain-x86_64-unknown-linux-musl.tar.gz
	ARM64	onebrain-aarch64-pc-windows-msvc.zip
	x86_64	onebrain-x86_64-pc-windows-msvc.zip

Each binary ships with a matching .sha256 checksum. Filenames use canonical Rust target triples — cargo-binstall and other tooling auto-parse them.

---

What's Changed

• docs: v3.5 Gateway — ADRs 0036–0043 + reference docs by @kengio in #422
• fix(gateway): bounded auth.lock, no worker starvation, atomic code exchange, durable auth writes (#428, #429) by @kengio in #438
• test: sandbox HOME for doctor_integration spawns; deflake lifecycle_hook pending-embed test (#436, #437) by @kengio in #439
• fix(search): name the search-lock holder when the index is busy (#426) by @kengio in #440
• fix(gateway): revocation cancels pending approvals; shutdown lets the Telegram edit land (#427, #430) by @kengio in #441
• docs: v3.5.1 — ADRs 0044–0046 + gateway/search/install docs by @kengio in #442
• fix(gateway): brain_capture note H1 is the caller's title, not the filename slug (#431) by @kengio in #443
• fix(security): clear pre-existing CodeQL alerts — index instance id rename, top_k clamp (#445) by @kengio in #454
• fix(search): resolve_hits does not pre-size from ranked.len() (CodeQL #23, #445) by @kengio in #456
• chore(release): 3.5.1 — Hardening by @kengio in #444

Full Changelog: v3.5.0...v3.5.1