OnionGate v0.2.3 (superseded)

Caution

Superseded — do not install this build.
Plain 0.2.x releases are no longer recommended. Install only the current
alpha (x.y.z-alpha.N) from the
Releases page.
GitHub Latest is not the alpha channel; in-app Check for updates
follows Latest only and stays off until a stable 1.0.0 exists.

Warning

This build is not signed with an OS vendor certificate.
Verify it against SHA256SUMS and the build provenance
attestation before you run it.

• macOS: unsigned and un-notarized. Gatekeeper will refuse the
  first launch. See the install guide for the required steps.
• Windows: unsigned. SmartScreen will warn on first run.

Fixed

• npm CycloneDX SBOM generation reads the lockfile and ignores npm ls peer
  noise, so the Actions metadata job can publish checksums and updater
  metadata.

Changed

• GitHub Actions publishes the four-platform installers (macOS Apple Silicon,
  macOS Intel, Linux x86_64, Windows x86_64). 0.2.2 built them but did not
  publish after the SBOM step failed.

Known limitations

• This remains a 0.x alpha. Apple notarization and Authenticode are still
  optional. Do not treat it as a sole control for high-risk work.