TgWitness 0.7.0 — Preview

TgWitness 0.7.0 is a preview of the self-hosted Telegram investigation workspace.

Includes account workspaces, scoped panel access, configurable proxy policies,
observed message/edit/deletion history, media capture, recorded interactions,
signed evidence exports, and witness freshness and continuity checks. Newer
interface strings may use explicit English fallbacks.

This preview rejects malformed OpenTimestamps structures. A parsed Bitcoin
attestation is reported as bitcoin-unverified; use ots verify to authenticate
the timestamp. Exported RFC 3161 timestamps need the recipient's --tsa-ca trust root.

Download the Windows amd64 portable ZIP, extract it and start TgWitness.cmd, or
use the wheel/source archive. Verify downloads against SHA256SUMS.txt.
No GHCR image is promised by this release.

Validation on Windows / Python 3.12: 735 Python tests passed, 2 skipped; all eight
browser checks passed; all 21 controller tests passed. Ruff, notice consistency,
source publication checks and installed portable export/verification passed.
The release manifest compares all 111 application files across source, wheel and
portable. GitHub checks are queued; this does not claim a successful hosted run
or fresh Linux/macOS qualification. No new live Telegram run was performed.

The external controller is a prototype with synthetic adapters. Browser/desktop
observers, hosted investigations and host audit agents remain roadmap items.
Signatures protect the recorded journal; they do not guarantee complete Telegram
visibility or authenticate content supplied by a compromised collector.

Roadmap: https://github.com/phishdestroy/TgWitness/blob/main/docs/ROADMAP.md

Changelog: https://github.com/phishdestroy/TgWitness/blob/main/docs/CHANGELOG.md