Repository navigation
Releases: pphboy/piwork-microvm
Release list
piwork-microvm v0.2.3
piwork-microvm v0.2.3
Bundles original Piwork 0.0.15 at commit 95aee2f32cbeed2e55dc5b7d496322facf01cc6c, unmodified.
Official release input: v0.0.15 (upstream Preview), actual build commit 95aee2f32cbeed2e55dc5b7d496322facf01cc6c, publication commit 0f2a2385891c301b10dd1e1fa844d9b10bdd760a. Four asset sizes/SHA256 and three production image digests are recorded in the manifest.
Artifacts
| File | Platform | Bytes | SHA256 |
|---|---|---|---|
piwork-microvm-v0.2.3-linux-amd64 |
cli linux/amd64 | 406463580 | e9f34388eaf29aa06ff7f0563b609707dca63a2f9086bdc2d6563fd910106fb4 |
piwork-microvm-v0.2.3-windows-amd64.exe |
cli windows/amd64 | 423286582 | 492819b7e65c4180707c961d43f7e95f4cbb5ca6e924f16832b85c9ca690024a |
piwork-microvm-gui-v0.2.3-linux-amd64 |
gui linux/amd64 | 410926412 | 2baa539bd2012f7fc12a1a33b1d5728dc778c6da70503d10d17eadcc376bbc7f |
piwork-microvm-gui-v0.2.3-windows-amd64.exe |
gui windows/amd64 | 428544014 | b494dff521b419d471bfb56f163b97d43eb85835f2f9c27a34d4e8d8014a8737 |
Verify downloads with these checksums.
Verification
Acceptance evidence covers the locked inputs, not these artifact bytes: the Guest ext4 rootfs is regenerated with fresh UUIDs on every build, so artifacts are not byte-reproducible. Verify downloads with the checksums in this manifest.
Input fingerprint: c9a176639a2d2e35989c830aa429aeb9865dd5c6fe331d711539555378fedcf7
| Scope | Platform | Status | Evidence |
|---|---|---|---|
| build | linux | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| build | windows | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| integration | linux | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| integration | windows | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| realModel | linux | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| realModel | windows | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| upstream | - | none | Upstream verification is informational and never upgrades a MicroVM scope. |
Corresponding source
This release distributes binaries and a Guest image that include GPL and LGPL components. The written offer below covers every component listed here.
| Component | License | Source |
|---|---|---|
| Linux 6.6.159, unmodified | GPL-2.0 | https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.159.tar.xz, sha256 7206727244da5d85f4a03758d29e1c0673f2f01877793f494c0f3638c46b8fa5 |
| QEMU 10.0.8, modified by 2 patches | GPL-2.0 | https://download.qemu.org/qemu-10.0.8.tar.xz, sha256 e038542a698b003605f4982d469d9f55ad17ea8172ebe2b92e97e3a675aa338f, plus the attached qemu-patches.tar.gz |
| qboot ROM | GPL-2.0 | roms/qboot in the QEMU source archive above, sha256 9b9dfc6c25740d6225625570d71cab6805cc9216e68c8932e343266daaeb8c4b |
| libfdt / dtc, linked into QEMU | GPL-2+ | dtc/ in the QEMU source archive above |
| BusyBox, in the Guest initramfs and rootfs | GPL-2.0 | the busybox-static source package at Debian snapshot 20261018T000000Z |
| 167 Debian packages in the Guest rootfs | GPL and LGPL mix | source packages at Debian snapshot 20261018T000000Z; the installed list is usr/share/piwork-guest-packages.txt inside rootfs.ext4 |
| MinGW-w64 runtime libraries in the Windows QEMU | GPL-3.0 with the GCC runtime exception, or LGPL | the source packages recorded in provenance/windows-toolchain.lock.json |
Production piwork-agentd, piwork-file-helper and piwork-snapshot-helper images, embedded in images.tar |
Node.js MIT plus npm/Debian component licenses | built from the Piwork source at commit 95aee2f32cbeed2e55dc5b7d496322facf01cc6c; readable texts in piwork-licenses.tar.gz and provenance/piwork-upstream/licenses/images/ |
| Node.js 24 runtime, npm and Yarn inside the Agent image | MIT and bundled package licenses | same image source above; texts in piwork-licenses.tar.gz |
| Debian packages inside the production Agent image, including GCC runtime libraries | GPL/LGPL and other Debian licenses | exact installed versions and copyright/source notices in piwork-licenses.tar.gz (images/agent/INDEX.json); Debian sources at https://deb.debian.org/debian/pool/ and https://snapshot.debian.org/; covered by the written offer below |
Shared libraries shipped beside QEMU (qemu/lib/*.so, *.dll) |
LGPL-2.1+, BSD or GPL-2+ | shipped with the artifact; source as listed above |
Written offer: the complete corresponding source for every GPL and LGPL component listed above is available on request for three years from this release date (GPL-2.0 section 3(b)).
Known limitations
- License texts for the Guest rootfs packages and BusyBox ship at
provenance/guest-licenses/inside the artifact and inguest-licenses.tar.gz, so they can be read without booting the VM; all 167 Guest packages have a text. Kernel and QEMU license texts ship alongside inprovenance/andqemu/licenses/. - Windows artifacts are unsigned, so SmartScreen may warn on first run. Windows requires WHPX and WebView2; Linux requires KVM and the documented GTK/WebKit runtime for the GUI.
- Piwork 0.0.15 is an upstream Preview. This scoped integration does not verify real-model calls, a full failure matrix or general downgrade compatibility. Upgrade a stopped backup copy and retain the untouched backup.
- Readable license texts for the imported binaries, Go modules and production images ship as
piwork-licenses.tar.gzand underprovenance/piwork-upstream/licenses/. The index records every extraction gap. The imported binaries/images index also records 0 Go modules and 0 Debian package texts without an extractable file; seepiwork-licenses.tar.gz. - Acceptance evidence is recorded against the locked inputs, not against these artifact bytes; see Verification above.
Additional acceptance limitations
- When the browser UI port is set to 80, requests using the normal HTTP origin return
INVALID_HOST. Use a non-default-numbered UI port such as 17891. - During Linux/KVM acceptance, a tool-bearing Session history read returned HTTP 503; ordinary text Session history and persisted Run results were readable. This behavior needs further investigation.
piwork-microvm v0.2.2
piwork-microvm v0.2.2
Bundles original Piwork 0.0.14 at commit 3355a106766116a9d64b8492209a93218f3b4b21, unmodified.
Official release input: v0.0.14 (upstream Preview), actual build commit 3355a106766116a9d64b8492209a93218f3b4b21, publication commit 7f32eae2219be4fd43f786eccefbab20fa896dc5. Four asset sizes/SHA256 and three production image digests are recorded in the manifest.
Artifacts
| File | Platform | Bytes | SHA256 |
|---|---|---|---|
piwork-microvm-v0.2.2-linux-amd64 |
cli linux/amd64 | 405905461 | f4d72b964245a033d5977d6c4136a66dc7dc4c6a9c092682ece51d4c46e7a360 |
piwork-microvm-v0.2.2-windows-amd64.exe |
cli windows/amd64 | 422725876 | a6fc044e9d84402eeb0733d896acf733b102e594df54f91834f0618107a456fc |
piwork-microvm-gui-v0.2.2-linux-amd64 |
gui linux/amd64 | 410246972 | aa0ed3b959bace3d3e9f7a6fed53f79e6fc296463795281435191293cfa44a0c |
piwork-microvm-gui-v0.2.2-windows-amd64.exe |
gui windows/amd64 | 427952721 | 9bfdc9d294ebf020e38813ec6307e1e97e1253a7dca2e3c583399910c519f1d2 |
Verify downloads with these checksums.
Verification
Acceptance evidence covers the locked inputs, not these artifact bytes: the Guest ext4 rootfs is regenerated with fresh UUIDs on every build, so artifacts are not byte-reproducible. Verify downloads with the checksums in this manifest.
Input fingerprint: 31326e44b53624320170b581678ae88394825b83f172ed28a8702d5f29565eee
| Scope | Platform | Status | Evidence |
|---|---|---|---|
| build | linux | verified | dist/release-evidence/build-linux.json |
| build | windows | verified | dist/release-evidence/build-windows.json |
| integration | linux | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| integration | windows | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| realModel | linux | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| realModel | windows | not-verified | recorded evidence lacks a matching input fingerprint, is incomplete, or covers other inputs |
| upstream | - | none | Upstream verification is informational and never upgrades a MicroVM scope. |
Corresponding source
This release distributes binaries and a Guest image that include GPL and LGPL components. The written offer below covers every component listed here.
| Component | License | Source |
|---|---|---|
| Linux 6.6.159, unmodified | GPL-2.0 | https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.159.tar.xz, sha256 7206727244da5d85f4a03758d29e1c0673f2f01877793f494c0f3638c46b8fa5 |
| QEMU 10.0.8, modified by 2 patches | GPL-2.0 | https://download.qemu.org/qemu-10.0.8.tar.xz, sha256 e038542a698b003605f4982d469d9f55ad17ea8172ebe2b92e97e3a675aa338f, plus the attached qemu-patches.tar.gz |
| qboot ROM | GPL-2.0 | roms/qboot in the QEMU source archive above, sha256 9b9dfc6c25740d6225625570d71cab6805cc9216e68c8932e343266daaeb8c4b |
| libfdt / dtc, linked into QEMU | GPL-2+ | dtc/ in the QEMU source archive above |
| BusyBox, in the Guest initramfs and rootfs | GPL-2.0 | the busybox-static source package at Debian snapshot 20261018T000000Z |
| 167 Debian packages in the Guest rootfs | GPL and LGPL mix | source packages at Debian snapshot 20261018T000000Z; the installed list is usr/share/piwork-guest-packages.txt inside rootfs.ext4 |
| MinGW-w64 runtime libraries in the Windows QEMU | GPL-3.0 with the GCC runtime exception, or LGPL | the source packages recorded in provenance/windows-toolchain.lock.json |
Production piwork-agentd, piwork-file-helper and piwork-snapshot-helper images, embedded in images.tar |
Node.js MIT plus npm/Debian component licenses | built from the Piwork source at commit 3355a106766116a9d64b8492209a93218f3b4b21; readable texts in piwork-licenses.tar.gz and provenance/piwork-upstream/licenses/images/ |
| Node.js 24 runtime, npm and Yarn inside the Agent image | MIT and bundled package licenses | same image source above; texts in piwork-licenses.tar.gz |
| Debian packages inside the production Agent image, including GCC runtime libraries | GPL/LGPL and other Debian licenses | exact installed versions and copyright/source notices in piwork-licenses.tar.gz (images/agent/INDEX.json); Debian sources at https://deb.debian.org/debian/pool/ and https://snapshot.debian.org/; covered by the written offer below |
Shared libraries shipped beside QEMU (qemu/lib/*.so, *.dll) |
LGPL-2.1+, BSD or GPL-2+ | shipped with the artifact; source as listed above |
Written offer: the complete corresponding source for every GPL and LGPL component listed above is available on request for three years from this release date (GPL-2.0 section 3(b)).
Known limitations
- License texts for the Guest rootfs packages and BusyBox ship at
provenance/guest-licenses/inside the artifact and inguest-licenses.tar.gz, so they can be read without booting the VM; all 167 Guest packages have a text. Kernel and QEMU license texts ship alongside inprovenance/andqemu/licenses/. - Windows artifacts are unsigned, so SmartScreen may warn on first run. Windows requires WHPX and WebView2; Linux requires KVM and the documented GTK/WebKit runtime for the GUI.
- Piwork 0.0.14 is an upstream Preview. This scoped integration does not verify real-model calls, a full failure matrix or general downgrade compatibility. Upgrade a stopped backup copy and retain the untouched backup.
- Readable license texts for the imported binaries, Go modules and production images ship as
piwork-licenses.tar.gzand underprovenance/piwork-upstream/licenses/. The index records every extraction gap. The imported binaries/images index also records 0 Go modules and 0 Debian package texts without an extractable file; seepiwork-licenses.tar.gz. - Acceptance evidence is recorded against the locked inputs, not against these artifact bytes; see Verification above.
piwork-microvm v0.2.0
piwork-microvm v0.2.0
Bundles original Piwork 0.0.10 at commit 29e3471e02e53094c1e1f427a88de6a2a24fb963, unmodified.
Changes
- Add native Windows/Linux desktop launchers with English and Simplified Chinese, persistent installation selection, real startup status, safe shutdown and local log export.
- Bundle the frozen upstream Core input
29e3471e02e53094c1e1f427a88de6a2a24fb963(upstream-declared version remains 0.0.10) and propagate custom UI/Core HTTP ports. Port 7172 remains reserved for internal Agent RPC. - Verify Desktop administrator fault/gap log export, copied-installation recovery and clean stop on Linux/KVM and native Windows/WebView2/WHPX.
Artifacts
Choose GUI for the desktop launcher, or CLI for terminal use. All binaries include QEMU and the locked Guest payload; no QEMU or Docker installation is needed on the host.
| File | Entry | Platform | Bytes | SHA256 |
|---|---|---|---|---|
piwork-microvm-v0.2.0-linux-amd64 |
CLI | linux/amd64 | 392789727 | 5d6938b4c60d53bda51c25a98b44e690c1fd41f8f1bec8dd02b34094f45a288c |
piwork-microvm-v0.2.0-windows-amd64.exe |
CLI | windows/amd64 | 409597985 | 81f17781d09b5495f83f52390bd0858043d84ba727ace642139dbfe9b29c5be5 |
piwork-microvm-gui-v0.2.0-linux-amd64 |
GUI | linux/amd64 | 397127309 | ce9ba8bbd43624b5170bfbeb1d6a9d166206f8bd2127bbff0f4c9c776835d20e |
piwork-microvm-gui-v0.2.0-windows-amd64.exe |
GUI | windows/amd64 | 414813324 | c574f4b7955a01fa9ad11419b05e5469594b24dbdeeb04fb434bd1e4310c0027 |
Verify downloads with the matching .sha256 files or SHA256SUMS.
Verification
The status table below refers to real-provider model acceptance, which was not performed for these locked inputs. Focused integration acceptance passed on both hosts: record. Custom HTTP ports were checked only on Linux; the full historical GUI/network/deployment matrices were not rerun.
Release checks passed: Go/Python tests, launcher/controller race tests, native desktop-tag tests on both platforms, strict OpenSpec validation, CLI version checks, final Linux/Windows GUI About checks, and all four bundle/input identity checks.
Acceptance evidence covers the locked inputs, not these artifact bytes: the Guest ext4 rootfs is regenerated with fresh UUIDs on every build, so artifacts are not byte-reproducible. Verify downloads with the checksums in this manifest.
| Platform | Status | Evidence |
|---|---|---|
| linux | not-verified | no real-provider acceptance evidence recorded for the locked inputs |
| windows | not-verified | no real-provider acceptance evidence recorded for the locked inputs |
Corresponding source
This release distributes binaries and a Guest image that include GPL and LGPL components. The written offer below covers every component listed here.
| Component | License | Source |
|---|---|---|
| Linux 6.6.159, unmodified | GPL-2.0 | https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.159.tar.xz, sha256 7206727244da5d85f4a03758d29e1c0673f2f01877793f494c0f3638c46b8fa5 |
| QEMU 10.0.8, modified by 2 patches | GPL-2.0 | https://download.qemu.org/qemu-10.0.8.tar.xz, sha256 e038542a698b003605f4982d469d9f55ad17ea8172ebe2b92e97e3a675aa338f, plus the attached qemu-patches.tar.gz |
| qboot ROM | GPL-2.0 | roms/qboot in the QEMU source archive above, sha256 9b9dfc6c25740d6225625570d71cab6805cc9216e68c8932e343266daaeb8c4b |
| libfdt / dtc, linked into QEMU | GPL-2+ | dtc/ in the QEMU source archive above |
| BusyBox, in the Guest initramfs and rootfs | GPL-2.0 | the busybox-static source package at Debian snapshot 20261018T000000Z |
| 167 Debian packages in the Guest rootfs | GPL and LGPL mix | source packages at Debian snapshot 20261018T000000Z; the installed list is usr/share/piwork-guest-packages.txt inside rootfs.ext4 |
| MinGW-w64 runtime libraries in the Windows QEMU | GPL-3.0 with the GCC runtime exception, or LGPL | the source packages recorded in provenance/windows-toolchain.lock.json |
Shared libraries shipped beside QEMU (qemu/lib/*.so, *.dll) |
LGPL-2.1+, BSD or GPL-2+ | shipped with the artifact; source as listed above |
Written offer: the complete corresponding source for every GPL and LGPL component listed above is available on request for three years from this release date (GPL-2.0 section 3(b)).
Known limitations
- Linux x86-64 requires working KVM. The Linux GUI also requires GTK 3 and WebKitGTK 4.1 system runtimes; Linux GUI validation used WSLg with GTK 3.24.49 and WebKitGTK 4.1 2.50.4.
- Windows x86-64 requires firmware virtualization and enabled WHPX. The GUI requires Microsoft Edge WebView2 Runtime. Native validation used Windows 11 Home build 26200 and WebView2 137.0.3296.93; other Windows versions are not verified.
- No real AI provider call was verified for the current locked input. API keys and model setup remain the user's responsibility in the existing Piwork workbench.
- Guest state lives in
state.qcow2; host directory sharing is not provided. Keep backups before upgrading an existing installation. - GUI dependency license texts and their missing-text index are included under
provenance/gui-licenses/;THIRD-PARTY-LICENSES.tar.gzprovides all shipped provenance/QEMU license texts for reading without booting or extracting the executable. - License texts for the Guest rootfs packages and BusyBox ship at
provenance/guest-licenses/inside the artifact and inguest-licenses.tar.gz, so they can be read without booting the VM; all 167 Guest packages have a text. Kernel and QEMU license texts ship alongside inprovenance/andqemu/licenses/. - Windows artifacts are unsigned, so SmartScreen may warn on first run.
- Acceptance evidence is recorded against the locked inputs, not against these artifact bytes; see Verification above.
piwork-microvm v0.1.1
piwork-microvm v0.1.1
Bundles original Piwork 0.0.9 at commit a6c36da16ebcc0e96f0e34ef820d857f2bea4877, unmodified.
Artifacts
| File | Platform | Bytes | SHA256 |
|---|---|---|---|
piwork-microvm-v0.1.1-linux-amd64 |
linux/amd64 | 392490610 | 67e523c6c590ea93a5a07680fa530e009526b7c4f340ff3f9d8cc812b594f26b |
piwork-microvm-v0.1.1-windows-amd64.exe |
windows/amd64 | 409301106 | f79ca827b73041033ddb5c30f4e0e4fce17aeda998c04d7209f0f01ed35bd077 |
Verify downloads with these checksums.
Verification
Acceptance evidence covers the locked inputs, not these artifact bytes: the Guest ext4 rootfs is regenerated with fresh UUIDs on every build, so artifacts are not byte-reproducible. Verify downloads with the checksums in this manifest.
| Platform | Status | Evidence |
|---|---|---|
| linux | verified | openspec/changes/archive/2026-10-21-support-windows-and-disk-only-storage/evidence/completion/linux |
| windows | verified | openspec/changes/archive/2026-10-21-support-windows-and-disk-only-storage/evidence/completion/windows |
Corresponding source
This release distributes binaries and a Guest image that include GPL and LGPL components. The written offer below covers every component listed here.
| Component | License | Source |
|---|---|---|
| Linux 6.6.159, unmodified | GPL-2.0 | https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.159.tar.xz, sha256 7206727244da5d85f4a03758d29e1c0673f2f01877793f494c0f3638c46b8fa5 |
| QEMU 10.0.8, modified by 2 patches | GPL-2.0 | https://download.qemu.org/qemu-10.0.8.tar.xz, sha256 e038542a698b003605f4982d469d9f55ad17ea8172ebe2b92e97e3a675aa338f, plus the attached qemu-patches.tar.gz |
| qboot ROM | GPL-2.0 | roms/qboot in the QEMU source archive above, sha256 9b9dfc6c25740d6225625570d71cab6805cc9216e68c8932e343266daaeb8c4b |
| libfdt / dtc, linked into QEMU | GPL-2+ | dtc/ in the QEMU source archive above |
| BusyBox, in the Guest initramfs and rootfs | GPL-2.0 | the busybox-static source package at Debian snapshot 20261018T000000Z |
| 167 Debian packages in the Guest rootfs | GPL and LGPL mix | source packages at Debian snapshot 20261018T000000Z; the installed list is usr/share/piwork-guest-packages.txt inside rootfs.ext4 |
| MinGW-w64 runtime libraries in the Windows QEMU | GPL-3.0 with the GCC runtime exception, or LGPL | the source packages recorded in provenance/windows-toolchain.lock.json |
Shared libraries shipped beside QEMU (qemu/lib/*.so, *.dll) |
LGPL-2.1+, BSD or GPL-2+ | shipped with the artifact; source as listed above |
Written offer: the complete corresponding source for every GPL and LGPL component listed above is available on request for three years from this release date (GPL-2.0 section 3(b)).
Known limitations
- License texts for the Guest rootfs packages and BusyBox ship at
provenance/guest-licenses/inside the artifact and inguest-licenses.tar.gz, so they can be read without booting the VM; all 167 Guest packages have a text. Kernel and QEMU license texts ship alongside inprovenance/andqemu/licenses/. - Windows artifacts are unsigned, so SmartScreen may warn on first run.
- Acceptance evidence is recorded against the locked inputs, not against these artifact bytes; see Verification above.
piwork-microvm v0.1.0
piwork-microvm v0.1.0
Bundles original Piwork 0.0.9 at commit a6c36da16ebcc0e96f0e34ef820d857f2bea4877, unmodified.
Artifacts
| File | Platform | Bytes | SHA256 |
|---|---|---|---|
piwork-microvm-v0.1.0-linux-amd64 |
linux/amd64 | 391890720 | e78a2ca0925f8271bdf1d1fe4b69ec177060b0b7316861e09059e5a733b1898a |
piwork-microvm-v0.1.0-windows-amd64.exe |
windows/amd64 | 408697560 | 515455547b62ce8ab580a2fad13fe5d9ccea393131434d19f6ec15a6df55ea92 |
Verify downloads with these checksums.
Verification
Acceptance evidence covers the locked inputs, not these artifact bytes: the Guest ext4 rootfs is regenerated with fresh UUIDs on every build, so artifacts are not byte-reproducible. Verify downloads with the checksums in this manifest.
| Platform | Status | Evidence |
|---|---|---|
| linux | verified | openspec/changes/support-windows-and-disk-only-storage/evidence/completion/linux |
| windows | verified | openspec/changes/support-windows-and-disk-only-storage/evidence/completion/windows |
Corresponding source
This release distributes binaries and a Guest image that include GPL and LGPL components. The written offer below covers every component listed here.
| Component | License | Source |
|---|---|---|
| Linux 6.6.159, unmodified | GPL-2.0 | https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.159.tar.xz, sha256 7206727244da5d85f4a03758d29e1c0673f2f01877793f494c0f3638c46b8fa5 |
| QEMU 10.0.8, modified by 2 patches | GPL-2.0 | https://download.qemu.org/qemu-10.0.8.tar.xz, sha256 e038542a698b003605f4982d469d9f55ad17ea8172ebe2b92e97e3a675aa338f, plus the attached qemu-patches.tar.gz |
| qboot ROM | GPL-2.0 | roms/qboot in the QEMU source archive above, sha256 9b9dfc6c25740d6225625570d71cab6805cc9216e68c8932e343266daaeb8c4b |
| libfdt / dtc, linked into QEMU | GPL-2+ | dtc/ in the QEMU source archive above |
| BusyBox, in the Guest initramfs and rootfs | GPL-2.0 | the busybox-static source package at Debian snapshot 20261018T000000Z |
| 167 Debian packages in the Guest rootfs | GPL and LGPL mix | source packages at Debian snapshot 20261018T000000Z; the installed list is usr/share/piwork-guest-packages.txt inside rootfs.ext4 |
| MinGW-w64 runtime libraries in the Windows QEMU | GPL-3.0 with the GCC runtime exception, or LGPL | the source packages recorded in provenance/windows-toolchain.lock.json |
Shared libraries shipped beside QEMU (qemu/lib/*.so, *.dll) |
LGPL-2.1+, BSD or GPL-2+ | shipped with the artifact; source as listed above |
Written offer: the complete corresponding source for every GPL and LGPL component listed above is available on request for three years from this release date (GPL-2.0 section 3(b)).
Known limitations
- License texts for the Guest rootfs packages and BusyBox exist only inside
rootfs.ext4(167 Debian copyright files), so they cannot be read without booting the VM. Kernel and QEMU license texts ship alongside inprovenance/andqemu/licenses/. - Windows artifacts are unsigned, so SmartScreen may warn on first run.
- Acceptance evidence is recorded against the locked inputs, not against these artifact bytes; see Verification above.