Forensic Evidence 0.3.13

Release 0.3.13

BitLocker volumes with a usable clear-key protector now open automatically,
including supported Suspended / Waiting for Activation acquisitions. Other locked
volumes prompt for a recovery key when opened or accessed through an artifact
source link, address, or bookmark. Internet scans offer Unlock, Skip this volume,
or Cancel; skipped volumes are recorded as incomplete coverage. Keys remain masked
and session-only. Damaged decrypted NTFS metadata preserves access to raw and
decrypted volume bytes with an explicit warning.

Internet artifacts add supported Chromium IndexedDB, Local Storage and LevelDB
records, including compatible ChatGPT, Discord and Codex data, plus supported
Chromium block-cache records. Scan options → Parse IndexedDB is disabled by
default to reduce scan time and case size. The choice is saved with the case and
recorded in Coverage and exports; existing results remain available until a new
scan replaces them. Firefox and Safari IndexedDB and private mobile databases
remain outside the supported parsers.

Artifact tables page through all saved records with sorting, filtering and export
of provenance. Application updates can check the public release and verify download
size and SHA-256 before offering installation or showing a downloaded package.

Deleted-file recovery and carving panels are hidden by default. View → Recovery
controls shows them; starting a scan from Tools reveals the controls automatically.
Active progress and Cancel remain visible while a scan is running.

Packages retain signed Windows x64 Desktop and MCP archives and a desktop MSI,
Linux x64 Desktop and MCP archives, and macOS ARM64 Desktop and MCP app bundles.
Windows packages are Authenticode signed by BBSOFT LLC. macOS bundles are ad-hoc
signed and not notarized. Linux requires Ubuntu 22.04 or a compatible environment
with glibc 2.35 or later; macOS requires macOS 14 or later. Dokany 2.x remains a
separate prerequisite for Windows read-only mounting.

SHA-256 sidecars and an aggregate checksum file accompany the downloads.
Dependency sources and rebuild materials
are published separately. Evidence, application source, signing keys, AI model
weights and private protection maps are excluded from the public binary packages.

Source revision: 923569590ea35808b047f68f06bf8270b596b34a.

Native release validation passed: Windows x64 1,836 tests passed / 30 skipped; Linux x64 and macOS ARM64 each 1,766 passed / 100 skipped; no failures. Protected application verification and relocated package checks passed on all three platforms. Final payload hashes, corresponding reader sources, Windows signatures and timestamps, and installer continuity were verified before publication.