Evidence Lane v4.0.7

Evidence Lane v4.0.7

This release is bound to source commit d006c95a07c0812f30c5ec69efda74821d711f84 and immutable component-set digest 977fb5ec2702ff9dcc0c804cc4d17881f2c90400dbbbf9597f73980d370389cd.

Evidence Lane v4.0.7 provides the canonical Codex plugin, persistent Windows engine, read-only Windows Studio observer, source and authority lane workflows, and the pinned shared local toolchain used by supported operations. The Studio application is a local Windows component installed under C:\Apps\EvidenceLaneStudio; it is not a Vercel application. The public product website is deployed separately from apps/evidence-lane-app at evidencelane.org.

The plugin must be installed through the repository marketplace at this exact release tag. On first detection, the plugin verifies the tag, sparse plugin source manifest, archive sizes and SHA-256 hashes before materializing or upgrading the shared installation. Ghostscript remains separately license-gated.

Qualification for this exact commit includes the governed GitHub regression matrix, CodeQL, Plugin Creator and Skill Creator validation, package/release checks, a zero-finding final Codex Security scan, and live verification of all 51 public website routes.

Evidence Lane source is MIT licensed. Third-party components, runtimes, models, trademarks and separately gated dependencies retain their own licenses and notices.

Evidence Lane v4.0.6

Evidence Lane v4.0.6 pre-release candidate for installed-native qualification.

Exact source head: 9e26d63400f90d16e8fb6e50f186ffa936026fec on codex/v4.0.

This candidate includes the persistent Windows Studio/engine package, the complete retained shared toolchain assets, 24 canonical business skills, 295 typed actions, and 103 retained tool assignments. Supported host profiles are persistent local Windows Codex Desktop Stable and Beta.

Qualification completed before publication:

• exact-head governed Python CI: all 12 selected profiles passed, including the real Windows shortcut operation;
• exact-head CodeQL: passed;
• local package profile: 142 passed;
• Skill Creator: 24/24 packages valid;
• Plugin Creator: passed;
• Review Agent skill: no actionable findings.

This publication does not claim installed-native execution. Installation, first detection, shortcut/Hook/Studio readback, restart hydration, fresh project registration, and installed workflow qualification follow separately.

Evidence Lane v4.0.5

Corrected Windows Codex Desktop Stable/Beta release candidate. Includes 295 actions, 24 explicit cube-icon skills, 48 trusted-but-disabled-by-default Hook stage rows, flat transactional Studio upgrade, and the 103-tool shared bundle contract. Release assets are uploaded from the exact SHA-256-bound bundle before this draft is published as a prerelease.

Evidence Lane v4.0.4 corrected preinstall candidate

Evidence Lane v4.0.4 corrected preinstall candidate is bound to commit ac37c571c9c909fb75e7d9073c42df100256c39f on codex/v4.0.

This candidate completes the flat project-state architecture and the full native plugin surfaces before local installation. A newly registered Code project is created at the explicitly selected project-state root with local_code first, followed by the nine retained authority lanes as direct root children. Each initialized lane owns its SQLite database, direct schema-history.v4.json, MMD, DOT, pointer, manifest, tools and lazily created addressed objects. The corrected installed plugin, not a maintainer script, owns creation of the user-selected F:\Evidence_Lane_PV root after restart.

The internal and public SDK, MCP, schemas, manifests, ENV/UOP policy, Studio linkage, tests and toolchain execution matrix are regenerated from the 297-action registry. The Hook surface contains 12 supported native events with four visible handlers per event (VALIDATE, SEAL, TRANSPORT, EMIT), redacted occurrence identity, one event-specific execution, authenticated delivery and replay-safe receipts. All 24 public skills use Codex's native skill icon by omitting per-skill icon overrides; the Evidence Lane product logo remains at plugin level. The visible product name is Evidence Lane.

The correction also makes already-compatible migrations read-only, keeps valid schema upgrades transactional, preserves prior destination bytes across export races, defers same-writer heartbeats during active publication, keeps rejected continuation owner bytes unchanged, preserves older project-directory record shapes, and aligns all qualification assertions with the direct lane layout and 297-action registry.

Qualification:

• Exact Git commit tree: 38354038062c1be5412e30c2fee5a06f5c760dca
• Plugin source: 3,298 members, aggregate digest 7ff1b1ed700c23b4fa740e80ad7ad15336f0b30294485de52655dd8d970e318f
• Source manifest SHA-256: 9c9ba078e818d070381011ff97afcb02966ca9db1c820a58c8441150215d6264
• Release binding receipt: b87c6f6086a307a6456017bb5ecacd5cd529284343b89a2bc5256a3b3c63cf33
• Runtime asset set: 12 immutable archives, 7,083,785,294 bytes, digest 977fb5ec2702ff9dcc0c804cc4d17881f2c90400dbbbf9597f73980d370389cd
• Complete local regression: all 2,863 unique tests executed; 2,826 passed in the four broad shards and every one of the 37 conditional cases then passed against the exact Code, Office, FFmpeg/media and CUDA qualification roots
• Repository-wide Ruff: pass
• Mypy: pass across 288 source files
• Python compileall and Node syntax checks: pass
• Skill Creator: all 24 skills pass independently
• Plugin Creator: pass
• Native Review Agent skill: no remaining findings
• Exact-head CodeQL: pass

This prerelease is for corrected branch-candidate marketplace installation and installed-native qualification. It does not claim that v4.0.4 is already installed, that the post-restart MCP/Hook/Studio paths have passed native qualification, that F:\Evidence_Lane_PV has been created, or that the branch has been approved or merged to main.

Evidence Lane v4.0.3 Git-materialized preinstall candidate

Evidence Lane v4.0.3 preinstall correction candidate bound to commit 45a41e9b7fd7a5231475b1fae4618c966617741f.

This candidate supersedes the rejected v4.0.2 preinstall candidate. The v4.0.2 Codex Git marketplace audit found 53 text files whose Windows working-tree CRLF bytes differed from the LF bytes materialized from the committed Git objects. It was deliberately not installed.

v4.0.3 normalizes the release source to the repository’s declared LF materialization and makes source-manifest generation fail when Git would transform a tracked member or when a changed source member is not staged. Every manifest row was compared directly with the candidate Git index before commit.

The underlying v4 correction restores the complete current SDK and Hook packages, migrates public workflow names across executable consumers, supplies cube icon metadata for all 24 skills, isolates MCP startup from unrelated Codex tasks, replaces the old nested tunnel runtime with stable Evidence Lane application roots, and binds the plugin to the Windows Studio, persistent engine, shared toolchains, and one Desktop and Start-menu launcher contract.

It also normalizes real JSON Schemas to Draft 2020-12 *.schema.json documents, restores the complete ENV/UOP policy rows, fixes Python 3.12 and 3.14 syntax, reconciles the architecture to 297 registered operations, regenerates current license records for all 103 retained tools, and publishes a generated current toolchain execution matrix in the executable plugin and GitHub documentation.

The release carries the same 12 independently addressable runtime component archives. CPU, NVIDIA CUDA, AMD ROCm, DirectML, and optional Ghostscript components remain separately selected from measured host and license conditions.

• Runtime asset-set digest: 977fb5ec2702ff9dcc0c804cc4d17881f2c90400dbbbf9597f73980d370389cd
• Runtime asset bytes: 7,083,785,294
• Exact plugin source: 3,309 files, dd84f1924390443d207b53efcab4c91a1d06485960f4299af10bb0bb09b0d686
• Source manifest: fda16cfa4ad6e7296cee6456eac66b90ca9caf46d679c84dfe6703fcdee30693
• Release binding receipt: 1fa4362120dc510f90cf100f3f3b58173632e112221a9778412e75f5e62c6120
• Staged Git-blob comparison: 3,309 matched, zero mismatches
• Public skills and operation surface: 24 skills, 297 operations
• Hook surface: 12 supported event packages with separate handlers and ordered stages
• Retained tool and license surface: 103 tools, 103 current license records
• Full repository regression: 890 passed before the bounded release repair
• Repaired package profile: 87 passed
• First-detection, base-entrypoint and local-transport profile: 34 passed
• Native Review Agent: one staged-source finding resolved, no remaining findings
• Codex Security diff scan: zero findings across the underlying preinstall correction candidate

This prerelease is for D088 branch-candidate installation and installed-native qualification. It does not claim installed Codex execution, post-restart activation, or the final public main-derived release.

Evidence Lane v4.0.2 preinstall correction candidate

Evidence Lane v4.0.2 preinstall correction candidate bound to commit c569342abed14551d8163e6419763146355b58a7.

This candidate restores the complete current SDK and Hook packages, migrates public workflow names across executable consumers, supplies cube icon metadata for all 24 skills, isolates MCP startup from unrelated Codex tasks, replaces the old nested tunnel runtime with stable Evidence Lane application roots, and binds the plugin to the Windows Studio, persistent engine, shared toolchains, and one Desktop and Start-menu launcher contract.

It also normalizes real JSON Schemas to Draft 2020-12 *.schema.json documents, restores the complete ENV/UOP policy rows, fixes Python 3.12 and 3.14 syntax, reconciles the architecture to 297 registered operations, regenerates current license records for all 103 retained tools, and publishes a generated current toolchain execution matrix in the executable plugin and GitHub documentation.

The release carries the same 12 independently addressable runtime component archives qualified for the earlier preinstall candidates. CPU, NVIDIA CUDA, AMD ROCm, DirectML, and optional Ghostscript components remain separately selected from measured host and license conditions.

• Runtime asset-set digest: 977fb5ec2702ff9dcc0c804cc4d17881f2c90400dbbbf9597f73980d370389cd
• Runtime asset bytes: 7,083,785,294
• Exact plugin source: 3,309 files, f8fb97249ccc4624bcaa275d908e71a08a7db0293ad64697b924c929878d4d1a
• Source manifest: c364ec8985b9ce3f347ba9cbaeadea0ff7a98704e4b9f52e5f61618624acf10f
• Release binding receipt: 05104ab931e4d7367c6ec148e06c721450d6bb263784685f1475f262ea47aa3d
• Public skills and operation surface: 24 skills, 297 operations
• Hook surface: 12 supported event packages with separate handlers and ordered stages
• Retained tool and license surface: 103 tools, 103 current license records
• Full repository regression: 890 passed before the bounded repair; repaired package profile 87 passed
• Native Review Agent: no remaining findings before the bounded documentation and generator-order repair
• Codex Security diff scan: zero findings across the preinstall correction candidate

This prerelease supersedes the v4.0.1 candidate for D088 installation and installed-native qualification. It does not claim installed Codex execution, post-restart activation, or the final public main-derived release.

Evidence Lane v4.0.1 preinstall repair candidate

Evidence Lane v4.0.1 preinstall repair candidate bound to commit 266a988b5bb6d47dc1744d407cb8ef21968e44a7.

This candidate corrects Windows MCP release re-entry so the validated installed child inherits anonymous stdin/stdout/stderr, the parent waits for it, and the child return code is propagated. POSIX release re-entry continues to use execve. The source, schemas, generated manifests, and immutable release URLs are rebound to plugin version 4.0.1.

The release carries the same 12 independently addressable runtime component archives qualified for v4.0.0. CPU, NVIDIA CUDA, AMD ROCm, DirectML, and optional Ghostscript components remain separately selected from measured host and license conditions.

• Runtime asset-set digest: 977fb5ec2702ff9dcc0c804cc4d17881f2c90400dbbbf9597f73980d370389cd
• Runtime asset bytes: 7,083,785,294
• Exact plugin source: 2,418 files, c3bbf582ceaf3f3c2440b41603f528b8fbbedc030ccbfa14d820c4925a8bfdca
• Source manifest: 93730246c07c38dc38059bb8053eab081dd87fab68772d10ae856f975245425d
• Release binding: f77057090f303cba7c1863114d2d302ca7ab3ec5ad12a18802d94cea8fdba9e1
• Windows stdio qualification: 297 MCP tools, waited child, anonymous stdio preserved
• Focused Codex Security review: zero reportable findings

This prerelease supersedes the v4.0.0 preinstall candidate for D088 installation and installed-native qualification. It does not claim that installed Codex execution, post-restart activation, or the final public release has completed.

Evidence Lane v4.0.0 preinstall candidate

Evidence Lane v4.0.0 preinstall candidate bound to commit 11058ca88522a067704d8e3d368fb0b915b4fca3.

This immutable candidate carries 12 independently addressable component archives for first-detection provisioning on Windows. CPU, NVIDIA CUDA, AMD ROCm, DirectML, and optional Ghostscript components remain separately selected by the measured host and license conditions.

• Runtime asset-set digest: 977fb5ec2702ff9dcc0c804cc4d17881f2c90400dbbbf9597f73980d370389cd
• Runtime asset bytes: 7,083,785,294
• Exact plugin source: 2,418 files, 248cb359c9335fdcc6a720a6285d7c0b016f7a9cfb9ea2e3ff398d3dce519f43
• Release binding: 455c8e0b27ca3e0508ccdd6a9a5954afd5879d7487efcf17542d49695dff7513

This is the preinstall candidate for D088 installation and installed-native qualification. It does not claim that the user installation, installed Codex execution, or final public release has completed.