AssetRail v0.1.1

AssetRail v0.1.1

AssetRail v0.1.1 updates the public release identity, removes local assistant
workspace material from the published tree, restores minimal CI, and prepares
the offline macOS planner for an official direct-download binary.

Changed

• Apache-2.0 now covers original source code and project documentation in this
  release.
• Rafal Sikora is recorded as copyright owner; RSI Tech is the public maintainer.
• https://rsitech.ai and info@rsitech.ai are the canonical website and
  project/confidential contacts.
• Package, Cargo, Tauri, community-build, and in-app disclosure metadata now
  identify version 0.1.1 and Apache-2.0.
• The official build path requires a clean exact commit, the Developer ID
  Application identity for Team 2NY8A789TN, hardened runtime, and structural
  signature verification. It cannot silently submit for notarization.
• Release bundles include Apache-2.0 project terms and generated notices for the
  exact Cargo and npm runtime dependency graphs.
• Assistant workspace material is removed from the public tree; local IDE,
  agent, and monetization working notes are ignored.
• Minimal GitHub Actions verification and secret-scan workflows are restored.

Important limitations

AssetRail remains an offline prototype. It does not connect to an exchange or
wallet, accept credentials, persist an account, place a trade, transfer assets,
or submit a withdrawal. It is not financial advice or a live asset-management
tool.

An official DMG or ZIP is attached only after the exact app is notarized,
stapled, Gatekeeper-validated, and runtime-proven. Source archives remain
available even if Apple distribution is externally blocked.

Historical licensing

The v0.1.0 source and documentation remain under the MPL-2.0 and CC-BY-4.0
terms recorded at that tag. The v0.1.0 release stays available as a superseded
historical record; Apache-2.0 applies to v0.1.1 and later.

Security and support

Report suspected vulnerabilities privately through
SECURITY.md. Public support requests belong in
GitHub Issues. Do not include
real credentials, wallet keys, private addresses, or personal financial data.

AssetRail v0.1.0

AssetRail v0.1.0

AssetRail v0.1.0 is the first public source release of the offline macOS route
planner prototype.

Included

• Deterministic synthetic exchange, balance, destination, fee, and risk data.
• Exact-decimal route evaluation in Rust.
• Strict IPC validation and reason-coded route exclusions.
• A least-authority Tauri WebView with no generic built-in permissions.
• A distinct community-build identity with exact source and license disclosure.
• Public contribution, governance, security, privacy, support, and release
  policies.

Important limitations

This release does not connect to an exchange or wallet. It does not accept
credentials, persist an account, place a trade, transfer assets, or submit a
withdrawal. It is a prototype for inspecting deterministic planner behavior,
not financial advice or a live asset-management tool.

Runtime verification covers Apple-silicon macOS. Intel macOS is unverified. No
Developer ID-signed, notarized, or App Store binary is included.

Build from source

npm ci
npm run test:run
npm run build:community

See README.md and
COMMUNITY_BUILD.md for the pinned
toolchains, complete verification matrix, output path, and fork identity rules.

Release assets

The GitHub release includes source archives, CycloneDX/SPDX SBOMs, and SHA-256
checksums. It does not include the locally ad-hoc-signed community app.

Security

Report suspected vulnerabilities privately through the process in
SECURITY.md. Do not include real credentials, wallet keys,
private addresses, or personal financial information.