DoubleAgent v3.1.0 beta 1 — guided collaboration and safer review

DoubleAgent 3.1.0 beta 1

Agent B's web and Mac harnesses remain experimental works in progress. Agent A's generated prompts remain available for use with existing coding assistants.

Collaboration and file exchange

• Discuss mode reviews material and helps the human weigh ideas without assessment tools, even after bootstrap.
• Saved recommendations, explicit question/approval cards, cancelled stale approvals, and visible mid-run message acknowledgements.
• Text and image attachments in Discuss mode, with bounded local storage and opt-in image capability per connection.
• Download attachments and Markdown responses, export chat, and use native Mac open/save panels.

P1 safety fix

The independent review for record_finding and valid triage_finding writes now fails closed. Only a strict JSON Boolean acceptance permits those writes. Malformed replies (including string "false"), provider errors and cancellations cannot approve a write. Rejected or unresolved reviews stop automatic actions, preserve redacted evidence locally and request operator review. An unresolved review does not mean the finding is false; model review is not ground truth.

Mac packaging

• Apple Silicon, macOS 13 or later; local tests performed on macOS 27.2.
• Includes checksum-pinned CPython 3.12.14. No separate Python, Homebrew or developer tools are required to run the app.
• Developer ID-signed with hardened runtime and secure timestamps, including nested runtime binaries.
• Builds reject embedded model credentials. Configure connections and keys locally after installation.

The Mac app is Apple-notarized and includes a stapled ticket. Strict signature and ticket validation pass, and Gatekeeper reports Notarized Developer ID. Apple accepted submission 03eb60af-c890-4fa7-86f1-c3cd8cffa046 on 26 September 2026. The standard first-launch confirmation for apps downloaded from the internet may still appear. A downloaded/quarantined clean-Mac UI installation test is still required before calling the installer production-ready. Intel and macOS 13 have not been tested here. Do not disable Gatekeeper to work around validation failures.

Verification and limits

• 132 Agent B tests and 20 existing extension tests passed.
• Tests also passed under the bundled Python runtime with no system Python paths.
• Fresh-settings bundle smoke test passed: startup, empty connections, UI, harmless upload/download.
• HTTPS certificate verification passed without disabling TLS checks.
• Exact staged source, app bundle and extracted release archive secret scans found no secrets; scans are not a guarantee that every secret pattern is detectable.
• No live third-party assessment or vulnerability reproduction was performed.
• Provider image formats are fixture-tested, not live-model verified. PDF/Office/archive ingestion, camera capture and generated binary files are not included.

Downloads

• DoubleAgent-v3.1.0-beta.1.zip: full source, Agent A Burp extension, Agent B browser harness and docs.
• DoubleAgent-Burp-v3.1.0-beta.1.zip: Agent A extension source with loader and internal modules.
• Agent-B-macOS-arm64-v3.1.0-beta.1.zip: self-contained, Developer ID-signed and Apple-notarized Apple Silicon app.
• SHA256SUMS: checksums for the three archives.

Read the repository's docs/quality-review.md and docs/macos-release.md for remaining checks and release limitations. Use only on systems you own or are explicitly authorized to test.