Deadbolt v1.0.3

Deadbolt v1.0.3 is a macOS distribution update. Its admission, storage, policy, protocol, and public API behavior is unchanged from v1.0.2. The Apple Silicon and Intel ZIPs now contain Developer ID Application signed executables with hardened runtime and secure timestamps. Apple accepted these exact downloadable ZIPs for notarization. Linux and Windows binaries remain unsigned.

Download the archive for your OS and its .sha256 file. Verify the archive using installation instructions, extract it, then run deadbolt --version and deadbolt drill. The release ZIPs include source, examples, documentation, license notices, and BUILD.json with the exact source revision and executable hash. Use first evaluation for 11 disposable real-file-effect checks. No model key or external service is needed for that evaluation.

Source revision: 3a857f8438dcda4bdaadb414d37f128508dc44f1. Exact-main source CI and native packaging, Hermes MCP, and upgrade CI passed. The signed Apple Silicon and Intel ZIPs both passed local signature checks, version/drill, and the 11-effect evaluator after fresh extraction. The selected Hermes MCP route passed 13 observed effects on Linux; this is not a full agent or model-turn evaluation.

Apple notarization: Apple Silicon submission 70ff347c-1a5f-4a6a-ae79-bbbe2e2f64d5; Intel submission 8e4f02bf-09b0-4726-a1b1-47c9e45842fa. Apple's logs for both report Accepted, issues: null, the downloadable ZIP's SHA-256, and the signed executable's CDHash. The logs are attached. These command-line executables use Apple's online notarization ticket; no app bundle or stapled ticket is claimed. A clean third-party Mac download and application-owned integration remain open acceptance steps.

Deadbolt admits actions only when a trusted executor checks and honors a fresh explicit allow. Operator kill blocks later admissions; it does not cancel work already running. The protected dispatcher, identities, policy, credentials, and route coverage belong to the integrating application. See the integration guide, FAQ, and security policy. This release is not a security certification or independent human validation. The earlier v1.0.2 release remains unchanged.

No crates.io, npm, or pip registry package is published by this release. The Rust crate and Python/Node clients are available from this versioned source and native archives.

Cargo registry update — October 11, 2026

This exact tagged source is now published as n11-deadbolt 1.0.3 on crates.io. Install the CLI with:

cargo install n11-deadbolt --version 1.0.3 --locked --bin deadbolt
deadbolt --version
deadbolt drill

For embedded Rust, use deadbolt = { package = "n11-deadbolt", version = "=1.0.3" }. Generated Rust API and current installation guide. The registry archive matches the prepublication tested package checksum and tagged Git revision. Fresh registry CLI installs, drills, real sidecar effects and separate registry-dependent Rust consumers passed on macOS ARM64. No release tag, native asset or engine source was changed. Earlier registry-status wording above describes the original release date. Python/Node clients are not on PyPI/npm.