T480 Fingerprint v1.0.2

Normal driver installation now downloads a fixed Arch package and verifies its exact size and SHA-256, replacing installation-time builds with mutable toolchain dependencies. The root-owned staged package is verified again before pacman installation; downloads have HTTPS-only redirects, timeouts and a kernel-enforced size limit.

Development tests now use a committed uv.lock with exact pytest/Ruff versions and transitive hashes. Test commands run frozen and offline; bootstrap instructions are documented.

The driver remains package release 1.94.100.r626.0fd7856-5. Fingerprint matching, persistent enrollment and PAM password fallback are unchanged. The release includes the exact tested x86-64 package; SHA-256 is also pinned in the plugin source:

7af9fdb4ca35344ec3c7aa02742e15cd3a06a15266557b1a26c9d5443f6d8c94

Validation: 39 panel/helper/launcher/integrity Python tests, six build/package integration tests, and 99 native Meson entries passed (32 skipped). QML, manifest, desktop-entry, Ruff and Bash checks passed. The marketplace baseline reports zero findings and requires manual capability review. No new physical fingerprint scans or production authentication changes were performed. This is a locally built, integrity-pinned artifact, not a claim of reproducible-build attestation.

T480 Fingerprint v1.0.1

Patch release addressing the marketplace review request to exclude contributor-only agent instructions from installed plugins.

• Removed AGENTS.md from the tracked repository tree and added it to .gitignore. Local contributor copies are retained.
• Updated the plugin manifest to 1.0.1 and installation/update instructions to v1.0.1.
• Retained the marketplace preview image in this release.

Runtime code, privileged helpers and authentication/charge-control behavior are unchanged. Follow the tagged installation instructions in the README. Existing v1.0.0 tags remain unchanged; use v1.0.1 for the corrected plugin tree.

Validation: 32 panel/helper/launcher tests, manifest/QML and desktop-entry validation passed. The driver package remains release -5; no driver rebuild or hardware enrollment was performed.

The v1.0.1 Git tree and source archive were checked to contain no AGENTS.md at any depth. Marketplace listing remains subject to maintainer approval.

T480 Fingerprint v1.0.0

First tagged release of T480 Fingerprint for Omarchy on x86-64, supporting the ThinkPad T480 Synaptics reader (USB 06cb:009a).

• Settings panel and application launcher entry.
• Driver installation, persistent fingerprint preparation and verification.
• Opt-in fingerprint sudo with password fallback; separate preparation leaves sudo policy unchanged.
• Guarded native driver blocks automatic pairing, factory reset, firmware upload and service-side print deletion.

Install the tagged plugin before enabling it:

omarchy plugin add https://github.com/stackingturtles/t480fingerprint.git
git -C ~/.config/omarchy/plugins/io.github.stackingturtles.t480fingerprint checkout --detach v1.0.0
omarchy plugin validate ~/.config/omarchy/plugins/io.github.stackingturtles.t480fingerprint
omarchy plugin enable io.github.stackingturtles.t480fingerprint
python3 -I ~/.config/omarchy/plugins/io.github.stackingturtles.t480fingerprint/scripts/launcher.py install

Open the application launcher, select T480 Fingerprint, then use Install / update driver → Prepare fingerprint → Enable fingerprint sudo. Reopen the panel and reselect your finger between actions.

Omarchy's plugin updater follows the default branch even from a detached tag. Avoid updating this plugin through that command to stay at v1.0.0. Select future release tags explicitly. The driver installer builds the checked-out plugin commit with pinned external source revisions.

Validation: PR #3 completed two clean review rounds; 38 Python tests and 99 upstream entries passed, with 32 skips. Manifest, QML, desktop-entry and lint checks passed. Persistent enrollment and sudo were user-confirmed; physical fallback, closed-lid and suspend/resume cases were not separately verified.

Limitations: this uses a pinned upstream libfprint MR, not stock supported-reader integration. Only sudo authentication is configured. The panel installer was fixture-tested; a complete fresh-machine installation was not independently exercised. No prebuilt driver package is attached: installation builds and tests locally. GitHub source archives lack the Git metadata required by the panel installer; use the Git instructions above.

Plugin version: 1.0.0. Driver package: 1.94.100.r626.0fd7856-5.
Original contributions: MIT, copyright Stacking Turtles Ltd. Third-party licenses remain intact.