T1Bridge 0.1.12

v0.1.12

The signed t1bridge package adds an experimental native online recovery command:

sudo t1bridge machine-data recover --online --efi /path/to/mounted-esp

T1Bridge owns the restore protocol, direct USB transport, Apple signing/FDR
exchanges and EFI publication. It uses established system libraries for HTTPS,
hashing and archives. No external recovery executable or third-party restore
stack is required.

Recovery stays local first. Existing preserved EFI data, partial generations,
inspection failures and functional devices block the online command. A verified
same-Mac backup should be used before online recovery. Installation and upgrades
never run recovery. The command requires an attended terminal, a T1 already in
recovery mode, and matching userspace/DKMS packages.

The implementation requires successful restore status, durable FDR capture and
matching replay. It keeps each personalized image with its ticket, checks a
stable functional USB boot, and saves one complete EFI generation without
replacing existing data. Private interrupted attempts are retained and require
inspection before another restore. A root-only kernel interface discovers a
unique T1 FRST method and refuses functional devices and arbitrary ACPI paths.

Validation includes make quality, synthetic protocol and storage failure
tests, C sanitizers, kernel builds, and native extraction/personalization checks
using Apple's checksum-pinned generic package outside the repository. The
personalization check used a synthetic ticket and did not contact Apple signing
or a USB device. No Apple binaries or machine data are distributed.

This release enables tester feedback; it does not establish real-device
recovery. #43 tracks
generated-data import/calibration load, enrollment, correct/incorrect fingers,
warm/cold persistence, Touch Bar, camera and ALS. Test only a machine that
already needs recovery. Do not erase working EFI to create a test case.
See recovery instructions and limits.

Packages: t1bridge and t1bridge-dkms 0.1.12-1,
libfprint-t1bridge 1.94.100-20 and fprintd-t1bridge 1.94.5-17.
The fingerprint pair is rebuilt for this cohort; its protocol is unchanged.
The existing optional t1bridge-omarchy 0.2.2-1 package is retained.

Use omarchy update on Omarchy or a full sudo pacman -Syu on other supported
Arch installations. Confirm DKMS and initramfs/UKI generation succeed, then
reboot to load the matching driver. Existing machine data and enrollments
remain in place.

T1Bridge 0.1.11

v0.1.11

Failed Touch Bar information sends now free their allocated reply buffer.
Opt-in kernel diagnostics report information/update reply results and bounded
read-attempt counts without pixels, payloads or identifiers. The actual
exchange functions have synthetic allocation, timeout, short-transfer and
stale-response coverage. This fixes the leak; it does not fix the reported
display timeout or dark panels in #31/#34. Accepted T1 update replies are not
timestamp-matched and do not prove frame presentation or illumination.

The optional t1bridge-omarchy 0.2.2-1 package supplies XDG autostart after
graphical-session readiness. Its drop-in skips a renderer start with an
absent/empty display environment, and its helper starts or restarts only
enabled units. Disabled/masked units and custom renderer selection are
preserved. No per-user startup hook is required. If an older manual hook
exists, remove it only after verifying that it points to the packaged helper.
See session startup.

Local make quality, kernel builds and sanitizers passed. The optional
package passed helper, real systemd-condition/XDG-generator and isolated
install/reinstall/upgrade/removal checks. Cold-login acceptance of the new
startup path remains pending in #35; publication does not establish it.

The documentation now separates camera format metadata from application
acceptance, runtime residency from measured power, and public SEP API/test
doubles from the missing T1 wire contract. The external Linux recovery review
identifies artifact-generation, replay-comparison and interrupted EFI update
gates. No device recovery or new hardware acceptance was performed.

The signed cohort is t1bridge/t1bridge-dkms 0.1.11-1,
libfprint-t1bridge 1.94.100-19, fprintd-t1bridge 1.94.5-16 and optional
t1bridge-omarchy 0.2.2-1. The fingerprint pair is rebuilt for this cohort;
its protocol is unchanged.

On Omarchy, upgrade with omarchy update; other supported Arch installations
use a full sudo pacman -Syu. Confirm DKMS and initramfs/UKI generation succeed,
then reboot to load the new driver. Keep machine data and enrolled prints.

This remains a prerelease. Relay failures, system suspend, runtime power
saving, broader camera/ALS coverage, general SEP key services, Linux recovery,
the original enrollment failure and the display reports remain open.

T1Bridge 0.1.10

v0.1.10

Automatic machine-data import now reopens its storage root after EFI discovery
changes mount namespaces. This preserves the service's writable storage mount
and fixes the reproduced private import temporary file could not be created
failure in #36, without
weakening the sandbox. The synthetic namespace regression fails before the
fix and passes afterward, including idempotent repeat import. Confirmation on
the reporting machine remains pending.

The default Touch Bar renderer now supports display-off state from a desktop
provider and cancels held input when the display turns off. Providers without
that capability keep their existing behavior. Display blanking is separate
from system suspend and does not establish recovery from the dark-panel
reports in #34.

Failed Touch Bar system-resume initialization now requests a display-interface
reprobe. This is bounded failure recovery, not a claim that system suspend or
panel relighting works. Successful initialization followed by a dark panel
remains unresolved in #18.

SEP diagnostics retain cleanup failures alongside the original operation
failure. Native rejection tests cover the relay boundary; the sustained relay
restart loop in #14
remains unresolved.

The setup guide now documents Omarchy Quickshell Touch ID unlock with password
fallback and explains the optional integration's required per-user session
hook. No package edits user PAM files or installs that hook automatically.

The core cohort is t1bridge/t1bridge-dkms 0.1.10-1,
libfprint-t1bridge 1.94.100-18 and fprintd-t1bridge 1.94.5-15.
The fingerprint pair is rebuilt for this cohort; its protocol is unchanged.
The existing optional t1bridge-omarchy 0.2.1-1 remains available.

On Omarchy, upgrade with omarchy update; other supported Arch installations
use a full sudo pacman -Syu. Reboot after successful DKMS and initramfs/UKI
generation to activate the updated drivers. Existing machine data and enrolled
fingerprints are retained; do not re-enroll or reset state to upgrade.

This remains a prerelease. Suspend/resume, runtime power saving, broader camera
and ambient-light coverage, general SEP key services, and Linux-only recovery
remain open development or validation work.

T1Bridge 0.1.9

v0.1.9

Enrollment can now recover when the keybag relay is already stopped in systemd's
failed state. The enrollment path treats that state as stopped, performs its
existing bootstrap, and still requires the relay to become active before
continuing. Transitional or unknown states and failed/cancelled bootstrap remain
failures. This addresses #21;
it does not resolve the native relay restart loop tracked in
#14.

The optional t1bridge-omarchy 0.2.1-1 package tightens automatic-brightness
sensor selection and restarts its consumer when the T1 sensor or sensor proxy
changes. It discards queued readings after pause/unlock and monitor backlog,
then waits for a fresh reading before applying brightness. Synthetic discovery,
consumer and staged-install checks pass; broader live coverage remains in
#17.

Publication now uses a checked-in maintainer tool that preserves unrelated
packages, signs complete repository indexes and manifests, serializes publishers
and retains interrupted staging for safe resume. Immutable packages must be
anonymously downloadable with the expected bytes before index publication;
the GitHub release stays a draft until the complete public view is verified.
See the release procedure and
#24.

The core cohort is t1bridge/t1bridge-dkms 0.1.9-1,
libfprint-t1bridge 1.94.100-17 and fprintd-t1bridge 1.94.5-14.
Reboot remains the supported installation handoff. Suspend/resume, broad power
saving, broad camera coverage and Linux-only machine-data recovery remain open
validation or development work.

Validation: core packages were built once and passed isolated install/reinstall/removal and signing in CI run 34625519821. Optional integration passed make check, package checks, and isolated pacman install/reinstall/removal using the exact signed 0.2.1-1 artifact. The complete repository and GitHub downloads were checked against the same signed checksum manifest before publishing this page. Local make quality and release-tag CI passed, including the publisher's failure/resume, pinned-signature and real Git-lock tests.

Core source commit: 379f65310bc27059c923da0da6b86fa7a6e6d4f1, signed tag v0.1.9. Core source archive SHA-256: 5938c25b710271b78ddc1fef59d6af078ade835e0b5124bc65bcf0777285f166. Optional source archive SHA-256: bbd4b4a6f923cc308fbdeb6703c0fb71858d68140fa44e10cec217611c1b0e90. The matching sources, package recipes and patches are included as public release assets.

T1Bridge 0.1.8

v0.1.8

Require the distribution iio-sensor-proxy so T1 ambient-light readings are
automatically discoverable through standard desktop interfaces. Configuration 2
already exposes the sensor through the stock Linux HID/IIO drivers; no new
kernel module is introduced.

The separately installed t1bridge-omarchy 0.2.0-2 package adds optional,
unprivileged automatic panel brightness. It adapts gradually to ambient light,
respects manual adjustments, and starts automatically at graphical login once
enabled. See sensor support for installation and controls.

On MacBookPro13,3, attended tests confirmed cover/uncover dimming and recovery,
a manual 100% reference beyond the 30-second hold, healthy operation after
lock/unlock, and automatic startup after reboot. Tests did not observe the
locked interval. Other-model and concurrent camera/authentication acceptance
remain open in #17; system suspend and runtime power saving remain unsupported.

Core packaging checks and the existing quality suite passed. The optional
package passed policy/discovery/session tests and isolated install, reinstall,
upgrade and removal checks. Kernel and fingerprint protocol code are unchanged.

The core cohort is t1bridge/t1bridge-dkms 0.1.8-1,
libfprint-t1bridge 1.94.100-16 and fprintd-t1bridge 1.94.5-13.
Update with omarchy update or sudo pacman -Syu; no re-enrollment is needed.
The #14 relay diagnostics and restart backoff remain evidence collection and
mitigation, not a confirmed root-cause fix.

T1Bridge 0.1.7

v0.1.7

• Preserve the failing keystore operation and validated remote status in
  opt-in relay diagnostics (#14). Previously a remote rejection appeared only
  as the generic SEP operation result 1.
• Add keystore-reply, keystore-outer and keystore-inner diagnostic stages
  with an allowlisted selector. No keybag handles, identities, payloads or
  request data are logged. Missing or invalid remote fields are not emitted.
• Scope observation to the relay's thread and native call; restore the previous
  observer on return. Diagnostic output retains the shared 4096-record bound
  and cannot change the native operation result.

This release gathers evidence; it does not fix the underlying SEP failure.
The v0.1.6 restart backoff remains in place. See
relay diagnostics. Enable the
existing diagnostic setting for the next normal service start or planned boot;
do not force hardware resets or repeated authentication to produce a failure.

Native success/rejection/malformed-reply tests, sanitizers, observer isolation
and restoration tests, and the full quality suite passed. Affected-hardware
recovery remains unverified.

The cohort is t1bridge/t1bridge-dkms 0.1.7-1,
libfprint-t1bridge 1.94.100-15 and fprintd-t1bridge 1.94.5-12.
Kernel code and fingerprint protocol are unchanged. Update with
omarchy update or sudo pacman -Syu. No re-enrollment is required;
suspend/resume remains unsupported.

T1Bridge 0.1.6

v0.1.6

• Accept binary-plist offset and object-reference widths from 1 through 8
  bytes. This fixes import rejection of valid FDRData with three-byte offsets
  (PR #16, thanks to @niconistal). Existing parser limits remain enforced.
• Back off automatic keybag relay failure restarts from 2 seconds to 60 seconds
  over five steps, retaining the quick first retry. This reduces persistent
  restart storms; the underlying SEP failure and downstream lock-screen retry
  loop remain unresolved (#14).
• Explain enrollment authorization timeouts and distinguish SEP operation
  results from Linux errno values (#15).

The cohort is t1bridge/t1bridge-dkms 0.1.6-1,
libfprint-t1bridge 1.94.100-14 and fprintd-t1bridge 1.94.5-11.
The compatibility pair's release revisions advance for this build; its
fingerprint protocol and the kernel code are unchanged.

Update using sudo pacman -Syu on Arch or omarchy update on Omarchy.
No re-enrollment is required. Suspend/resume remains unsupported.

The parser regression and additional synthetic width/bounds tests passed.
Isolated systemd testing reached the 60-second backoff cap and confirmed that
clean stop/start resets the delay. These tests do not establish recovery from
an affected machine's SEP failure or new hardware coverage.

T1Bridge 0.1.2

v0.1.2

• Distinguish normal xART connection close from truncated frames. A missing HELLO or incomplete frame still fails.
• Add read-only xart-admission evidence to t1bridge status. Journal collection is bounded and scoped to the broker/xART units. Missing diagnostics never abort the other status rows; recorded admission is not a live firewall test.
• Use the import service's private temporary directory for automatic EFI discovery. A separate multi-ESP discovery failure remains tracked in #9; use an explicit same-machine backup when automatic import fails.
• Put the private xART firewall prerequisite before enrollment and record the new 13,2 and 14,3 tester evidence without broadening untested support claims.

Thanks to @josesalazar2025 for PR #4, and the testers who helped isolate the firewall prerequisite.

Upgrade

With the official repository already configured, use sudo pacman -Syu. The cohort is t1bridge/t1bridge-dkms 0.1.2-1, libfprint-t1bridge 1.94.100-10 and fprintd-t1bridge 1.94.5-7. The fingerprint pair is rebuilt with new package revisions, not new protocol behavior.

Confirm DKMS and initramfs generation succeed, then reboot to use the installed cohort. Do not delete calibration, keybags or enrolled fingers. Desktop audio/media/HUD integration remains optional and is not bundled by this release. System suspend/resume remains unsupported.

T1Bridge 0.1.1

Signed release candidate. Review the assets before publishing.