v0.7.0 — T3dmium (phases 0–6 complete)
First complete pass of the T3dmium roadmap: a privacy-first Chromium fork maintained as a patch set, pinned to Chromium 150.0.7871.46. CI is green — the de-Google series, the network audit harness, and the sync server are all verified on every change.
What works and is verified (no build required)
- De-Google patch set — 109 patches (108 adopted from ungoogled-chromium + 1 T3dmium privacy default) apply cleanly to the pin, checked in CI by
validate_patches.py(DEPS-aware: files in devtools-frontend/v8/etc. are validated from their own sub-repos). - Network audit harness (
audit/) — default-deny detection engine with a browserless self-test (24 cases) that flags planted leaks; runs in CI. - Privacy defaults — Do Not Track + Global Privacy Control on by default (validated patch); third-party cookie blocking on via the adopted set.
- Ad/tracker blocking — engine decided (adblock-rust, ADR-0005); EasyList/EasyPrivacy pinned reproducibly; list updates are user-initiated only, enforced by an audit scenario.
- Self-hosted zero-knowledge sync (
sync/) — client-side E2E encryption, server sees only ciphertext; 15 tests pass in CI, live round-trip proven. - Branding + packaging — icon + generator, macOS DMG/signing/notarization and Windows NSIS tooling, reproducible-build notes.
What still needs a build host (hardware, not tooling)
Compiling the browser, producing signed installers, and running the audit harness against a real binary require ~100 GB free disk + full Xcode (macOS) or a self-hosted CI runner — see BUILDING.md. Everything up to that step is done and machine-verified.
Full history in CHANGELOG.md; every phase is individually tagged.