CodeCaddie v0.4.0+2016

Initial open-source release. The public repository starts at build 0.4.0+2001,
the snapshot commit. The first published desktop build is the first protected-
main commit archived and notarized through Xcode Cloud after the Apple signing
chain was connected; config/supported-upgrade-matrix.json records its exact
build once the baseline is established.

Added

• Local-first native CodeCaddie for Apple Silicon and Intel Macs, distributed as
  one signed and notarized universal application ZIP.
• The Goals → Evidence → Action → Repeat workflow, with encrypted local state,
  commit-bound evidence, report history, recommendations, and Word export.
• Bounded integrations with locally installed Codex, Claude, and Grok command-line
  tools; CodeCaddie stores no provider credentials or repository source text.
• Startup and six-hour update checks with explicit “Not now” and
  “Update and restart” choices.
• Immutable GitHub Releases containing checksums, an SBOM, provenance,
  attestations, and a source-commit-bound update manifest.

Security

• Update manifests are signed keylessly through GitHub OIDC and Sigstore.
• The updater verifies Fulcio identity, Rekor inclusion, source commit, artifact
  digest, semantic version, build number, Apple team, and bundle identifier
  before atomic replacement.
• Signing credentials remain outside the repository. Apple retains the
  non-exportable Developer ID key.

Platform status

• macOS Apple Silicon and Intel are supported.
• Windows is coming soon, pending SignPath Foundation open-source signing.
• Linux remains an unsupported source-built experiment.

CodeCaddie v0.4.0+2015

Initial open-source release. The public repository starts at build 0.4.0+2001,
the snapshot commit. The first published desktop build is the first protected-
main commit archived and notarized through Xcode Cloud after the Apple signing
chain was connected; config/supported-upgrade-matrix.json records its exact
build once the baseline is established.

Added

• Local-first native CodeCaddie for Apple Silicon and Intel Macs, distributed as
  one signed and notarized universal application ZIP.
• The Goals → Evidence → Action → Repeat workflow, with encrypted local state,
  commit-bound evidence, report history, recommendations, and Word export.
• Bounded integrations with locally installed Codex, Claude, and Grok command-line
  tools; CodeCaddie stores no provider credentials or repository source text.
• Startup and six-hour update checks with explicit “Not now” and
  “Update and restart” choices.
• Immutable GitHub Releases containing checksums, an SBOM, provenance,
  attestations, and a source-commit-bound update manifest.

Security

• Update manifests are signed keylessly through GitHub OIDC and Sigstore.
• The updater verifies Fulcio identity, Rekor inclusion, source commit, artifact
  digest, semantic version, build number, Apple team, and bundle identifier
  before atomic replacement.
• Signing credentials remain outside the repository. Apple retains the
  non-exportable Developer ID key.

Platform status

• macOS Apple Silicon and Intel are supported.
• Windows is coming soon, pending SignPath Foundation open-source signing.
• Linux remains an unsupported source-built experiment.