Skip to content

KakeFlow v1.2.1

Latest
Latest

Choose a tag to compare

View all tags
@thangldw thangldw released this 25 Aug 04:33
· 52 commits to main since this release
v1.2.1
6bd7bfc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

KakeFlow v1.2.1

KakeFlow v1.2.1 hardens the desktop release path and publishes the shared receipt-to-provenance foundation as an installable account-free PWA while keeping financial processing local-first.

Download v1.2.1 · Open the PWA · Source code · Product website

Highlights

  • Account-free encrypted PWA vault with local PP-OCRv5 receipt review, explicit approval, balanced posting, provenance, offline reload, and authenticated atomic export/restore.
  • Shared platform-neutral Rust posting invariants used by the native application and the pinned reproducible WASM build.
  • Nano ID advisory removal, immutable GitHub Actions pins, dedicated Poppler visual QA with machine/human artifacts, and cleaned React act(...) warnings.
  • Synthetic 85-second receipt-to-provenance evidence video with no account or personal financial data.

Installation

Download KakeFlow_1.2.1_aarch64.dmg for Apple Silicon Macs. This community build is ad-hoc signed and is not Apple-notarized. macOS may require opening KakeFlow through Finder's Open action or approving it under System Settings → Privacy & Security. It is not presented as a frictionless production installer.

Existing v1.2.0 installations use a retired updater endpoint and therefore require one manual upgrade from this canonical release page. KakeFlow v1.2.1 queries this repository's signed stable update channel for later releases.

The PWA requires no account and avoids the macOS Gatekeeper installation path. It is a focused receipt-to-ledger foundation and does not yet provide every desktop connector or the full native feature set.

Verification

The release gate covers 804 frontend tests and 644 Rust tests, production desktop/PWA builds, offline Playwright recovery, Poppler PDF visual QA, OCR resource verification, packaged application/DMG smoke tests, updater/signature/checksum contracts, and zero npm audit findings. Published assets include SHA-256 checksums and a signed Tauri updater archive.

The open medium glib advisory is limited to the future Linux Tauri/GTK path tauri -> webkit2gtk/gtk -> glib; it is absent from the macOS release graph and is documented in Security.

Assets 7
Loading