guardian-node-build-week-2026-qualified

GuardianNode 0.1.0-alpha.3 — Build Week qualified candidate

GuardianNode remains alpha software for technical parents, developers, and
safety reviewers. This candidate contains the complete Guardian Review Build
Week extension from 0.1.0-alpha.2 plus one real-Windows qualification fix.

Windows qualification correction

Clean unattended testing on a current Windows 11 GPU node found that Ollama's
interactive scheduled task can register successfully from an SSH/service
session without becoming runnable until the next desktop logon. The installer
previously waited for that task and failed before installing GuardianNode.

The bootstrap now keeps the persistent logon task, waits briefly for it, and
starts a direct installer-session fallback when the task is not reachable. The
fallback is used only to complete prerequisite/model setup; the registered task
remains the persistent startup path at interactive logon. This behavior is
covered by release-script tests and was reproduced successfully on the Windows
qualification node before rebuilding the candidate.

Guardian Review

• Parent-requested second opinion on an authorized existing incident.
• Deterministic minimization/redaction v3 and exact outbound-data preview.
• Explicit digest-bound consent for each live request.
• Server-side OpenAI Responses API with configurable gpt-5.6, store: false,
  no tools, strict schema 1.1.0, bounded timeout, and selective retries.
• Durable encrypted local assessment history, deletion, sanitized audit events,
  parent communication guidance, and versioned local feedback.
• Six resettable synthetic scenarios, a 55-case synthetic evaluation, and a
  deterministic mock mode requiring no API key or family data.

The experimental Codex/ChatGPT subscription provider remains disabled. A
coding agent's local tools are not an appropriate execution boundary for
untrusted incident evidence. Direct Responses API and mock modes remain
available.

Privacy and safety boundaries

Guardian Review is disabled until configured. Local detection never depends on
it. A live request requires exact minimized-context preview and explicit parent
consent. API keys remain server-side. store: false is not presented as a
zero-retention guarantee, and live mode requires operator confirmation of the
configured OpenAI project's retention controls.

Guardian Review is advisory. It does not establish truth, diagnose a condition,
make a legal conclusion, decide punishment, or replace emergency assistance.

Candidate artifacts

The final qualification tag creates a draft prerelease only after source,
tests, Windows bundles, and checksum gates pass. Expected unsigned artifacts:

• GuardianNodeChildSetup-0.1.0-alpha.3.exe
• GuardianNodeServerSetup-0.1.0-alpha.3.exe
• SHA256SUMS
• release-manifest.json

Verify the exact SHA-256 values from the generated checksum file before use.
The installers are unsigned and may trigger Defender or SmartScreen warnings.

Supported scope

• Current Windows 11 x64: technical-parent client/install target.
• Windows 10: unpromoted qualification target.
• Windows or Linux backend from source: technical evaluation.
• Separated deployments: trusted private LAN/VPN/TLS only.
• Direct public-internet exposure: unsupported.

Known limitations

• OCR and local-model behavior depends on content and hardware.
• Deterministic redaction is defense-in-depth, not proof of anonymity.
• Synthetic evaluation does not establish clinical or universal accuracy.
• Live GPT-5.6 mode is an advanced server configuration and requires an
  eligible account, server-side key, and verified retention controls.
• Installers are unsigned.
• GuardianNode can miss risks or create false positives and must not be the
  family's only safety measure.

v0.1.0-alpha.1

GuardianNode 0.1.0-alpha.1

Initial public alpha release for technical parents, developers, early
evaluators, and safety reviewers.

GuardianNode Alpha is a local-first safety-monitoring tool for technical parents
and early evaluators. The Windows 11 installers have been tested in the
documented install modes, including post-install detection verification. This is
alpha software. It may miss events, may produce false positives, and is not a
guarantee of child safety. It is not a replacement for parental involvement or
emergency services. Do not expose GuardianNode directly to the public internet.
Use only on devices and accounts you own or are legally responsible for.

Supported in this alpha

Deployment shape	Status
Windows 11 all-in-one installer	Supported public alpha path for technical parents
Windows 11 parent server installer	Supported public alpha path for parent-owned server PCs
Windows 11 child-only installer	Supported public alpha path when paired to a trusted parent server
Source-code evaluation	Supported for contributors, security reviewers, and technically experienced testers
Backend bound to loopback	Safest default alpha path
Separated private LAN/VPN deployment	Advanced alpha path; explicit opt-in, trusted LAN/VPN/TLS required

Not supported

Deployment shape or claim	Status
Finished consumer product for non-technical families	Not supported
Production/stable deployment	Not supported
Raw public-internet exposure	Not supported
Guaranteed detection or guaranteed child safety	Not supported
Tamper-proof, stealth, or forensic-evidence claims	Not supported
Enterprise/commercial compliance use	Not supported

Release artifacts

Artifact	SHA-256	Notes
GuardianNodeChildSetup-0.1.0-alpha.1.exe	b271dd24c448ac8c333f5c86548cac2d12c35a41c48de7193d62f376becb1fb7	Windows x64-compatible child/all-in-one installer
GuardianNodeServerSetup-0.1.0-alpha.1.exe	92314f7613341bd2ba47c34d96131f44e63126ef7cacd248f59642604fcf954f	Windows x64-compatible parent server installer
Source archive	Generated by GitHub from the v0.1.0-alpha.1 tag	Verify the tag and commit before building locally

The Windows installers are unsigned in this alpha. Windows SmartScreen,
Defender, or other antivirus tools may warn about unsigned or PyInstaller-built
executables. Verify checksums from the official GitHub release before running
the installers.

Install

• One PC: follow Install GuardianNode on one PC.
• Server + child PC: follow Install GuardianNode with a separate server + child PC.
• Source: follow Power-user/source install and
  Backend setup.

All Windows installer paths require administrator approval. Default backend
binding is local-first. Private LAN/VPN access is explicit and must not be
port-forwarded to the public internet.

Verify

After install:

1. Open the parent dashboard.
2. Confirm /api/health reports ok.
3. Finish first-run setup with the one-time setup token.
4. Confirm the child device appears under Devices.
5. Confirm Model Status or Pipeline Health shows the expected text-only,
   vision, or full tier.
6. Trigger a synthetic or known-safe test phrase and verify a risk event appears
   in the dashboard.

Stop, disable, and uninstall

• Windows server installer: Start Menu -> GuardianNode Server -> Stop service.
• Windows child/all-in-one installer: use the visible tray icon to pause
  monitoring, or uninstall from Windows Settings / Programs & Features as an
  administrator.
• Logs are under C:\ProgramData\GuardianNode\logs\.
• Troubleshooting and manual cleanup steps are in
  Troubleshooting.

Privacy

GuardianNode is local-first by default and does not send child data to a
GuardianNode-operated cloud. Current installer defaults capture visible screen
content; retained evidence can include sensitive screenshots, OCR text, app
names, window titles, URLs, names, and private messages. Evidence blobs and
collected event text are encrypted for parent/admin review, but the alpha does
not encrypt the entire SQLite database. Read
Privacy
before using the alpha.

Known limitations

• It may miss risks and may false-alarm.
• Text-only hardware does not detect visual-only risks such as image-only nudity,
  gore, or weapons.
• Local model quality and speed vary by hardware and model choice.
• Separated mode uses local-network HTTP unless you add HTTPS, Tailscale,
  WireGuard, or another trusted VPN/reverse proxy.
• Unsigned installer reputation is not established.
• A determined local administrator can disable or remove user-space monitoring.
• Docker is a technical self-hosting path, not the primary Windows parent alpha
  install path.

Evidence

Release-readiness evidence and Windows installer validation are tracked in:

• Windows 11 alpha installer validation
• release-readiness-alpha.md in the source repository

Feedback

Use GitHub Issues or Discussions for non-sensitive alpha feedback. Do not upload
child screenshots, private messages, evidence exports, pairing codes, device
tokens, setup tokens, or personal logs to public issues. Use the private
vulnerability reporting flow for exploitable vulnerabilities or child-data leaks.

Attached installer assets and SHA-256

Asset	SHA-256
GuardianNodeChildSetup-0.1.0-alpha.1.exe	b271dd24c448ac8c333f5c86548cac2d12c35a41c48de7193d62f376becb1fb7
GuardianNodeServerSetup-0.1.0-alpha.1.exe	92314f7613341bd2ba47c34d96131f44e63126ef7cacd248f59642604fcf954f
GuardianNodeLinuxServerInstaller-0.1.0-alpha.1.tar.gz	637ff52adcf800ebda51319e66eef76275f9ca9a219af6079280f3349604f2e4

The attached GuardianNode-0.1.0-alpha.1-SHA256SUMS.txt file contains these same hashes for command-line verification.