Releases: townlight/sunshine
Release list
CivicRecords AI v1.7.3
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar plus package checksums.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Python package assets:
civicrecords_ai-<version>-py3-none-any.whl,civicrecords_ai-<version>.tar.gz, andSHA256SUMS.txtfor direct-pip release URL consumers. - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com/CivicSuite/civicrecords-ai/.github/workflows/release.yml@refs/tags/v1.7.3" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI-1.7.3-Setup.exe.sha256
sha256sum -c SHA256SUMS.txt
python scripts/verify-release-provenance.py "v1.7.3" \
--repo "CivicSuite/civicrecords-ai" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- chore: publish CivicRecords Python release assets by @scottconverse in #95
Full Changelog: v1.7.2...v1.7.3
Contributors
Assets 9
CivicRecords AI v1.7.2
Superseded by v1.7.3 for release-asset convention bring-up; no functional change.
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
--repo "" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- fix: repair civicrecords frontend clean install lockfile by @scottconverse in #94
Full Changelog: v1.7.1...v1.7.2
Contributors
Assets 6
CivicRecords AI v1.7.1
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
--repo "" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- fix: shallow checkout windows release build by @scottconverse in #92
- release: civicrecords-ai v1.7.1 recovery patch by @scottconverse in #93
Full Changelog: v1.7.0...v1.7.1
Contributors
Assets 6
CivicRecords AI v1.6.1
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
--repo "" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- docs: record B2 v1.6.0 release completion by @scottconverse in #79
- chore: narrow unqualified macOS support claims to honest current state by @scottconverse in #80
- chore(ci): migrate Linux jobs to self-hosted runner (windows job unchanged) by @scottconverse in #81
- reframe install.sh + README + detect_hardware.sh as a server product (one per city) by @scottconverse in #83
- fix(ingestion): Celery worker event-loop reuse blocking all document ingestion by @scottconverse in #82
- chore: prepare CivicRecords AI v1.6.1 release by @scottconverse in #84
Full Changelog: v1.6.0...v1.6.1
Contributors
Assets 6
CivicRecords AI v1.6.0
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
--repo "" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- feat(security): move records secrets to Docker secret files by @scottconverse in #74
- chore: commit B2 Phase 2 RED rehearsal artifact by @scottconverse in #75
- fix(security): remove B2 secret file pointer env names by @scottconverse in #76
- chore: record B2 Phase 2 green rehearsal by @scottconverse in #77
- fix(ci): remove secret pointer env names from release workflow by @scottconverse in #78
Full Changelog: v1.5.0...v1.6.0
Contributors
Assets 6
CivicRecords AI v1.5.0
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
--repo "" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- chore: wire release provenance preflight by @scottconverse in #64
- Wire Sigstore release attestations by @scottconverse in #65
- Use provenance wrapper in release workflows by @scottconverse in #66
- [CO-4] Ledger CivicRecords AI v1.4.10 retrofit by @scottconverse in #67
- chore: add CivicRecords release recovery gates by @scottconverse in #68
- feat(deps): migrate civiccore to v1.0.1 and bump to v1.5.0 (closes ENG-002) by @scottconverse in #69
- fix(ci): release.yml YAML parse error in release-notes HEREDOC (closes audit TEST-022) by @scottconverse in #70
- fix(ci): run release verification on Linux, keep Windows job to installer build only by @scottconverse in #71
- fix(ci): dump container logs from verify-release.sh when compose health-check fails by @scottconverse in #72
- fix(ci): release workflow FIRST_ADMIN_EMAIL must not use .local (special-use reserved domain) by @scottconverse in #73
Full Changelog: v1.4.10...v1.5.0
Contributors
Assets 6
CivicRecords AI v1.4.10
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
What's Changed
- docs: refresh v1.4.9 test count evidence by @scottconverse in #62
- chore: publish Records v1.4.10 docs alignment by @scottconverse in #63
Full Changelog: v1.4.9...v1.4.10
Contributors
Assets 4
CivicRecords AI v1.4.9
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
What's Changed
- feat: consume civiccore sync source status by @scottconverse in #61
Full Changelog: v1.4.8...v1.4.9
Contributors
Assets 4
CivicRecords AI v1.4.8
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
What's Changed
- feat: consume CivicCore scheduling helpers by @scottconverse in #59
- test: stabilize data source wizard dialog test by @scottconverse in #60
Full Changelog: v1.4.7...v1.4.8
Contributors
Assets 4
CivicRecords AI v1.4.7
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
What's Changed
- Consume CivicCore config validation by @scottconverse in #58
Full Changelog: v1.4.6...v1.4.7