CivicRecords AI v1.5.0

About this release

CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.

Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.

Release provenance

Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.

Downloads

• Windows double-click installer: CivicRecordsAI-<version>-Setup.exe (bundled with .sha256 checksum sidecar for Get-FileHash verification).
• Linux / macOS guided-script install: clone the repo at this tag and run ./install.sh — see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.

Cross-platform native installer parity is explicit follow-on work, not shipped in this release.

Docs

• README · USER-MANUAL · Canonical spec · CHANGELOG

---

What's in this release

Verify release provenance

cosign verify-blob release-attestation.json \
  --bundle release-attestation.json.bundle \
  --certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
  --repo "" \
  --attestation release-attestation.json \
  --bundle release-attestation.json.bundle \
  --artifacts-dir .

What's Changed

• chore: wire release provenance preflight by @scottconverse in #64
• Wire Sigstore release attestations by @scottconverse in #65
• Use provenance wrapper in release workflows by @scottconverse in #66
• [CO-4] Ledger CivicRecords AI v1.4.10 retrofit by @scottconverse in #67
• chore: add CivicRecords release recovery gates by @scottconverse in #68
• feat(deps): migrate civiccore to v1.0.1 and bump to v1.5.0 (closes ENG-002) by @scottconverse in #69
• fix(ci): release.yml YAML parse error in release-notes HEREDOC (closes audit TEST-022) by @scottconverse in #70
• fix(ci): run release verification on Linux, keep Windows job to installer build only by @scottconverse in #71
• fix(ci): dump container logs from verify-release.sh when compose health-check fails by @scottconverse in #72
• fix(ci): release workflow FIRST_ADMIN_EMAIL must not use .local (special-use reserved domain) by @scottconverse in #73

Full Changelog: v1.4.10...v1.5.0