CivicRecords AI v1.7.1
About this release
CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.
Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.
Release provenance
Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar.
Downloads
- Windows double-click installer:
CivicRecordsAI-<version>-Setup.exe(bundled with.sha256checksum sidecar forGet-FileHashverification). - Linux / macOS guided-script install: clone the repo at this tag and run
./install.sh— see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.
Cross-platform native installer parity is explicit follow-on work, not shipped in this release.
Docs
What's in this release
Verify release provenance
cosign verify-blob release-attestation.json \
--bundle release-attestation.json.bundle \
--certificate-identity "https://github.com//.github/workflows/release.yml@refs/tags/" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c CivicRecordsAI--Setup.exe.sha256
python scripts/verify-release-provenance.py "" \
--repo "" \
--attestation release-attestation.json \
--bundle release-attestation.json.bundle \
--artifacts-dir .What's Changed
- fix: shallow checkout windows release build by @scottconverse in #92
- release: civicrecords-ai v1.7.1 recovery patch by @scottconverse in #93
Full Changelog: v1.7.0...v1.7.1