CivicRecords AI v1.7.3

About this release

CivicRecords AI is an open-source, locally-hosted AI system for municipal open-records request processing. Every deployment is a sovereign instance owned by the city — no cloud, no telemetry, no outbound data transfer.

Windows installer is UNSIGNED by design. On first run, Windows SmartScreen will show "Windows protected your PC — Unknown publisher." To proceed: click More info → Run anyway, then confirm UAC. See installer/windows/README.md for the full remediation walkthrough.

Release provenance

Post-baseline releases include release-attestation.json and
release-attestation.json.bundle. The Git tag is a release pointer; the
Sigstore-signed attestation is the trust artifact. Verify the attestation with
the exact CivicSuite/civicrecords-ai workflow identity printed in the release
notes and then verify the installer checksum sidecar plus package checksums.

Downloads

• Windows double-click installer: CivicRecordsAI-<version>-Setup.exe (bundled with .sha256 checksum sidecar for Get-FileHash verification).
• Python package assets: civicrecords_ai-<version>-py3-none-any.whl, civicrecords_ai-<version>.tar.gz, and SHA256SUMS.txt for direct-pip release URL consumers.
• Linux / macOS guided-script install: clone the repo at this tag and run ./install.sh — see README.md and USER-MANUAL.md for prerequisites and a step-by-step walkthrough.

Cross-platform native installer parity is explicit follow-on work, not shipped in this release.

Docs

• README · USER-MANUAL · Canonical spec · CHANGELOG

---

What's in this release

Verify release provenance

cosign verify-blob release-attestation.json \
  --bundle release-attestation.json.bundle \
  --certificate-identity "https://github.com/CivicSuite/civicrecords-ai/.github/workflows/release.yml@refs/tags/v1.7.3" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

sha256sum -c CivicRecordsAI-1.7.3-Setup.exe.sha256
sha256sum -c SHA256SUMS.txt
python scripts/verify-release-provenance.py "v1.7.3" \
  --repo "CivicSuite/civicrecords-ai" \
  --attestation release-attestation.json \
  --bundle release-attestation.json.bundle \
  --artifacts-dir .

What's Changed

• chore: publish CivicRecords Python release assets by @scottconverse in #95

Full Changelog: v1.7.2...v1.7.3