v0.14.0

Golavo v0.14.0 — Source-aware depth, kept honest

Golavo 0.14.0 makes free-data refresh and match follow-up real without turning the
app into a background tracker or weakening the deterministic forecast boundary.

What is new

• Approved-source refresh: consent-gated manual, launch, and while-open checks for
  martj42 internationals plus genuinely published OpenFootball World Cup and club files.
  Raw responses are hashed, schema-checked, activated atomically, and retain a
  last-known-good generation.
• Optional OpenLigaDB overlay: keyless Bundesliga 1/2/3 and DFB-Pokal context fetched
  per user into a removable, display-only ODbL database. No OpenLigaDB bytes ship or enter
  CC0 packs, training, forecasts, calibration, settlements, or exports.
• Geographic match context: unique-exact GeoNames places, revision-pinned Wikidata
  venue entities, an offline Natural Earth route map, and deterministic local-kickoff,
  rest, distance, and travel displays. Context is not a model input.
• Follow this match: local follow/unfollow, targeted checks, deduplicated kickoff,
  venue, score and settlement-availability history, plus optional local notifications.
  Checks stop when Golavo closes.
• Provenance-first corrections: source-backed local proposals with immutable history,
  explicit license namespaces, fail-closed conflicts, and user-triggered export. Proposals
  never alter packs, training data, calibration, settlements, or sealed forecasts.
• Evidence-bound research: user-selected Wikimedia sources are captured with exact
  text, URL, retrieval time and hash; deterministic parsing precedes optional local
  AI fallback. Candidates route into correction review. DuckDuckGo HTML scraping is off.
• Deeper deterministic explanations: Match Cockpit now names history support, exact
  model-voice gaps, capability coverage, missing evidence, and hypothetical change triggers.
  It does not call these confidence, accuracy, or causal model effects.

Release hardening

• Match analysis uses a validated content-addressed cache and Phase 8 performs no extra
  model fit, keeping repeat exploration quick.
• The frozen server no longer carries unrelated optional ML/dataframe runtimes; local AI
  still connects over HTTP, while desktop downloads and cold-start extraction stay lean.
• Release builds embed and expose their exact 40-character source commit in the runtime,
  Settings, and new forecast artifacts.
• The release workflow runs Python, determinism, provenance, license isolation, UI, and
  docs gates before platform packaging or publication.
• Update recovery retains only the latest retired ledger generation, preventing unbounded
  Application Support growth.
• The website and README now present the new local-data workflows, larger product media,
  and a repaired architecture diagram whose developer label stays inside its capsule.

Installers remain OS-unsigned, so Gatekeeper or SmartScreen may warn on first install.
In-app update downloads are cryptographically verified. Golavo remains free, local-first,
non-betting, and fully usable without AI, OpenLigaDB, accounts, paid APIs, or user keys.

Install and update safely

• macOS: open the DMG, drag Golavo to Applications, then right-click Golavo and choose
  Open on first launch. If Gatekeeper still blocks it, run
  xattr -dr com.apple.quarantine /Applications/Golavo.app and open it again.
• Windows: if SmartScreen appears, choose More info → Run anyway after confirming the
  download came from this GitHub release.
• SHA256SUMS.txt detects a corrupted manual download; because the checksum is distributed
  beside the files, it is not an authenticity signature. In-app updates are separately
  verified against the public key compiled into Golavo before installation.
• Builds older than v0.2.1 did not include the updater. Install v0.14.0 manually once; later
  releases can then use the consent-gated in-app update flow.