TrustDB v1.0.0

TrustDB v1.0.0

TrustDB is a self-hosted tamper-evident evidence database for files, audit events, and data handoffs. This is the first stable release and establishes the github.com/wowtrust/trustdb module path, portable .sproof v1 evidence, durable Global Transparency Log state, optional external anchoring, and the current storage and backup formats.

Start here

• New users: follow the platform quick start.
• Developers: install the Go SDK with go get github.com/wowtrust/trustdb@v1.0.0.
• Container users: use the Docker command below.
• Before installing any archive, verify it against SHA256SUMS.

Recommended downloads

Server and CLI

Platform	Package
Linux amd64	trustdb-1.0.0-linux-amd64.tar.gz
Linux arm64	trustdb-1.0.0-linux-arm64.tar.gz
macOS Intel	trustdb-1.0.0-darwin-amd64.tar.gz
macOS Apple Silicon	trustdb-1.0.0-darwin-arm64.tar.gz
Windows amd64	trustdb-1.0.0-windows-amd64.zip
Windows arm64	trustdb-1.0.0-windows-arm64.zip

Desktop client

Platform	Recommended package
macOS Intel	trustdb-desktop-1.0.0-darwin-amd64.dmg
macOS Apple Silicon	trustdb-desktop-1.0.0-darwin-arm64.dmg
Windows amd64	trustdb-desktop-1.0.0-windows-amd64-setup.exe
Windows arm64	trustdb-desktop-1.0.0-windows-arm64-setup.exe

Alternative archives, MSI installers, certificate files, and build metadata remain available in the Assets section.

Docker

docker pull wsy19990317/trustdb:1.0.0

docker run -d --name trustdb -p 127.0.0.1:8080:8080 -v trustdb-data:/var/lib/trustdb wsy19990317/trustdb:1.0.0

The image supports linux/amd64 and linux/arm64. Bind the service to controlled interfaces and add deployment-level TLS, authentication, authorization, and network policy before production exposure.

Highlights

• Signed claims and accepted receipts with WAL-backed ingest.
• Batch Merkle proofs and portable .sproof evidence.
• Persistent Global Transparency Log inclusion and consistency proofs.
• Optional file, noop, and OpenTimestamps anchoring.
• File, Pebble, and TiKV proofstore backends.
• Logical backup verification and resumable restore.
• HTTP, gRPC, Go SDK, CLI, desktop client, and optional Admin Web.
• Prometheus metrics and reproducible production and benchmark profiles.

Security and compatibility notes

• Desktop packages are self-signed. The included certificate files let users inspect the release signer but do not establish Apple or Microsoft trust; Gatekeeper or SmartScreen may warn.
• TrustDB verifies cryptographic evidence but does not by itself bind keys to real-world identities or make blanket legal-validity claims.
• Business HTTP and gRPC endpoints do not replace TLS, client authentication, tenant authorization, or network controls.
• Storage schema v4 does not silently open older or unversioned non-empty stores. Rebuild or restore a current logical backup before upgrading such deployments.
• A TiKV namespace belongs to one logical node_id and log_id writer stream; same-namespace active-active writers are not supported.

Release history

• Curated changelog
• Full changes since v1.0.0-beta.1
• Architecture and proof boundaries
• Stable .sproof v1 format

TrustDB v1.0.0-beta.1

What's Changed

• feat(website): 发布产物下载与安装文档 by @ryan-wong-coder in #207
• docs: 官网入口改为正式域名 by @ryan-wong-coder in #208
• feat(i18n): 支持官网、桌面端与管理端多语言 by @ryan-wong-coder in #209
• test(web): 固定 Admin E2E 浏览器语言 by @ryan-wong-coder in #210
• chore(release): 准备 v1.0.0-beta.1 by @ryan-wong-coder in #211

Full Changelog: v1.0.0-beta...v1.0.0-beta.1

TrustDB v1.0.0-beta

What's Changed

• Add contribution guide by @ryan-wong-coder in #3
• Add CI quality gates and GitHub templates by @ryan-wong-coder in #5
• Address review findings cleanup by @ryan-wong-coder in #7
• 固化 L4/L5 证明等级状态机 by @ryan-wong-coder in #83
• 稳定 .sproof v1 单文件证明格式 by @ryan-wong-coder in #84
• 新增 TrustDB Go SDK by @ryan-wong-coder in #85
• 客户端改用 Go SDK by @ryan-wong-coder in #86
• 新增 gRPC API 与 SDK transport 抽象 by @ryan-wong-coder in #88
• 桌面客户端支持 HTTP/gRPC transport 切换 by @ryan-wong-coder in #90
• [codex] Fix remote verify skip-anchor L4 semantics by @ryan-wong-coder in #92
• 补齐 HTTP/gRPC 双 transport 端到端测试 by @ryan-wong-coder in #94
• 在 README 中加入桌面客户端截图 by @ryan-wong-coder in #98
• 修正桌面客户端安装包命名为 trustdb by @ryan-wong-coder in #96
• 重写 CONTRIBUTING 为中英双文架构导向指南 by @ryan-wong-coder in #100
• 在 README 中加入作者博客入口 by @ryan-wong-coder in #102
• 稳定 HTTP ingest integration 测试清理流程 by @ryan-wong-coder in #104
• feat: complete paginated record and global listing APIs by @ryan-wong-coder in #105
• feat: add ingest benchmark command by @ryan-wong-coder in #106
• test: add global log history proof benchmarks by @ryan-wong-coder in #107
• fix: commit global log appends atomically by @ryan-wong-coder in #109
• [codex] Split bench visibility metrics and publish optimized performance report by @ryan-wong-coder in #111
• perf: optimize Pebble artifact writes and fix CI hygiene by @ryan-wong-coder in #112
• [codex] add proof source identity and sdk failover groundwork by @ryan-wong-coder in #114
• docs: clarify distributed deployment model by @ryan-wong-coder in #116
• feat: TiKV proofstore dev stack, CI, and integration tests by @ryan-wong-coder in #118
• feat: TrustDB Admin Web (integrated console) by @ryan-wong-coder in #120
• feat: add Admin Merkle visualizations by @ryan-wong-coder in #122
• fix(ci): wait for batch tree nodes in integration test by @ryan-wong-coder in #128
• [codex] Add native batch and streaming log ingest APIs by @ryan-wong-coder in #159
• fix: harden verification and input decoding by @ryan-wong-coder in #177
• [codex] Harden verification, inputs, and frontend readiness by @ryan-wong-coder in #178
• [codex] Harden server timeout configuration by @ryan-wong-coder in #179
• [codex] Harden local proofstore paths by @ryan-wong-coder in #180
• [codex] Harden backup archive writes by @ryan-wong-coder in #181
• [codex] Harden admin config writes by @ryan-wong-coder in #182
• [codex] Harden desktop atomic writes by @ryan-wong-coder in #183
• [codex] Harden CLI proof output paths by @ryan-wong-coder in #184
• [codex] Harden CLI keygen output paths by @ryan-wong-coder in #185
• [codex] Harden CLI file writes by @ryan-wong-coder in #186
• [codex] Harden batch fallback validation by @ryan-wong-coder in #187
• [codex] Harden SDK HTTP nil contexts by @ryan-wong-coder in #188
• [codex] Harden load-balanced SDK nil contexts by @ryan-wong-coder in #189
• [codex] Harden log stream nil contexts by @ryan-wong-coder in #190
• [codex] Bound proof file reads by @ryan-wong-coder in #191
• [codex] Write single proofs atomically by @ryan-wong-coder in #192
• [codex] Harden atomic writes against directory targets by @ryan-wong-coder in #193
• [codex] Validate backup restore checkpoints by @ryan-wong-coder in #194
• docs(github): standardize repository templates by @ryan-wong-coder in #195
• perf(batch): optimize proof materialization pipeline by @ryan-wong-coder in #196
• perf: validate and tune end-to-end profiles by @ryan-wong-coder in #197
• docs: add official project homepage by @ryan-wong-coder in #198
• fix: constrain filesystem access by @ryan-wong-coder in #200
• build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @dependabot[bot] in #199
• fix: update vulnerable Go dependencies by @ryan-wong-coder in #201
• ci: update GitHub Actions runtimes by @ryan-wong-coder in #202
• Fix proof level parsing and clarify comments by @ryan-wong-coder in #203
• feat(ui): modernize client, admin, and website by @ryan-wong-coder in #204
• build(release): 发布 1.0.0-beta 全平台产物 by @ryan-wong-coder in #205
• fix(release): 修复 Windows 自签名客户端打包 by @ryan-wong-coder in #206

New Contributors

• @ryan-wong-coder made their first contribution in #3
• @dependabot[bot] made their first contribution in #199

Full Changelog: https://github.com/ryan-wong-coder/trustdb/commits/v1.0.0-beta