Skip to content

TrustDB v1.0.0

Latest

Choose a tag to compare

@github-actions github-actions released this 22 Jul 07:48
bcecbe3

TrustDB v1.0.0

TrustDB is a self-hosted tamper-evident evidence database for files, audit events, and data handoffs. This is the first stable release and establishes the github.com/wowtrust/trustdb module path, portable .sproof v1 evidence, durable Global Transparency Log state, optional external anchoring, and the current storage and backup formats.

Start here

  • New users: follow the platform quick start.
  • Developers: install the Go SDK with go get github.com/wowtrust/trustdb@v1.0.0.
  • Container users: use the Docker command below.
  • Before installing any archive, verify it against SHA256SUMS.

Recommended downloads

Server and CLI

Platform Package
Linux amd64 trustdb-1.0.0-linux-amd64.tar.gz
Linux arm64 trustdb-1.0.0-linux-arm64.tar.gz
macOS Intel trustdb-1.0.0-darwin-amd64.tar.gz
macOS Apple Silicon trustdb-1.0.0-darwin-arm64.tar.gz
Windows amd64 trustdb-1.0.0-windows-amd64.zip
Windows arm64 trustdb-1.0.0-windows-arm64.zip

Desktop client

Platform Recommended package
macOS Intel trustdb-desktop-1.0.0-darwin-amd64.dmg
macOS Apple Silicon trustdb-desktop-1.0.0-darwin-arm64.dmg
Windows amd64 trustdb-desktop-1.0.0-windows-amd64-setup.exe
Windows arm64 trustdb-desktop-1.0.0-windows-arm64-setup.exe

Alternative archives, MSI installers, certificate files, and build metadata remain available in the Assets section.

Docker

docker pull wsy19990317/trustdb:1.0.0

docker run -d --name trustdb -p 127.0.0.1:8080:8080 -v trustdb-data:/var/lib/trustdb wsy19990317/trustdb:1.0.0

The image supports linux/amd64 and linux/arm64. Bind the service to controlled interfaces and add deployment-level TLS, authentication, authorization, and network policy before production exposure.

Highlights

  • Signed claims and accepted receipts with WAL-backed ingest.
  • Batch Merkle proofs and portable .sproof evidence.
  • Persistent Global Transparency Log inclusion and consistency proofs.
  • Optional file, noop, and OpenTimestamps anchoring.
  • File, Pebble, and TiKV proofstore backends.
  • Logical backup verification and resumable restore.
  • HTTP, gRPC, Go SDK, CLI, desktop client, and optional Admin Web.
  • Prometheus metrics and reproducible production and benchmark profiles.

Security and compatibility notes

  • Desktop packages are self-signed. The included certificate files let users inspect the release signer but do not establish Apple or Microsoft trust; Gatekeeper or SmartScreen may warn.
  • TrustDB verifies cryptographic evidence but does not by itself bind keys to real-world identities or make blanket legal-validity claims.
  • Business HTTP and gRPC endpoints do not replace TLS, client authentication, tenant authorization, or network controls.
  • Storage schema v4 does not silently open older or unversioned non-empty stores. Rebuild or restore a current logical backup before upgrading such deployments.
  • A TiKV namespace belongs to one logical node_id and log_id writer stream; same-namespace active-active writers are not supported.

Release history