{
  "schemaVersion": 2,
  "recordState": "public-release",
  "recordedOn": "2026-10-25",
  "application": {
    "version": "0.5.6",
    "sourceCommit": "ed7dad8bafc30ae7ad8d1a2dbd07a7b74eeb7901",
    "releaseStatus": "public-release",
    "releaseStatusLabel": "0.5.6 accepted public release",
    "installerStatus": "accepted-and-published",
    "signingState": "unsigned-public"
  },
  "privacyClaims": {
    "conversationContentsSentToMurmurSphereOnlineServices": 0,
    "advertisingOrCrossSiteBehavioralTrackersOnWebsite": 0,
    "approvedWebsiteAnalyticsProviders": 1,
    "desktopAppAnalyticsIntegrations": 0,
    "privateAppContentSentToWebsiteAnalytics": 0,
    "websiteAnalyticsCookies": 0,
    "websiteAnalyticsBrowserStorageRecords": 0,
    "scope": "Local Private zeros describe tested app 0.5.6 source. Native Windows production audit 40214566302 passed all 23 routes of site 097f4aafc0774a5d540dffa7edd919850f2d79c7 and Worker 22bfbcf9-bb58-4dca-a912-a758b0e8e7d1, with one approved Cloudflare Web Analytics contract, no other outside request, no cookies and no browser storage."
  },
  "checks": [
    {
      "id": "local-private-outbound",
      "label": "Local Private online boundary",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "Synthetic checks found no conversation, character, Persona, recovery key, private path, or credential crossing an unapproved app boundary.",
      "evidenceSource": "Public Windows run 40191507163; app ed7dad8bafc30ae7ad8d1a2dbd07a7b74eeb7901; 147 native tests, package proof and six R02 stages passed."
    },
    {
      "id": "local-private-inbound",
      "label": "Local service access",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "All three on-device services rejected synthetic requests outside the approved local path, with no private test value leaked.",
      "evidenceSource": "Public Windows run 40191507163; app ed7dad8bafc30ae7ad8d1a2dbd07a7b74eeb7901; 147 native tests, package proof and six R02 stages passed."
    },
    {
      "id": "package-source",
      "label": "Package-content source boundary",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "The Windows package proof recorded 945 staged files, 25 renderer files, 2 renderer entry assets, 8 starter characters, 17 portraits, 0 real private reads and 0 forbidden files. Installer identity comes from its verified generated manifest.",
      "evidenceSource": "Public Windows run 40191507163; app ed7dad8bafc30ae7ad8d1a2dbd07a7b74eeb7901; 147 native tests, package proof and six R02 stages passed."
    },
    {
      "id": "private-reporting",
      "label": "Contact and bug-report ownership",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "Contact opens only the exact first-party page with no payload. Bug Report remains a memory-only preview and can open its public page only after explicit copy.",
      "evidenceSource": "DS-0058 app tests and privacy-safe diagnostics proof"
    },
    {
      "id": "offline-help",
      "label": "Offline illustrated Help",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "Ten Help topics and ten local synthetic images resolved offline with captions, alt text, closed actions, and no private-state or network read.",
      "evidenceSource": "DS-0058 app tests and rendered evidence"
    },
    {
      "id": "website-preview-privacy",
      "label": "Repository site preview",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "The repository preview passed 32 browser groups, 110 source tests and the 23-route source-origin audit, with first-party assets and no unapproved cookies or browser storage. Preview checks do not prove production behavior.",
      "evidenceSource": "0.5.6 activation verification on site 097f4aafc0774a5d540dffa7edd919850f2d79c7; local source/browser reports."
    },
    {
      "id": "website-production-privacy",
      "label": "Production website privacy",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "The native Windows production audit passed all 23 routes with one approved Cloudflare Web Analytics script and exact manual report endpoint, no other outside request, no cookies and no browser storage. The audit step passed; archiving its report hit GitHub artifact storage quota. The result is retained in the repository evidence summary.",
      "evidenceSource": "Windows run 40214566302; site 097f4aafc0774a5d540dffa7edd919850f2d79c7; Worker 22bfbcf9-bb58-4dca-a912-a758b0e8e7d1."
    },
    {
      "id": "contact-publication",
      "label": "Manual contact boundary",
      "status": "passed",
      "kind": "builder-automated",
      "plainResult": "Contact, Bug Report, and Security publish one plain Workspace address with guidance, no form, no mail link, and no automatic submission.",
      "evidenceSource": "R03 contact configuration, render tests, and browser checks"
    }
  ],
  "independentReview": {
    "status": "passed",
    "plainResult": "The creator accepted the installed DS-0116 build and authorized 0.5.6 publication. Earlier independently cross-investigated repairs remain the foundation; this is not a new independent review of every 0.5 change. The public rebuild retains accepted app features and passed 147 native tests, six R02 privacy stages and exact source/checksum verification. The new 23-route production privacy audit passed on the recorded site/Worker deployment."
  },
  "releaseGates": [],
  "artifacts": [
    {
      "version": "0.4.2-alpha.1",
      "sourceCommit": "ac18f01c4b75c3db8f52893136d88f8946118549",
      "status": "historical",
      "filename": "Murmur-Sphere-0.4.2-alpha.1-unsigned-windows-x64.exe",
      "sizeBytes": 113522912,
      "sha256": "0d5c401c6c827777642f7aeb671a4a740c47dbb279c60e910d360e401e436109",
      "signingState": "unsigned-public",
      "publishedAt": "2026-09-19T21:46:47.698Z"
    },
    {
      "version": "0.4.31",
      "sourceCommit": "93e9e67ef0cae3856423ca0047fa3b0e6005709e",
      "status": "historical",
      "filename": "Murmur-Sphere-0.4.31-unsigned-windows-x64.exe",
      "sizeBytes": 114714730,
      "sha256": "cc4b782d71de7b3dd2853bea61c3ae3f854cbf737ec0d8763c7da51039d008cc",
      "signingState": "unsigned-public",
      "publishedAt": "2026-10-17T06:32:15.286Z"
    },
    {
      "version": "0.5.6",
      "sourceCommit": "ed7dad8bafc30ae7ad8d1a2dbd07a7b74eeb7901",
      "status": "current",
      "filename": "Murmur-Sphere-0.5.6-unsigned-windows-x64.exe",
      "sizeBytes": 120234911,
      "sha256": "f4600fc45d952c0099950da6dc12a14c4c3abb704aead95a8072fe4ca8ee39d1",
      "signingState": "unsigned-public",
      "publishedAt": "2026-10-25T12:34:37.347Z"
    }
  ]
}