Authoritative project documentation

Changelog

Unreleased

• Continued separately versioned Scout Bee deployment-bootloader work. It is not currently an end-user release.

0.1.0-preview.6 — Preview 1 (corrective build) — 2026-07-18

Corrective build that ships as ApiaryLens Preview 1 under the same public name, superseding build 0.1.0-preview.5 for the air-gap image-store gate fix and the release identity correction. A corrective build does not advance the public preview counter; the internal build ordinal only ever increases.

• Fixed the release-blocking air-gap install failure on containerd-image-store hosts (#91): bundle-manifest.json now records both load-reproducible image identities — the config-blob digest (classic graphdriver store) and the OCI manifest digest (containerd store, the current Docker Engine default) — each derived from the bundle's own archive bytes, and the fail-closed post-load gate accepts whichever form the host's image store reports. The air-gap lifecycle CI job now re-exercises the load, post-load gate, and install under the containerd image store so a store-dependent regression cannot pass CI while failing real hosts.
• Fixed the broken release source-identity binding (#92): the release workflow rebinds sourceCommit to the exact tagged commit it builds and fails when the release manifest, the provenance gitCommit, and the built commit disagree or when a publishable build comes from a dirty worktree — enforced at evidence generation, at release:verify, in the product job, and again in the publish job immediately before release creation. Committed release evidence is regenerated pinned to the true built commit.
• No Windows build: unchanged from 0.1.0-preview.5 — the Windows desktop client is deferred pending a full rewrite; the most recent Windows preview build remains on the v0.1.0-preview.4 release with known deferred defect #84 and receives no further preview fixes.

See the build 0.1.0-preview.6 release notes for verification steps and the compatibility table.

0.1.0-preview.5 — Preview 1 (platform reboot) — 2026-07-18 (superseded)

Superseded by corrective build 0.1.0-preview.6 (air-gap post-load gate unusable on containerd-image-store hosts, #91; broken artifact source-identity binding, #92); its GitHub release carries a superseded banner. The historical entry below is retained as published.

Published as ApiaryLens Preview 1, the first public preview of the rebooted platform+web product. The public preview counter restarted with the reboot (owner decision, 2026-07-18); the internal build ordinal (0.1.0-preview.5) is unaffected and only ever increases. This build supersedes 0.1.0-preview.4 (whose GitHub release is now titled "Superseded internal build — do not use") and ships platform and web artifacts only — the Cloudflare bundle, the Compose bundle, the air-gapped Compose bundle, and their evidence.

• Fixed the release-blocking air-gap bundle defect (#82): recorded image IDs are now load-reproducible, and the release workflow proves the packed bundle's identity from its own archive bytes before anything is published. The 0.1.0-preview.4 air-gap bundle must not be used.
• Added the offline-aware Members overview card and consented external-provider weather capture (FB-006, FB-011).
• Carried the corrected operator documentation and versioned docker/.env.example identity (#83, #85) into a released artifact set.
• No Windows build: the Windows desktop client is deferred pending a full rewrite (owner decision, 2026-07-18). The most recent Windows preview build remains on the v0.1.0-preview.4 release, carries known deferred defect #84, and receives no further preview fixes. The release workflow gained an explicit, fail-closed, preview-only include_windows=false option to record this exclusion honestly.

See the build 0.1.0-preview.5 release notes for verification steps and the compatibility table.

0.1.0-preview.4 — Preview 2 — 2026-07-18 (superseded; retitled)

Superseded by build 0.1.0-preview.5 and excluded from the restarted public preview sequence; its GitHub release is now titled "Superseded internal build — do not use" (defective air-gap bundle, #82). The historical entry below is retained as published.

Published as ApiaryLens Preview 2; 0.1.0-preview.4 is the internal build number (build ordinals only increase and may skip public preview numbers — preview.2 and preview.3 were consumed by unpublished internal drafts).

First release offering the standalone Windows desktop application as a downloadable preview artifact. The Windows Setup is intentionally unsigned and ships under the accepted unsigned-preview conditions: the filename and the app UI carry UNSIGNED-PREVIEW, SHA-256 checksums are published beside the download, every subject carries a Sigstore keyless attestation, the SmartScreen warning is documented honestly, and release-candidate/stable channels remain fail-closed on real signatures.

Also includes the air-gapped Compose bundle with offline lifecycle scripts, the machine-verified compatibility manifest, the cross-client conformance suite, the decomposed web client with profile import preview and the offline glossary, and the SignPath-ready release pipeline. See the Preview 2 release notes for verification steps and the honest SmartScreen guidance.

0.1.0-preview.1 — 2026-07-16

ApiaryLens is now available as Public Preview 1. This is an early, usable product, not GA or a stable release. It carries forward the verified MVP acceptance candidate with the installable PWA, family access, synchronized hive history, private media, portable Cloudflare and Compose deployments, and the public documentation set.

Features and workflows may change, and preview updates may arrive frequently, including multiple times per day. Keep current backups and exports, and do not use ApiaryLens as the sole copy of irreplaceable hive records or media. Physical-device, assistive-technology, and final owner acceptance gates remain visible in the MVP UAT record.

See the Preview 1 release notes for scope, safety guidance, verification, and feedback instructions.

2026-07-17 Preview updates

• Completed automatic online synchronization across open, resume, reconnect, and connected saves, including complete multi-batch push and paginated pull handling, organization-scoped cursors, and protection for unsynchronized/conflicted local records.
• Fixed installed-PWA cached launch so local navigation and records render before a stalled initial network session refresh. Automatic sync/media and physical iPhone/iPad relaunch gates remain visible.

0.1.0-rc.7 — 2026-07-16

Corrective safe-target-removal candidate. Exact GCP cleanup proved a normal administrator could clear the validated target but could not remove its empty directory from root-owned /opt. Scout Bee now deletes contents as the owner and uses passwordless sudo rmdir only for the empty directory, never privileged recursive deletion. See the curated release notes, release gates, and UAT record.

0.1.0-rc.6 — 2026-07-16

Corrective partial-uninstall recovery candidate. Exact published-byte GCP cleanup proved that rc.5 could not finish removal from rc.4's partially deleted secret-file state. Scout Bee now reconstructs only the missing restricted mount points, requires Compose resource removal to succeed, and then removes the complete validated target. See the curated release notes, release gates, and UAT record.

0.1.0-rc.5 — 2026-07-16

Corrective remove-data candidate. GCP lifecycle acceptance proved rc.4 left verified backup archives under the Compose installation directory after a full uninstall. Scout Bee now removes the complete validated target on remove-data while preserving the recoverable keep-data path, with regression coverage. See the curated release notes, release gates, and UAT record.

0.1.0-rc.4 — 2026-07-16

Corrective clean-host installer candidate. It supersedes rc.3 after exact published-byte Compose smoke testing proved Scout Bee could not create the documented default /opt/apiarylens target for a normal Ubuntu administrator. Scout Bee now preflights target access, uses guarded passwordless-sudo creation, rejects unsafe or foreign-owned paths, and carries unit plus clean-host deployment proof. See the curated release notes, release gates, and UAT record.

0.1.0-rc.3 — 2026-07-16

Corrective runtime-identity candidate. It supersedes rc.2 after exact-artifact Cloudflare smoke testing proved that the published bundle had linked a stale compiled contracts package. Release assembly now rebuilds shared contracts first, injects the complete frontend identity, builds all release inputs in one ordered command, and rejects mismatched Worker or PWA bytes before packaging. See the curated release notes, the release-gate checklist, and the UAT record.

0.1.0-rc.2 — 2026-07-16

Authorization and contract-parity candidate for final MVP acceptance. It adds the Cloudflare direct-record route, explicit media-read enforcement, D1/R2 cross-family negative tests, revoked-membership tests, complete OpenAPI route/security coverage, and the dated authorization/exposure audit. See the curated release notes, the release-gate checklist, and the UAT record.

0.1.0-rc.1 — 2026-07-15

Initial ApiaryLens MVP release candidate. See the curated release notes, the release-gate checklist, and the UAT record. Stable release notes will list only capabilities that pass the binding UAT contract.