Release Ledger
Release History & Audit Trail
Every published release and release candidate is permanently recorded with its build timestamp, source commit hash, cryptographic signatures, and SBOM.
Release 2026.11.13•Channel: Release Candidate
Snigdha OS Decentralized v2026.11.13
Date: Nov 13, 2026Public Release
Publicly published release candidate consolidating Phases 0–11 into a fully integrated, verified live privacy operating system. Ships reproducible ISO generation, dm-verity root Merkle tree verification, LUKS2 Argon2id encrypted persistence, and complete cryptographic supply chain attestation.
Key Subsystem Changes
- ›Consolidated complete live OS distribution with unified Everblush i3wm desktop
- ›Integrated dm-verity block integrity verification into Unified Kernel Image (UKI)
- ›Implemented central release engineering CLI with formal go/no-go gate enforcement
- ›Cataloged 581 software packages in SPDX 2.3 Software Bill of Materials (SBOM)
- ›Generated in-toto SLSA v1.0 build provenance attestation
- ›Added disaster recovery engine and safe LUKS header backup validation
Security & Hardening Enhancements
- ›100% remediation of Phase 11 security findings (SEC-01 through SEC-10)
- ›Enforce-mode AppArmor profiles expanded to 12 core services and desktop wrappers
- ›nftables kill switch verified with automated failure injection and fail-closed boot assessor
- ›Session D-Bus filtering via xdg-dbus-proxy restricting unauthenticated endpoints
Known Limitations in this Build
- • Independent third-party external security audit (Phase 11) has not been completed; this is a release candidate, not a 1.0.0 general-availability build
- • The published release-manifest.json, SBOM.spdx.json, and provenance.intoto.jsonl were re-uploaded after their detached signatures were generated, so those three detached signatures do not validate against the currently published files; the ISO itself is verifiable through the correctly signed SHA256SUMS and BLAKE2SUMS
- • Build output classified as partially reproducible due to PE/COFF UKI signing timestamp variance
- • Physical hardware support matrix tested on reference UEFI x86_64 platforms; broad OEM variations require community validation
Artifactsnigdhaos-decentralize-2026.11.13-x86_64.iso
Size1.38 GB
Kernel6.18.62-1-lts
Source Commitcbc194bb31
SHA-256:d478995adc24220c2995a78f7b0918f1c94b16d5af32e1ca141ddf9d1f65e197
Release 2026.11.12•Channel: Development
Snigdha OS Decentralized v2026.11.12
Date: Nov 11, 2026Internal Verification Only
Phase 9 verification release featuring the native Snigdha Penetration Center, unprivileged GTK4 package discovery, BlackArch/Chaotic-AUR signed repository integration, and dm-verity root integrity verification.
Key Subsystem Changes
- ›Added native Snigdha Penetration Center (Rust + GTK4)
- ›Implemented strictly unprivileged package signature verification
- ›Integrated dm-verity fail-closed Merkle tree verification into UKI initramfs
- ›Added SPDX 2.3 SBOM and SLSA v1.0 build provenance attestation
- ›Updated Linux LTS kernel to 6.18.62-1-lts with memory scrubbers enabled
Security & Hardening Enhancements
- ›Strict enforce-mode AppArmor profiles expanded to 12 services
- ›nftables kill switch verified with automated failure injection
- ›Session D-Bus filtering via xdg-dbus-proxy blocking unauthenticated endpoints
Known Limitations in this Build
- • Never published publicly; superseded by the 2026.11.13 release candidate
- • Independent third-party cryptographic audit pending (Phase 11)
Artifactsnigdha-decentralized-2026.11.11-x86_64.iso
Size1.04 GB
Kernel6.18.62-1-lts
Source Commit51d0ab00d4
SHA-256:56af787cc19d7372c7c405321a6bad383e3b32780936b7c5f0db7404a9f00cc1