Document verified Windows 0.1.4 release and remaining platform gates

docs/ROADMAP.md

@@ -1,6 +1,6 @@
 # Production readiness roadmap
 
-Status: Windows v0.1.3 and Linux previews published; initial Windows v0.1.0 installed. Broader production gates remain open. Windows VM tests use CPU only.
+Status: Windows v0.1.4 and Linux v0.1.3 previews published; initial Windows v0.1.0 installed. Broader production gates remain open. Windows VM tests use CPU only.
 
 Karl's release priority, 2026-10-13: publish a usable first Windows version and
 install it on DEV-WIN11 now. Extensive platform/GPU, clean-machine, signing and
@@ -342,7 +342,8 @@ build was inferred from that lookup; macOS execution gates remain unchecked.
 
 - [x] Audit core/service and desktop/CLI Rust boundaries; avoid unnecessary naming/module churn.
 - [x] Correct valid pre-1970 filesystem timestamps across indexing, source eligibility and previews. Changed crates passed 100 tests (six ignored), desktop 47; strict Clippy and formatting passed. See [audit](RUST-AUDIT.md).
-- [ ] Include the timestamp correction in the next packaged update; published v0.1.3 artifacts precede it.
+- [x] Publish Windows v0.1.4 with the timestamp correction; verify public bytes, packaged helper provenance and isolated real Google CPU query-worker startup. See [evidence](WINDOWS-0.1.4.md).
+- [ ] Include the timestamp correction in updated Linux packages; published Linux v0.1.3 artifacts precede it.
 
 Initial Windows delivery is complete. Native interaction/upgrade, actual GPU,
 macOS execution and independent media-quality work remain real follow-up; the

docs/RUST-AUDIT.md

@@ -45,10 +45,12 @@ The initial usable Windows release is delivered. Windows desktop 0.1.3,
 Windows CLI/MCP and Ubuntu headless packages are published and byte-verified.
 An Ubuntu 24.04 desktop Debian preview now also has verified packaged CPU startup.
 The timestamp correction is in source; those 0.1.3 artifacts precede this fix.
+Follow-up: [Windows 0.1.4](WINDOWS-0.1.4.md) now packages it and has verified
+public downloads, helper provenance and isolated genuine Google CPU startup.
 
 The full cross-platform production goal remains open. Concrete follow-up is:
 
-1. Include this fix in the next packaged update; refresh extraction provenance.
+1. Include this fix in updated Linux packages; Windows 0.1.4 is complete.
 2. Check real Windows interaction, preview playback/seek and installed upgrades.
 3. Validate physical GPU use and fallback, and execute a native macOS build.
 4. Improve media relevance using independently reviewed real files and queries;

docs/WINDOWS-0.1.4.md

@@ -0,0 +1,30 @@
+# Windows 0.1.4
+
+Published unsigned preview from source `79c78dc51a105ea245a1aef01ad74d2dccd09896`.
+This packages the signed filesystem timestamp correction described in
+[the Rust audit](RUST-AUDIT.md); no library upgrades or UI redesign were added.
+
+Production frontend and NSIS release build passed. All 60 frontend tests and
+format checks passed. The audited code passed 100 core/media/service tests and
+47 desktop tests with strict Clippy; six optional integration tests were ignored.
+An additional genuine current PDF/DOCX worker integration test passed.
+
+Installer: 100473786 bytes, SHA-256
+`2691b9bff3cffb1087f922b0ea3e430f930a6f6fbd609e236f0ffa6937970383`.
+Public unauthenticated full installer and checksum downloads matched local bytes.
+
+The actual installer was extracted. Its helper source provenance verified against
+the current source, and the normal Google runtime passed 26 dependency records.
+The package includes hardware-detecting CPU/Vulkan modules; Windows VM execution
+was forced to CPU and WebView GPU acceleration disabled.
+
+Extracted desktop PID 19724 was responsive with an isolated profile and copied
+test index. Its bundled genuine Google query worker started with
+`--device cpu --role query --threads 1`, and the desktop remained alive afterward.
+Only the owned test process tree was terminated. Existing user installation was
+not modified. Raw report: `.searchi/qa/windows-desktop-014-smoke.json`.
+
+This establishes packaged startup and worker discovery, not native keyboard,
+visual, media playback, first-query timing or installation/upgrade validation.
+Physical GPU, clean-machine, signatures and macOS checks remain open.
+Linux previews remain v0.1.3 and do not contain this timestamp correction.