# Initial release handoff — 2026-10-13

Karl requested finishing the usable Windows delivery and publishing the already
validated Linux packages, without further feature/platform expansion.
[Final release v0.1.7](https://tea.karlcom.de/karl/searchi/releases/tag/v0.1.7)
is published as a regular release and is returned by Gitea's latest-release API.
Its eight assets include installers/archives and their checksums:

| Artifact | Actual version | SHA-256 |
| --- | --- | --- |
| Windows desktop | 0.1.7 | `5ca8ad982113d086190ecf8ea684a504a4277099a377124bdffa8ca9fed6595e` |
| Windows CLI/MCP | 0.1.6 | `876dc88b9f55d7e8c4f5572868f2076b99436a6cfe12af44c1696fa8dc0178a1` |
| Linux headless | 0.1.6 | `9ae7fa9a203c6471cfd6bdd82ac5bf81683813c15fe652595976344fbbf96084` |
| Ubuntu desktop preview | 0.1.4 | `75566915bfe67d3b60fc3658f9d68fad40840d4e53b3c3aeb22fbf8450f43687` |

All four complete public downloads matched published checksums and local bytes,
including the copies attached to the final release. Linux and CLI artifacts were
not renamed to imply a new build. Existing published tags remain unchanged.

The README and installation-agent prompt were audited against actual packages,
CLI flags and platform differences. Links now point to this release. The prompt
preserves existing data, distinguishes desktop from headless verification,
sets up Windows login/background launching, keeps cloud answers disabled and
lets users choose indexed folders. Public command-line download requests need
a browser user-agent under the current Cloudflare policy; tested Linux commands
and the agent prompt account for this without requiring private credentials.

Final Windows check passed: installed 0.1.7 matches the installer executable;
resident background process, forced-CPU query worker, login launcher, unchanged
settings and SQLite integrity were verified. Genuine filename and Google speech
retrieval on the existing four-file fixture returned the expected file/passage;
the source excerpt was verified and a forged handle rejected. The measured
semantic request was 79.24 ms in this small prepared fixture, not startup, p95
or large-library evidence. Ignored report SHA-256:
`dc3cf39d46a91de6b5730768c48da29d85a91fdf4ba49ea4ca201806769b6e2c`.

The origin protection value exposed during diagnostics was rotated using a new
protected Infisical reference. All matching Cloudflare/NPM consumers were
updated; the retired value returns 403 and public browser requests work. No
secret values are committed. Gitea Actions remain disabled as requested.

This initial delivery is complete. Native keyboard/tray interaction was not
automated; actual GPU, macOS, broader Linux/clean-machine checks and broader
search-quality work remain deferred. Media/speech stay usable experimental
features with imperfect recognition, estimated times and known absent-content
false positives. This handoff does not claim all-platform production readiness.