CivicNewspaper v0.3.2 Local Isolated Package Report

Evidence header

• Release: v0.3.2 Windows public-beta candidate
• Product commit: bfa37f87dda8aa61c98da4bd7bc2be907581a416
• Installer: The Civic Desk_0.3.2_x64-setup.exe
• Installer SHA256: 636D87041396603456634E6B47AE1071E8726D8D05C0FC08768D5B9E92A71C83
• Installer size: 5274104 bytes
• App version: 0.3.2
• Embedded build ID: bfa37f87dda8aa61c98da4bd7bc2be907581a416
• Gate machine: DESKTOP-S9MHP33
• Windows: Microsoft Windows NT 10.0.26200.0
• First-run profile: .agent-runs/release-smoke-20260709-181659/packaged-walkthrough/app-data
• Live-model profile: .agent-runs/release-smoke-20260709-181659/packaged-walkthrough/core-flow/app-data
• Local model: phi4-mini:latest, Ollama 0.31.2
• RC receipt: .agent-runs/release-candidate-20260709-182734/release-candidate-receipt.json
• RC receipt SHA256: 12C80AB694F484BB1176CF1F37590E3BEDD853985D020997BF47BCAEDBBCBE75
• Evidence ZIP: .agent-runs/release-candidate-20260709-182734.zip
• Evidence ZIP SHA256: 0405CA6CFA7843C6E6B643AB53973F7BE846EE13D488F393AF506F6DE16540CD
• Temporary publish URL: https://present-tablet-sx2h.here.now

This report covers a fresh silent install and two isolated app-data profiles on the gate machine. It is local installed-package proof for the Windows beta candidate, not a claim of VM proof, current signing verification, cross-platform support, or credentialed external-provider coverage.

The candidate hash above does not match the older installer currently published on GitHub. The new candidate has not been uploaded in this work unit, so the published asset must not be described as this tested build until replacement and hosted-hash verification occur.

Results

• PASS - NSIS lifecycle: silent install, installed launch, uninstaller presence, and silent uninstall; 11 checks, 0 failed.
• PASS - Dependency-absent first run: the forced unused Ollama endpoint was unreachable before launch.
• PASS - Accessible local-AI choice: Install local AI runtime, Skip for now, and Continue without AI were located by accessible name.
• PASS - Persisted skip state: ai.setup_skipped=true and onboarding_complete=true.
• PASS - Zero-source usability: source count 0; Daily Scan exposed Add Sources First and Go to Sources.
• PASS - Embedded artifact identity: the installed WebView build ID matched the product commit in first-run and core-flow sessions.
• PASS - Live installed-app Daily Scan: two controlled official sources produced 5 scan leads and 5 queue leads.
• PASS - Linked evidence: the selected lead had linked evidence through actual Tauri IPC commands.
• PASS - Live-model draft generation: phi4-mini:latest was reachable; draft ID 1 persisted with 469 characters.
• PASS - Workbench persistence: the app reloaded, opened Drafts, and loaded the same draft title in Workbench.
• PASS - Independent database chain: 2 sources, 7 evidence rows, 5 scan leads, 5 queue leads, 1 draft, and 1 linked draft.
• PASS - Stable release smoke: 14 checks, 0 failed, 0 skipped.
• PASS - Frontend tests and coverage: 27 files, 238 tests; 63.45% line coverage against the 60% floor.
• PASS - Rust tests and coverage: 250 tests; 70.13% regions, 61.91% functions, 73.47% lines.
• PASS - Default-model bakeoff: civic signals produced 3 leads; routine/noise produced 0 leads; no JSON repair.
• PASS - Dependency audit: npm moderate threshold and Cargo audit with current machine-readable waivers.
• PASS - Anonymous here.now publish: the temporary preview URL is recorded above.

Severity rollup

Blocker: 0. Critical: 0. Major: 0. Minor: 0. Nit: 0.

Verdict

Historical PASS for that local Windows candidate only. The exact installed artifact completed the dependency-absent first-run path and the live-model source-to-Workbench path with no failed or skipped release-smoke checks. This report is not evidence for a newer candidate or the current GitHub download. Stable-release requirements remain out of scope: final published signature/checksum binding, cross-platform package proof, and credentialed external publishing providers.