Download the release. Verify the release.

This page is deliberately honest: the paid release installer or archive is not yet published in the current release manifest.

Current state: artifact publication held. Do not download from an unlisted mirror, and do not treat a filename or screenshot as a checksum.

Authoritative manifest

The machine-readable release-manifest.json is the binding source for version, source SHA, download URL, size, and SHA-256. Its empty artifact list is intentional until an exact paid release is approved and independently verified.

{
  "status": "not-published",
  "release": { "version": null, "sourceSha": null },
  "artifacts": [{"id": "windows-x64", "downloadUrl": null, "sha256": null}],
  "verification": { "algorithm": "sha256", "status": "no-artifact" }
}

Verification procedure when a release is published

1. Save the manifest and record its retrieval time and URL.
2. Confirm the release version and exact source SHA against the signed release receipt.
3. Download only the URL listed in the manifest; never infer a URL from a filename.
4. Compute SHA-256 locally and compare the full lowercase digest byte-for-byte.
5. Retain the manifest, digest, release notes, third-party notices, and verification command with the customer release record.

Until all five checks are possible, the release is not ready for installation. See support and security reporting for safe issue routing.