v0.1.52 release notes

What changed

• Fixes the direct-use self_serve_evaluation_starter.v1.zip runtime path so first-run uses the tenant-local compose file, mounts vendored fixture inputs correctly, and resolves the packaged run successfully after extraction.
• Aligns seeded file-fixture adapter timestamps with the issued receipt window so the bundled public evaluation is immediately runnable without a buyer-specific handoff.
• Rewrites vendored run_context.adapter.config_hash values during provisioning so file and file_fixture workspaces remain internally consistent after adapter file paths are rewritten.
• Bumps the public mirror, quickstarts, proof snippets, and runtime image references to v0.1.52.

Distribution

• Public mirror release tag: v0.1.52
• Standalone runtime assets:
  • patentchecker-linux-x64.tar.gz
  • patentchecker-macos-universal.tar.gz
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as: self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.52

Validation

• npm run build
• npm run docs:public-release-surface:check
• npm run ci:public-release-surface-invariants
• node --test dist/tests/self_serve_issue_evaluation.test.js dist/tests/self_serve_starter_package.test.js dist/tests/self_serve_doctor.test.js dist/tests/self_serve_provision_client.test.js dist/tests/self_serve_rehearse_evaluation_starter.test.js

v0.1.51 release notes

What changed

• Makes the public self_serve_evaluation_starter.v1.zip directly runnable after download by seeding the evaluation workspace and issued artifacts into the release bundle.
• Aligns the buyer-facing quickstarts, landing pages, proof snippets, and self-hosting docs to the direct-use evaluation starter and current public mirror tag.
• Hardens self-hosted release execution by running containerized determinism and Trivy paths without leaving root-owned workspace artifacts behind.
• Removes release-number churn from valuation and self-serve request intake tests by deriving the current version from package.json.

Distribution

• Public mirror release tag: v0.1.51
• Standalone runtime assets:
  • patentchecker-linux-x64.tar.gz
  • patentchecker-macos-universal.tar.gz
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as: self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.51

Validation

• npm run build
• npm run docs:public-release-surface:check
• npm run ci:public-release-surface-invariants
• node --test dist/tests/patent_valuation.test.js dist/tests/patent_valuation_cli.test.js dist/tests/self_serve_import_omnisgenomics_patent_requests.test.js dist/tests/self_serve_ops_request_queue_lifecycle.test.js

v0.1.50 release notes

What changed

• Adds the 14-week evaluation path and production-key upgrade path as first-class self-serve workflows, including issuance, shipping, activation returns, follow-ups, outcomes, reports, alerts, and schedulers.
• Adds the OmnisGenomics ops request queue lifecycle, so website PatentChecker trial and key requests can be imported, claimed, completed, reported, and alerted from repo-owned workflows.
• Hardens the public release and support surface with stricter release workflow invariants, public release surface checks, generated wiki link repair, local runtime bootstrap checks, deterministic zip helpers, and shared schema validation.
• Expands evidence and demo collateral for buyer, government, NAVSEA, valuation, and archive flows while keeping generated artifacts deterministic and verifiable.
• Tightens enzyme batch-eval and promotion workflow coverage with schema-backed fixtures, review queues, promotion templates, and calibration preflight status checks.
• Refreshes RepoIntel orientation artifacts and repository docs after workflow regrouping, path guard changes, and release/support surface updates.

Distribution

• Public mirror release tag: v0.1.50
• Standalone runtime assets:
  • patentchecker-linux-x64.tar.gz
  • patentchecker-macos-universal.tar.gz
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as: self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.50

Validation

• npm run build
• npm run docs:public-release-surface:check
• npm run ci:public-release-surface-invariants
• npm run ci:workflow-security-invariants
• npm run ci:runtime-metadata-invariants
• npm run ci:supported-surfaces-invariants
• npm run sellable:v1
• npm run test

v0.1.40 release notes

What changed

• Adds standalone PatentChecker runtime bundles for linux-x64 and macos-universal, so users can run the main CLI without a repo checkout, npm install, or Docker.
• Wires the standalone tarballs into the signed release asset set, release manifest, GitHub source release upload, and public mirror allowlist.
• Documents the standalone install path in the main README, landing page, runner release doc, and self-hosting guide.
• Adds regression coverage for standalone bundle construction and execution, plus release-asset reference checks for the new tarballs.

Distribution

• Public mirror release tag: v0.1.40
• Standalone runtime assets:
  • patentchecker-linux-x64.tar.gz
  • patentchecker-macos-universal.tar.gz
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.40

Validation

• npm run build
• npm run ci:workflow-security-invariants
• node --test dist/tests/public_release_asset_references.test.js dist/tests/standalone_bundle.test.js dist/tests/licensing_issue_tool.test.js
• bash scripts/release_standalone_bundles.sh --os linux-x64 --out-dir /tmp/patentchecker-standalone-release-check --json
• bash scripts/release_standalone_bundles.sh --os macos-universal --out-dir /tmp/patentchecker-standalone-release-check-macos --json

v0.1.39 release notes

What changed

• Replaces the Node 20-backed source release upload action with a pinned gh release upload step.
• Advances the Docker release actions to their current Node 24-backed tags in the release workflow.
• Documents the gh CLI runner requirement and pins the no-softprops/action-gh-release policy in workflow security tests.

Distribution

• Public mirror release tag: v0.1.39
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.39

Validation

• npm run build
• node --test dist/tests/workflow_security_invariants.test.js dist/tests/release_workflow_invariants.test.js
• npm run sellable:v1

v0.1.38 release notes

What changed

• Publishes the workflow fix that lets manual workflow_dispatch releases continue when the public-mirror token is unavailable.
• Keeps release events fail-closed for missing public-mirror credentials, but downgrades manual hosted dispatches to a warning plus source-release/GHCR publish.
• Documents the fallback path and pins the behavior in workflow invariant tests.

Distribution

• Public mirror release tag: v0.1.38
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.38

Validation

• npm run build
• node --test dist/tests/workflow_security_invariants.test.js dist/tests/release_workflow_invariants.test.js
• npm run sellable:v1

v0.1.37 release notes

What changed

• Aligns the public mirror helper and public-facing verification docs with the assets the release workflow actually ships.
• Keeps the buyer verification path centered on demo_offline_packet.zip instead of the retired legacy evidence-bundle filename.
• Adds a regression test so release docs and the mirror helper fail closed if they drift back to an unpublished asset name or stale pinned tag.

Distribution

• Public mirror release tag: v0.1.37
• Evaluation starter asset: self_serve_evaluation_starter.v1.zip
• Generic self-serve starter remains available as self_serve_client_starter.v1.zip
• Runtime image: ghcr.io/omniscoder/patentchecker:v0.1.37

Validation

• npm run build
• node --test dist/tests/public_release_asset_references.test.js dist/tests/release_workflow_invariants.test.js dist/tests/workflow_security_invariants.test.js
• npm run sellable:v1

v0.1.33 (supersedes v0.1.32)

• v0.1.33 is the canonical tag for this release. v0.1.32 is retained as-is for immutability and marked superseded.
• PatSeq track packs are now verifiable buyer artifacts:
  • patentchecker evidence patseq pack-tracks emits deterministic ZIPs.
  • patentchecker evidence patseq verify-pack fails closed (hashes, required files, canonical family manifest, BED validity/sorting, and reference integrity).
  • Verify output includes summary (email-friendly) and patseq_hit_schema (schema pin).
• This release ships a deterministic PatSeq sample track pack ZIP: patseq_track_pack.sample.zip (+ .sha256).
• Public mirror (buyer download path): omniscoder/patentchecker-releases.

• Evidence loci are 1-based inclusive.
• Browser tracks use BED 0-based half-open intervals.

Evidence Kit (cryptographic chain-of-custody for computational claims)

• CLI surface: patentchecker evidence-kit {keygen,build,verify,zip}.
• Canonical manifest bytes (strict UTF-8 + LF-only, sorted keys, no numbers) + Ed25519 signature.
• Fail-closed verify on tampering, missing/extra files, symlinks, path traversal tricks, unsafe perms, and non-canonical manifest bytes.
• Verification emits a deterministic receipt and prints the receipt sha256 to stderr.
• Deterministic ZIP output plus CI drift gate via a golden fixture.
• Frozen format spec (ABI): docs/evidence-bundle-v1.md (v1 semantics are stable).

Buyer demo: self-verifying evidence bundle

• Asset: demo_crispr_ip_drift_outputs.evidence_bundle.v1.v0.1.33.zip
• Expected signer fingerprint (public demo key): ed25519:12a9ebc6fb385ba47af3d246775e4054e9976d9e79065dfcf22b8719749a0dfe

patentchecker evidence-kit verify \
  --bundle-dir bundle_dir \
  --expected-fingerprint ed25519:12a9ebc6fb385ba47af3d246775e4054e9976d9e79065dfcf22b8719749a0dfe \
  --receipt-out verification_receipt.txt

PatSeq evidence + genome track packs

• PatSeq hits schema: patseq_hit.v2.
• Mapping modes:
  • --mode exact (default): k-mer index, strict identity.
  • --mode tolerant: deterministic seeded + window-bounded + banded DP, requires explicit knobs (--max-mismatches, --max-indel-bp, --window-bp).
• Deterministic track packs (BED + UCSC trackDb.txt + IGV session), optional --collapse-family, deterministic ZIPs.

Signed sequence listing evidence packs (ST.25 / ST.26)

• Deterministic ST.25 parser → FASTA + canonical index.
• Signed, content-addressed evidence packs for ST.25 and ST.26.
• Fetch/ingest for EPO sequence listing document.zip and WIPO PCT published listing ZIPs, producing signed evidence packs.

Changes

• Fix container ENTRYPOINT so docker run ... -w works reliably.
• Risk plot: explicit font stack + deterministic label spacing to prevent overlapping callouts.

Verify before you buy

• example_platform_risk_bundle.v1.zip (escalation)
• example_platform_risk_bundle_low_signal.v1.zip (baseline)

Escalation bundle

TAG=v0.1.28
MIRROR=omniscoder/patentchecker-releases
ASSET=example_platform_risk_bundle.v1.zip

rm -rf bundle_dir "$ASSET" "$ASSET.sha256"
gh release download "$TAG" -R "$MIRROR" -p "$ASSET" -p "$ASSET.sha256"
sha256sum -c "$ASSET.sha256"

unzip -q "$ASSET" -d bundle_dir
cd bundle_dir

RUNS="$(ls -d run/run_* 2>/dev/null | LC_ALL=C sort | paste -sd, -)"
docker pull ghcr.io/omniscoder/patentchecker:"$TAG"
docker run --rm -v "$PWD:/bundle" -w /bundle \
  ghcr.io/omniscoder/patentchecker:"$TAG" \
  patentchecker risk verify \
    --ontology example_platform_risk_ontology.v0.1.json \
    --timeline example_platform_risk_timeline.v0.1.json \
    --runs "$RUNS" \
    --strict --format json

Low-signal baseline

TAG=v0.1.28
MIRROR=omniscoder/patentchecker-releases
ASSET=example_platform_risk_bundle_low_signal.v1.zip

rm -rf bundle_dir "$ASSET" "$ASSET.sha256"
gh release download "$TAG" -R "$MIRROR" -p "$ASSET" -p "$ASSET.sha256"
sha256sum -c "$ASSET.sha256"

unzip -q "$ASSET" -d bundle_dir
cd bundle_dir

RUNS="$(ls -d run/run_* 2>/dev/null | LC_ALL=C sort | paste -sd, -)"
docker pull ghcr.io/omniscoder/patentchecker:"$TAG"
docker run --rm -v "$PWD:/bundle" -w /bundle \
  ghcr.io/omniscoder/patentchecker:"$TAG" \
  patentchecker risk verify \
    --ontology example_platform_low_signal_risk_ontology.v0.1.json \
    --timeline example_platform_low_signal_risk_timeline.v0.1.json \
    --runs "$RUNS" \
    --strict --format json

Verify before you buy

Risk bundle (escalation)

set -euo pipefail

TAG=v0.1.27
MIRROR_REPO=omniscoder/patentchecker-releases

rm -rf bundle_dir example_platform_risk_bundle.v1.zip example_platform_risk_bundle.v1.zip.sha256

gh release download "$TAG" -R "$MIRROR_REPO" \
  -p example_platform_risk_bundle.v1.zip \
  -p example_platform_risk_bundle.v1.zip.sha256

sha256sum -c example_platform_risk_bundle.v1.zip.sha256

mkdir -p bundle_dir
unzip -q example_platform_risk_bundle.v1.zip -d bundle_dir

# Verify using the signed runner image (no local install required)
docker pull ghcr.io/omniscoder/patentchecker:"$TAG"
docker run --rm \
  -v "$PWD/bundle_dir:/bundle" -w /bundle \
  ghcr.io/omniscoder/patentchecker:"$TAG" \
  bash VERIFY_BUNDLE.sh

Risk bundle (low-signal baseline)

set -euo pipefail

TAG=v0.1.27
MIRROR_REPO=omniscoder/patentchecker-releases

rm -rf bundle_dir example_platform_risk_bundle_low_signal.v1.zip example_platform_risk_bundle_low_signal.v1.zip.sha256

gh release download "$TAG" -R "$MIRROR_REPO" \
  -p example_platform_risk_bundle_low_signal.v1.zip \
  -p example_platform_risk_bundle_low_signal.v1.zip.sha256

sha256sum -c example_platform_risk_bundle_low_signal.v1.zip.sha256

mkdir -p bundle_dir
unzip -q example_platform_risk_bundle_low_signal.v1.zip -d bundle_dir

docker pull ghcr.io/omniscoder/patentchecker:"$TAG"
docker run --rm \
  -v "$PWD/bundle_dir:/bundle" -w /bundle \
  ghcr.io/omniscoder/patentchecker:"$TAG" \
  bash VERIFY_BUNDLE.sh

What’s in this release

• patentchecker risk compile|verify|plot: deterministic risk timeline compiler + offline verifier + SVG/PNG/PDF charts.
• Public, buyer-neutral reference bundles (escalation + low-signal baseline), mirrored to omniscoder/patentchecker-releases.