ltcai 4.3.1 → 4.4.0

package/docs/V4_3_2_INDEPENDENT_AUDIT_PACKAGE.md

@@ -0,0 +1,209 @@
+# Lattice AI v4.3.2 Independent Audit Package
+
+Date: 2026-06-13
+
+This package is for a separate AI or human reviewer. It summarizes what to
+inspect and how to reproduce validation. It is not itself an independent audit.
+
+## Current Architecture Summary
+
+- Desktop: Tauri 2 primary shell in `src-tauri/`; Electron fallback in
+  `desktop/electron/`.
+- Frontend: React + TypeScript + Vite SPA in `frontend/`, shipped from
+  `static/app/`.
+- API: FastAPI localhost backend; frontend uses generated OpenAPI types and
+  does not call Python directly.
+- Brain Core: independent Python package `lattice_brain`.
+- Storage: `StorageEngine` abstraction with SQLite default and optional
+  PostgreSQL/pgvector scale mode.
+- Portability: encrypted `.latticebrain` archives, backup/restore, inspect,
+  verify, import dry-run, and restore dry-run/restore APIs.
+- Privacy: default startup is local-only; external integrations and downloads
+  require explicit opt-in paths.
+
+## README Claims To Verify
+
+- Desktop startup and sidecar shutdown.
+- Brain graph search, grouping, focus, filtering, and graph persistence.
+- Ask no-model honesty and graph context.
+- Capture document ingestion.
+- Act workflow create/run surfaces and honest agent runtime status.
+- Library model/runtime availability.
+- System storage, backup, archive, Brain Network, and device identity status.
+- Backup/restore and `.latticebrain` portability flows.
+- Exact v4.3.2 artifact readiness.
+
+## Self-Audit Evidence Paths
+
+- Root evidence folder: `output/audits/v4.3.2-rc/`
+- Screenshots: `output/audits/v4.3.2-rc/screenshots/`
+- GIF: `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
+- Runtime logs: `output/audits/v4.3.2-rc/logs/`
+- Video: `output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm`
+
+## Key Screenshots / GIFs
+
+- Desktop startup:
+  `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
+- Brain graph:
+  `output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png`
+- Graph walkthrough:
+  `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
+- Ask:
+  `output/audits/v4.3.2-rc/screenshots/14-ask-context.png`
+- Capture:
+  `output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png`
+- Act:
+  `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png`
+- Library:
+  `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png`
+- System:
+  `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png`
+- Backup/restore:
+  `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png`
+- `.latticebrain`:
+  `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png`
+
+## Validation Results
+
+See `docs/V4_3_2_VALIDATION_REPORT.md`.
+
+Expected green checks:
+
+- Python compile
+- Ruff
+- unit tests
+- live integration tests
+- frontend lint
+- TypeScript typecheck
+- Playwright visual tests
+- Tauri check/build
+- release artifact validation
+- wheel smoke
+- npm pack dry-run
+- README-linked Markdown link check
+- Vercel static build
+
+## Commands To Reproduce
+
+```bash
+npm install
+npm run check:python
+node scripts/run_python.mjs -m ruff check .
+npm run lint
+npm run typecheck
+npm run test:unit
+LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration
+npm run test:visual
+npm run desktop:tauri:check
+npm run release:artifacts
+npm run release:validate
+node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.2-py3-none-any.whl
+npm pack --dry-run
+npm run docs:check-links
+npm run vercel:build
+```
+
+For live integration tests, start a local backend first or set
+`LTCAI_TEST_BASE_URL` to an already running test backend.
+
+## Known Limitations
+
+- v4.3.2 is not tagged or released by this preparation work.
+- External registries are not published by this preparation work.
+- Ask needs a loaded model for generated answers; no-model state is expected to
+  be honest rather than successful.
+- PostgreSQL/pgvector and Docker flows are optional and consent-gated.
+- Live Postgres migration validation is not part of this release-prep pass
+  without fresh explicit Docker consent.
+- Vercel is documentation-only and intentionally does not host the product
+  runtime.
+
+## Changed Files Since v4.3.1
+
+Exact manifest prepared for review:
+
+```text
+.gitignore
+ARCHITECTURE.md
+FEATURE_STATUS.md
+README.md
+RELEASE.md
+RELEASE_NOTES.md
+RELEASE_NOTES_v4.3.2.md
+SECURITY.md
+docs/CHANGELOG.md
+docs/V4_3_2_DOCUMENTATION_CLEANUP_REPORT.md
+docs/V4_3_2_GITHUB_VERCEL_CHECK_REPORT.md
+docs/V4_3_2_GRAPH_UX_REPORT.md
+docs/V4_3_2_INDEPENDENT_AUDIT_PACKAGE.md
+docs/V4_3_2_PRODUCT_POLISH_REPORT.md
+docs/V4_3_2_SELF_AUDIT_REPORT.md
+docs/V4_3_2_VALIDATION_REPORT.md
+docs/V4_DIGITAL_BRAIN_RECOVERY.md
+frontend/openapi.json
+frontend/src/components/primitives.tsx
+frontend/src/pages/Act.tsx
+frontend/src/pages/Ask.tsx
+frontend/src/pages/Brain.tsx
+frontend/src/pages/Capture.tsx
+frontend/src/pages/Library.tsx
+frontend/src/pages/System.tsx
+lattice_brain/__init__.py
+latticeai/__init__.py
+latticeai/core/marketplace.py
+latticeai/core/multi_agent.py
+latticeai/core/workspace_os.py
+output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif
+output/audits/v4.3.2-rc/logs/archive-create.json
+output/audits/v4.3.2-rc/logs/archive-import-dry-run.json
+output/audits/v4.3.2-rc/logs/archive-verify.json
+output/audits/v4.3.2-rc/logs/backup-health-after-ui.json
+output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt
+output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json
+output/audits/v4.3.2-rc/logs/desktop-sidecar-health.json
+output/audits/v4.3.2-rc/logs/graph-after-upload.json
+output/audits/v4.3.2-rc/logs/readme-upload-note.json
+output/audits/v4.3.2-rc/logs/self-audit-browser-results.json
+output/audits/v4.3.2-rc/logs/storage.json
+output/audits/v4.3.2-rc/logs/upload-note.json
+output/audits/v4.3.2-rc/logs/workflow-create.json
+output/audits/v4.3.2-rc/screenshots/01-first-startup.png
+output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png
+output/audits/v4.3.2-rc/screenshots/03-graph-search.png
+output/audits/v4.3.2-rc/screenshots/04-graph-collapse-group.png
+output/audits/v4.3.2-rc/screenshots/05-graph-focus-neighborhood.png
+output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png
+output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png
+output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png
+output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png
+output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png
+output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png
+output/audits/v4.3.2-rc/screenshots/12-library-model-status.png
+output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png
+output/audits/v4.3.2-rc/screenshots/14-ask-context.png
+output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png
+output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm
+package-lock.json
+package.json
+pyproject.toml
+scripts/build_vercel_static.mjs
+scripts/check_markdown_links.mjs
+src-tauri/Cargo.lock
+src-tauri/Cargo.toml
+src-tauri/src/main.rs
+src-tauri/tauri.conf.json
+static/app/asset-manifest.json
+static/app/assets/index-BhPuj8rT.js
+static/app/assets/index-BhPuj8rT.js.map
+static/app/assets/index-CHHal8Zl.css
+static/app/assets/index-pdzil9ac.js
+static/app/assets/index-pdzil9ac.js.map
+static/app/assets/index-yZswHE3d.css
+static/app/index.html
+tests/visual/mock_server.cjs
+tests/visual/v3.spec.js
+vercel.json
+vscode-extension/package-lock.json
+vscode-extension/package.json
+```

package/docs/V4_3_2_PRODUCT_POLISH_REPORT.md

@@ -0,0 +1,57 @@
+# Lattice AI v4.3.2 Product Polish Report
+
+Date: 2026-06-13
+
+## Scope
+
+v4.3.2 removes end-user polish debt from the React/Vite desktop SPA while
+preserving the v4.3.1 architecture and backend API contracts.
+
+## Implemented
+
+- Added structured render primitives for nested runtime data, operation
+  results, entity lists, and value previews.
+- Replaced normal product JSON dumps in Brain, Ask, Capture, Act, Library, and
+  System with readable status panels and result cards.
+- Kept technical identifiers visible when they matter, especially for agents,
+  storage, archive, and device identity records.
+- Added System archive import dry-run and confirmed import controls backed by
+  existing `.latticebrain` archive APIs.
+- Improved System status for health, storage mode, backup health, device
+  identity, Brain Network, hardening, security, admin, account, SSO, snapshots,
+  activity, and settings.
+- Preserved honest unavailable states for optional models, Postgres, Docker,
+  sqlite-vec, external integrations, and unavailable runtime actions.
+- Added app-level Tauri exit cleanup so the FastAPI sidecar is shut down on
+  normal macOS quit.
+
+## Files Touched
+
+- `frontend/src/components/primitives.tsx`
+- `frontend/src/pages/Brain.tsx`
+- `frontend/src/pages/Ask.tsx`
+- `frontend/src/pages/Capture.tsx`
+- `frontend/src/pages/Act.tsx`
+- `frontend/src/pages/Library.tsx`
+- `frontend/src/pages/System.tsx`
+- `src-tauri/src/main.rs`
+- `tests/visual/mock_server.cjs`
+- `tests/visual/v3.spec.js`
+
+## Evidence
+
+- First startup: `output/audits/v4.3.2-rc/screenshots/01-first-startup.png`
+- Brain portability and backup: `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png`
+- System archive flows: `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png`
+- System storage status: `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png`
+- Workflow create/run: `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png`
+- Agent runtime status: `output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png`
+- Brain Network and device identity: `output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png`
+- Library model status: `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png`
+- Desktop sidecar startup: `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
+
+## Result
+
+PASS. The visible product surfaces are now readable, API-backed, and explicit
+about unavailable optional capabilities. No fake controls or demo-only screens
+were added.

package/docs/V4_3_2_SELF_AUDIT_REPORT.md

@@ -0,0 +1,63 @@
+# Lattice AI v4.3.2 Self-Audit Report
+
+Date: 2026-06-13
+
+## Method
+
+The audit used the built v4.3.2 product, not source-code claims. It started a
+local FastAPI backend with an isolated data directory, seeded a real document
+through the upload API, opened the React SPA, exercised product flows, captured
+screenshots/GIF evidence, launched the rebuilt Tauri app, and verified desktop
+sidecar startup/shutdown.
+
+## Runtime Inputs
+
+- API base: `http://127.0.0.1:4932`
+- Audit data dir: `/tmp/lattice-v432-audit`
+- Desktop data dir: `/tmp/lattice-v432-desktop3`
+- Uploaded note: `/tmp/lattice-v432-files/v432-audit-note.md`
+- Archive path: `/tmp/lattice-v432-audit/self-audit.latticebrain`
+
+## Observed Results
+
+| Scenario | Result | Evidence |
+| --- | --- | --- |
+| First startup | PASS | `output/audits/v4.3.2-rc/screenshots/01-first-startup.png` |
+| Graph exploration baseline | PASS | `output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png` |
+| Graph search/collapse/focus | PASS | `output/audits/v4.3.2-rc/screenshots/03-graph-search.png`, `04-graph-collapse-group.png`, `05-graph-focus-neighborhood.png` |
+| Ask no-model honesty and graph context | PASS | `output/audits/v4.3.2-rc/screenshots/14-ask-context.png` |
+| Capture document ingestion | PASS | `output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png` |
+| Brain backup and graph portability | PASS | `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png` |
+| System archive export/inspect/verify/import/restore dry-run | PASS | `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png` |
+| Storage and Postgres optional status | PASS | `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png` |
+| Workflow create/run surfaces | PASS | `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png` |
+| Agent runtime availability | PASS | `output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png` |
+| Brain Network and device identity | PASS | `output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png` |
+| Library model unavailable honesty | PASS | `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png` |
+| Desktop sidecar startup | PASS | `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png` |
+| Desktop sidecar shutdown | PASS | `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt` |
+
+## Runtime Logs
+
+- Upload result: `output/audits/v4.3.2-rc/logs/upload-note.json`
+- README evidence upload: `output/audits/v4.3.2-rc/logs/readme-upload-note.json`
+- Graph after upload: `output/audits/v4.3.2-rc/logs/graph-after-upload.json`
+- Archive create: `output/audits/v4.3.2-rc/logs/archive-create.json`
+- Archive verify: `output/audits/v4.3.2-rc/logs/archive-verify.json`
+- Archive import dry-run: `output/audits/v4.3.2-rc/logs/archive-import-dry-run.json`
+- Storage: `output/audits/v4.3.2-rc/logs/storage.json`
+- Backup health: `output/audits/v4.3.2-rc/logs/backup-health-after-ui.json`
+- Workflow create: `output/audits/v4.3.2-rc/logs/workflow-create.json`
+- Browser automation results: `output/audits/v4.3.2-rc/logs/self-audit-browser-results.json`
+- Desktop health: `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
+
+## Media
+
+- Graph walkthrough GIF: `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
+- Graph walkthrough video: `output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm`
+
+## Result
+
+PASS. The observed product behavior supports the v4.3.2 RC claims. No placeholder
+or fake functionality was accepted as complete. Optional capabilities remain
+honestly unavailable unless their runtime dependencies and user consent exist.

package/docs/V4_3_2_VALIDATION_REPORT.md

@@ -0,0 +1,97 @@
+# Lattice AI v4.3.2 Validation Report
+
+Date: 2026-06-13
+
+## Summary
+
+v4.3.2 validation is green for the implemented product polish, graph UX, desktop
+shutdown, exact-version release artifacts, and the release-prep documentation /
+Vercel static-build fixes.
+
+## Release-Prep Fix Validation
+
+These checks were rerun after the README badge restore, diagram-first
+`ARCHITECTURE.md` rewrite, Vercel static-only configuration fix, and linked-doc
+cleanup.
+
+| Check | Result |
+| --- | --- |
+| `node -e "JSON.parse(require('fs').readFileSync('vercel.json','utf8'))"` | PASS |
+| `npm run vercel:build` | PASS, generated `vercel-static/index.html` |
+| `npm run docs:check-links` | PASS, README plus 15 README-linked Markdown files |
+| Mermaid structural sanity check for `ARCHITECTURE.md` | PASS, 13 Mermaid blocks; `mmdc` was not installed locally |
+| README badge link validation | PASS for PyPI, VS Code Marketplace, Open VSX, CI, license, and badge images; npm package page returned a CLI-only Cloudflare 403, so package identity was validated through `npm view ltcai` and `https://registry.npmjs.org/ltcai` |
+| Registry version check | PASS, PyPI/npm/VS Code Marketplace/Open VSX currently report `4.3.1`; README does not claim v4.3.2 external registry publication |
+| `node scripts/run_python.mjs -m pytest tests/unit/test_server_app_v14_decomposition.py::test_markdown_current_release_references_match_release tests/unit/test_truth_floor_t1_static.py::test_readme_does_not_overclaim_llm_driven_agents -v` | PASS, 2 passed |
+| `npm run lint` | PASS |
+| `npm pack --dry-run` | PASS, `ltcai-4.3.2.tgz`, 305 files, 2.9 MB |
+| `npx --yes vercel@54.12.2 build` | BLOCKED by local Vercel linkage only: `project_settings_required`; no `.vercel` project settings or credentials are present in this checkout. Static build/config validation above passed. |
+
+No product runtime code changed in this release-prep fix, and release artifacts
+were not rebuilt.
+
+## Commands
+
+| Check | Result |
+| --- | --- |
+| `npm run check:python` | PASS, compiled 691 modules |
+| `node scripts/run_python.mjs -m ruff check .` | PASS |
+| `npm run lint` | PASS |
+| `npm run typecheck` | PASS |
+| `npm run test:unit` | PASS, 602 passed, 2 warnings |
+| `LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration` | PASS, 9 passed, 1 skipped |
+| `npm run test:visual` | PASS, 12 Playwright tests |
+| `npm run desktop:tauri:check` | PASS |
+| `npm run release:artifacts` | PASS |
+| `npm run release:validate` | PASS |
+| `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.2-py3-none-any.whl` | PASS |
+| `npm pack --dry-run` | PASS |
+| Rebuilt desktop app startup/shutdown verification | PASS |
+| `npm run vercel:build` | PASS |
+| Markdown link check for README-linked docs | PASS |
+
+## Artifact Validation
+
+Exact v4.3.2 artifacts were found:
+
+- `dist/ltcai-4.3.2-py3-none-any.whl`
+- `dist/ltcai-4.3.2.tar.gz`
+- `dist/ltcai-4.3.2.vsix`
+- `ltcai-4.3.2.tgz`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.2_aarch64.dmg`
+
+The release validator warned that `dist/` also contains older historical
+artifacts. This is not a v4.3.2 artifact failure, but release uploads must use
+only the exact filenames above and never a wildcard over the `dist/` directory.
+
+## Desktop Verification
+
+- The rebuilt Tauri app launched from
+  `src-tauri/target/release/bundle/macos/Lattice AI.app/Contents/MacOS/lattice-ai-desktop`.
+- `/health` responded on `127.0.0.1:8765` with version `4.3.2`, local mode, and
+  the isolated data dir `/tmp/lattice-v432-desktop3`.
+- Normal macOS quit released port 8765.
+- Evidence:
+  - `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
+  - `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt`
+  - `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
+
+## Notes
+
+- The live Postgres migration test remained skipped because v4.3.2 did not
+  request fresh Docker consent. Postgres remains optional and was not changed by
+  this RC.
+- Wheel smoke emitted optional MLX warnings inside the isolated venv, then
+  passed imports and `/health`.
+- Rust reported a future-incompatibility warning from transitive crate
+  `block v0.1.6`; `cargo check` passed.
+- GitHub Actions for the v4.3.2 RC commit were green before release-prep doc
+  cleanup: `CI` and `Visual Smoke` both completed successfully for
+  `8f3d182ee81bb395722ebab792dfd70f35e19e96`.
+- Vercel config is intentionally documentation-only: it builds
+  `vercel-static/index.html`, pins the Framework Preset to "Other", and does
+  not attempt to auto-detect or host `server.py` / the desktop runtime.
+
+## Result
+
+PASS. v4.3.2 RC artifacts and runtime behavior are validated.

package/docs/V4_3_3_VALIDATION_REPORT.md

@@ -0,0 +1,46 @@
+# Lattice AI v4.3.3 Validation Report
+
+Date: 2026-06-13
+
+v4.3.3 validation is green for the post-cleanup release tree. The release
+rebuilds exact-current-main artifacts after the independent dead-code,
+architecture, and runtime audit cleanup; v4.3.2 artifacts are intentionally not
+reused.
+
+## Validation Results
+
+| Check | Result |
+| --- | --- |
+| `npm run check:python` | PASS, compiled 689 modules |
+| `node scripts/run_python.mjs -m ruff check .` | PASS |
+| `npm run lint` | PASS |
+| `npm run typecheck` | PASS, frontend TypeScript and VS Code extension build |
+| `npm run test:unit` | PASS, 602 tests |
+| `LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration` | PASS, 9 tests and 1 consent-gated Postgres migration test skipped |
+| `npm run test:visual` | PASS, 12 Playwright tests |
+| `npm run desktop:tauri:check` | PASS |
+| `npm run release:artifacts` | PASS |
+| `npm run release:validate` | PASS for exact v4.3.3 wheel, sdist, npm tgz, VSIX, and DMG |
+| `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.3-py3-none-any.whl` | PASS, `/health` reported 4.3.3 |
+| `npm pack --dry-run` | PASS, `ltcai-4.3.3.tgz`, 292 files, 2.9 MB |
+| `node scripts/run_python.mjs -m twine check dist/ltcai-4.3.3-py3-none-any.whl dist/ltcai-4.3.3.tar.gz` | PASS |
+| `npm run docs:check-links` | PASS, README and 16 README-linked Markdown files |
+| `npm run vercel:build` | PASS, static placeholder generated for 4.3.3 |
+
+## Artifacts
+
+| Artifact | SHA-256 |
+| --- | --- |
+| `dist/ltcai-4.3.3-py3-none-any.whl` | `716d0029a6053edacde13cad978f38e41a9c67b458eba37421ae5594e7b99948` |
+| `dist/ltcai-4.3.3.tar.gz` | `77c19e9ad3e0cea757265b707b6414aef53a9d132f0456b7f0c36bcf09ece6b4` |
+| `ltcai-4.3.3.tgz` | `fb29c81152fe13854e6c3ba07f5ba8b8b14f25eedbb1920600d05ef768bec044` |
+| `dist/ltcai-4.3.3.vsix` | `28f243dbea1d0c49f78eb09176ae5c1f95d0d8530e49a103664dd338e53eac88` |
+| `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.3_aarch64.dmg` | `e717a53f83762799a32e2fa1e23c9a6fd5b2b2221bb503d12e7940e57a3455a2` |
+
+## Notes
+
+- `npm run release:validate` warned that historical artifacts remain in
+  `dist/`; uploads must use only the exact v4.3.3 filenames above.
+- The live Postgres migration test remains skipped unless the owner explicitly
+  sets Docker/Postgres consent for that destructive external dependency path.
+- External registry publishing was not attempted.