trust.solstone.app

solstone for macos 2.0.35 v2 record

this is the v2 release record of solstone for macos 2.0.35, signed 2026-10-16T15:05:56.000Z. it names the exact final bytes sol pbc recorded as this release: each file's url, length, and sha256. the register's freshness is asserted until 2026-10-24T09:39:45Z.

publication
◆ sol pbc says publishing records
evidence freshness
✓ signed asserted until 2026-10-24T09:39:45Z https://transparency.solstone.app/v2/metadata/timestamp.json
verification
⟳ verifier verified 2026-10-17T09:43:35Z how this was checked key
rebuild
▤ register not attempted

what the record says it proves

the record states what it does and does not prove; both lists below are rendered from the signed record, word for word.

what this proves

  • sol pbc recorded these exact final bytes as a release of solstone for macos 2.0.35: 1 file, named by url, length and sha256. this record was signed at 2026-10-16T15:05:56.000Z and is asserted until 2026-10-23T15:05:56Z.

what this does not prove

  • that any source code produced these exact bytes. that is a reproducible-build claim this record does not make.
  • that this is the version any owner is running. this record says nothing about what is installed on any device.
  • that this is the newest build, or the one available to download now. what is offered for download is a separate question this record does not answer.
  • that the software is safe, free of defects, fit for any purpose, or that anyone reviewed or audited it. a signature says who recorded the bytes, not what the bytes do.
  • that builds distributed through the ios or android app stores are these bytes. store builds are not described in this record.

raw evidence

itemdetailraw
release recordsigned record (DSSE envelope inside)https://transparency.solstone.app/v2/targets/software/solstone-macos/2.0.35/b51fb0eddf95c835e4efd1e45bd2a368fdbe25b3eee1f6e7fac94b556a5d9819.release-record.json
authorization policyversion 1https://transparency.solstone.app/v2/targets/policy/dsse-authorization/991e84be8cebf38be4127ea840e5caddcd99f94b0dee51ed1a42bc2f4f768c20.1.json
signing key setkeys/dsse/1.jsonhttps://transparency.solstone.app/v2/targets/keys/dsse/7719f9ee6c178c9dcc9988366fc364092aebb5a02386619186b218cb7e800ce8.1.json
pinned rootversion 1https://transparency.solstone.app/v2/metadata/1.root.json
freshness assertiontimestamp rolehttps://transparency.solstone.app/v2/metadata/timestamp.json
recorded bytessha256 94536ab397a0015274091bac46e2ba83464533386997729a53e491ee3e7f4091 · 13482506 byteshttps://updates.solstone.app/solstone-macos/releases/v2.0.35/solstone-2.0.35.dmg
technical fields
record productsolstone-macos
subjectsoftware/solstone-macos/2.0.35
target pathsoftware/solstone-macos/2.0.35/release-record.json
target sha256b51fb0eddf95c835e4efd1e45bd2a368fdbe25b3eee1f6e7fac94b556a5d9819
issued at2026-10-16T15:05:56.000Z
signer key ids2a1487b8f9905fc2b8debc5abd42a2d2097926497c9c241907c0f50749811f3a
policy sha256991e84be8cebf38be4127ea840e5caddcd99f94b0dee51ed1a42bc2f4f768c20

verify this record yourself

solstone-transparency verify-release --root tuf-root.json --product solstone-macos --version 2.0.35 --metadata-base https://transparency.solstone.app/v2/metadata --targets-base https://transparency.solstone.app/v2/targets

reading the result