trust.solstone.app

solstone for macos 2.0.36 v2 record

this is the v2 release record of solstone for macos 2.0.36, signed 2026-10-17T04:35:30.000Z. it names the exact final bytes sol pbc recorded as this release: each file's url, length, and sha256. the register's freshness is asserted until 2026-10-24T09:39:45Z.

publication
◆ sol pbc says publishing records
evidence freshness
✓ signed asserted until 2026-10-24T09:39:45Z https://transparency.solstone.app/v2/metadata/timestamp.json
verification
⟳ verifier verified 2026-10-17T09:43:35Z how this was checked key
rebuild
▤ register not attempted

what the record says it proves

the record states what it does and does not prove; both lists below are rendered from the signed record, word for word.

what this proves

  • sol pbc recorded these exact final bytes as a release of solstone for macos 2.0.36: 1 file, named by url, length and sha256. this record was signed at 2026-10-17T04:35:30.000Z and is asserted until 2026-10-24T04:35:30Z.

what this does not prove

  • that any source code produced these exact bytes. that is a reproducible-build claim this record does not make.
  • that this is the version any owner is running. this record says nothing about what is installed on any device.
  • that this is the newest build, or the one available to download now. what is offered for download is a separate question this record does not answer.
  • that the software is safe, free of defects, fit for any purpose, or that anyone reviewed or audited it. a signature says who recorded the bytes, not what the bytes do.
  • that builds distributed through the ios or android app stores are these bytes. store builds are not described in this record.

raw evidence

itemdetailraw
release recordsigned record (DSSE envelope inside)https://transparency.solstone.app/v2/targets/software/solstone-macos/2.0.36/75d4ae04e806562f7469446b61695d8f893c7fe5a079148f494e44625874f41e.release-record.json
authorization policyversion 1https://transparency.solstone.app/v2/targets/policy/dsse-authorization/991e84be8cebf38be4127ea840e5caddcd99f94b0dee51ed1a42bc2f4f768c20.1.json
signing key setkeys/dsse/1.jsonhttps://transparency.solstone.app/v2/targets/keys/dsse/7719f9ee6c178c9dcc9988366fc364092aebb5a02386619186b218cb7e800ce8.1.json
pinned rootversion 1https://transparency.solstone.app/v2/metadata/1.root.json
freshness assertiontimestamp rolehttps://transparency.solstone.app/v2/metadata/timestamp.json
recorded bytessha256 a6e6c74833436842ab768d7382d235f975c8d2a6580a21e69ee677e43a9dc9ed · 13486913 byteshttps://updates.solstone.app/solstone-macos/releases/v2.0.36/solstone-2.0.36.dmg
technical fields
record productsolstone-macos
subjectsoftware/solstone-macos/2.0.36
target pathsoftware/solstone-macos/2.0.36/release-record.json
target sha25675d4ae04e806562f7469446b61695d8f893c7fe5a079148f494e44625874f41e
issued at2026-10-17T04:35:30.000Z
signer key ids2a1487b8f9905fc2b8debc5abd42a2d2097926497c9c241907c0f50749811f3a
policy sha256991e84be8cebf38be4127ea840e5caddcd99f94b0dee51ed1a42bc2f4f768c20

verify this record yourself

solstone-transparency verify-release --root tuf-root.json --product solstone-macos --version 2.0.36 --metadata-base https://transparency.solstone.app/v2/metadata --targets-base https://transparency.solstone.app/v2/targets

reading the result