solstone for macos 2.0.40 v2 record
this is the v2 release record of solstone for macos 2.0.40, signed 2026-10-19T02:59:40.000Z. it names the exact final bytes sol pbc recorded as this release: each file's url, length, and sha256. the register's freshness is asserted until 2026-10-26T04:02:43Z.
publication
◆ sol pbc says publishing records
evidence freshness
✓ signed asserted until 2026-10-26T04:02:43Z https://transparency.solstone.app/v2/metadata/timestamp.json
verification
rebuild
▤ register not attempted
what the record says it proves
the record states what it does and does not prove; both lists below are rendered from the signed record, word for word.
what this proves
- sol pbc recorded these exact final bytes as a release of solstone for macos 2.0.40: 1 file, named by url, length and sha256. this record was signed at 2026-10-19T02:59:40.000Z and is asserted until 2026-10-26T02:59:40Z.
what this does not prove
- that any source code produced these exact bytes. that is a reproducible-build claim this record does not make.
- that this is the version any owner is running. this record says nothing about what is installed on any device.
- that this is the newest build, or the one available to download now. what is offered for download is a separate question this record does not answer.
- that the software is safe, free of defects, fit for any purpose, or that anyone reviewed or audited it. a signature says who recorded the bytes, not what the bytes do.
- that builds distributed through the ios or android app stores are these bytes. store builds are not described in this record.
raw evidence
| item | detail | raw |
|---|---|---|
| release record | signed record (DSSE envelope inside) | https://transparency.solstone.app/v2/targets/software/solstone-macos/2.0.40/52546af094b2bff2828efa506ab6c5e318df3755ef45c7af56419353d87c0c0b.release-record.json |
| authorization policy | version 1 | https://transparency.solstone.app/v2/targets/policy/dsse-authorization/991e84be8cebf38be4127ea840e5caddcd99f94b0dee51ed1a42bc2f4f768c20.1.json |
| signing key set | keys/dsse/1.json | https://transparency.solstone.app/v2/targets/keys/dsse/7719f9ee6c178c9dcc9988366fc364092aebb5a02386619186b218cb7e800ce8.1.json |
| pinned root | version 1 | https://transparency.solstone.app/v2/metadata/1.root.json |
| freshness assertion | timestamp role | https://transparency.solstone.app/v2/metadata/timestamp.json |
| recorded bytes | sha256 5eeaeb9d87ae635d3e9c46705c41cf70ededce8c7d6a6301abf69b1d09787454 · 14470026 bytes | https://updates.solstone.app/solstone-macos/releases/v2.0.40/solstone-2.0.40.dmg |
technical fields
| record product | solstone-macos |
| subject | software/solstone-macos/2.0.40 |
| target path | software/solstone-macos/2.0.40/release-record.json |
| target sha256 | 52546af094b2bff2828efa506ab6c5e318df3755ef45c7af56419353d87c0c0b |
| issued at | 2026-10-19T02:59:40.000Z |
| signer key ids | 2a1487b8f9905fc2b8debc5abd42a2d2097926497c9c241907c0f50749811f3a |
| policy sha256 | 991e84be8cebf38be4127ea840e5caddcd99f94b0dee51ed1a42bc2f4f768c20 |
verify this record yourself
solstone-transparency verify-release --root tuf-root.json --product solstone-macos --version 2.0.40 --metadata-base https://transparency.solstone.app/v2/metadata --targets-base https://transparency.solstone.app/v2/targets