Avikal Files

# RookDuel Avikal 1.0.6

This production release focuses on archive assurance, post-quantum protection, large-archive performance, Windows packaging hardening, and public open-source readiness.

Major changes

• Added authenticated archive assurance reports with signed creation metadata, compatibility fields, payload/index commitments, runtime observations, and verification evidence.
• Added mandatory archive-level ML-DSA and SLH-DSA signature evidence for new archives.
• Added indexed payload support for authenticated file trees, stronger manifest binding, and selective recovery workflows.
• Added PQC suite profiles with supported ML-KEM, ML-DSA, and SLH-DSA parameter choices.
• Added optional dual-password protection for external .avkkey files and fixed external keyfile publication safety.
• Added native Rust acceleration for Chess-PGN metadata encoding/decoding and richer Chess-PGN reporting statistics.
• Improved large-archive streaming, adaptive compression, cancellation, temporary cleanup, and preview-session handling.
• Replaced the old desktop HTTP backend path with the supervised stdio JSON-RPC Avikal core.
• Hardened Windows runtime verification for native crypto, OpenSSL PQC runtime files, signed runtime manifests, and release metadata.
• Refined Settings, update checking, diagnostics, audit history, visual engine handling, and production UI behavior.
• Cleaned public documentation, issue templates, release workflows, and Windows self-contained NSIS packaging.

Packaging

The GitHub release workflow builds bundled local Windows installers. These are not web/download stubs. The workflow refuses suspiciously small installer artifacts and uploads SHA-256 files, signed release metadata, SBOM, and provenance attestations.

Validation

Before this release commit was pushed:

• Version consistency check passed for v1.0.6.
• Frontend production build passed.
• Native Rust release build passed.
• Security hardening check passed: Rust native tests, focused backend security tests, frontend type/build check, and Electron syntax check.
• External PQC .avkkey roundtrip regression passed after the keyfile publication fix.

Notes

Unsigned NSIS installers may still show Windows reputation warnings until a paid Authenticode certificate is used. Users should verify the SHA-256 files, signed release metadata, and GitHub provenance attestations.