v0.64.0

Inkwell v0.64.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See AGENTS.md (entry point) + docs/CONVENTIONS.md (long-form
rules) for the contributor guide, and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code/spec.md §3.

Changelog

Other

• dafce6c: chore(deps): bump golang.org/x/net (@dependabot[bot])
• b042025: docs(spec-35): body regex & local body indexing (@eugenelim)
• 394ac6a: docs(spec-35): docs sweep — CONFIG / ARCH / PRD / THREAT_MODEL / PRIVACY / roadmap / changelog (slice 7) (@eugenelim)
• 87f630a: docs(spec-35): ship v0.64.0 — flip status, changelog entry, README row (@eugenelim)
• 5061ce2: feat(spec-35): CLI + HashMessageID + cmd_run wire-up (slice 6) (@eugenelim)
• aaa65f0: feat(spec-35): body index — schema + indexer + render hook + pattern (slices 1-4) (@eugenelim)
• 2c44fb2: feat(spec-35): saved-search + UI surfaces + perf/redaction/e2e fill-in (slices 5 + 8) (@eugenelim)
• 16fe6ab: security(spec-35): add nosemgrep annotation + gofmt cmd_index.go (@eugenelim)
• 765995b: security(spec-35): annotate three SQL-concat false positives in body_index.go (@eugenelim)
• d1e66fc: test(spec-35): perf benchmarks + property-based literal extraction (slice 8 partial) (@eugenelim)
• ed658e5: test(spec-35): regex post-filter + end-to-end benches (slice 8 fill-in) (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.63.0

Inkwell v0.63.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• 845baec: ci: skip security.yml SAST jobs for docs-only PRs (@eugenelim)
• a924639: ci: skip the heavy test pipeline for docs-only PRs (@eugenelim)
• 0f6b5db: docs(adr): add docs/adr/ with 6 retroactive ADRs (@eugenelim)
• 251c83a: docs(spec-34): calendar invites read + hand-off — within Mail.ReadWrite scope (@eugenelim)
• 5fc67a9: feat(spec-34): calendar invites read + hand-off in viewer pane (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.62.0

Inkwell v0.62.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Fixes

• d4d1711: fix(security): add #nosec annotations for G204/G702/G304 in rules code (@eugenelim)

Other

• 9f300db: docs(claude.md): consolidate checklists, trim §5/§7, add spec-verification + common-findings discipline (@eugenelim)
• d9df559: docs(spec-33): Opus-grade adversarial review — fix 24 findings across 3 passes (@eugenelim)
• f94b3a6: docs(spec-33): rich-text / Markdown drafts spec + plan (@eugenelim)
• b9df7d1: feat(spec-33): Markdown drafts — goldmark CommonMark/GFM + [md] footer + .md editor ext (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.61.0

Inkwell v0.61.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• 9d3b127: docs(spec-32): server-side rules (Inbox messageRules) (@eugenelim)
• 419a22c: feat(spec-32): server-side rules — CLI, cmd-bar, palette, migration (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.60.0

Inkwell v0.60.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• 93ec0b5: docs(spec-31): Focused / Other tab — read-only inbox sub-strip (@eugenelim)
• 91c4d9e: feat(spec-31): Focused / Other tab — read-only Inbox sub-strip (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.59.0

Inkwell v0.59.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• b3e5fd1: feat(spec-30): "Done" alias for archive — e key + [ui].archive_label (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.58.0

Inkwell v0.58.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• 9425909: feat(spec-29): watch mode — inkwell messages --filter X --watch (@eugenelim)
• 0e49403: fix(spec-28): clear three gosec findings on the screener path (@eugenelim)
• f5a3741: fix(spec-28): rewrite parseScreenerAcceptArgs so gosec G602 stops false-positiving (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.57.0

Inkwell v0.57.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• 148c01c: feat(spec-28): screener — first-contact gate over sender_routing (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.56.1

Inkwell v0.56.1 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Fixes

• b93a0a3: fix(sync): use relative dates in calendar delta tests so they don't drift past lookback (@eugenelim)
• 627f8da: fix(ui): surface Teams meeting invite date/time in viewer (@eugenelim)

Other

• 34dd8bf: docs(spec-28): adversarial-review pass — gate-flip modal, race semantics, WriteUIFlag (@eugenelim)
• 70f8d86: feat(spec-27): wire inkwell action run --filter <pat> (closes §4.11 deferred bullet) (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt

v0.56.0

Inkwell v0.56.0 — pre-release, unsigned binaries.

⚠️ macOS Gatekeeper: these binaries are not yet code-signed
or notarized. On first launch macOS will refuse to run them.
After downloading, run:

xattr -d com.apple.quarantine ./inkwell

Alternatively, right-click the binary in Finder → Open → Open
Anyway. Future v0.x releases will ship signed + notarized
binaries (PRD §7).

See CLAUDE.md for the contributor guide and docs/PRD.md for
the product scope. Microsoft 365 tenant prerequisites are in
docs/specs/01-auth-device-code.md §3.

Changelog

Other

• 614011e: feat(spec-27): custom actions framework — chain ops via actions.toml (@eugenelim)

Verifying downloads

sha256sum -c checksums.txt