Build and test proof.
This is the public record behind the download: the exact source revision, signed hashes, package inventory, release gates, boot and install checks, and the things that have not been proven on physical hardware.
A green build is useful, but it is not a hardware test. A signed checksum proves who published bytes, but it does not prove those bytes boot. Each question has its own row below so one passing check cannot stand in for another.
Public proof paths
Source and issues
Release record
The machine-readable release manifest ties filenames, byte counts, hashes, source revision and package inventories together.
Signed hashes
Download SHA256SUMS, its detached signature, and the public signing key.
Release under test
Release verification matrix
The status describes the current public candidate. “Pending” is not a pass and is never hidden behind a successful check in another row.
| Gate | Status | Evidence and scope |
|---|---|---|
| Site and source checks | Pass | All 26 public pages passed the internal-link, sitemap, placeholder and tunnel gate; all 317 package names resolve; edited shell, Python and Worker sources passed syntax checks. |
| Fresh Free ISO build | Pass | Built from the source revision above with Debian live-build: 2,251,653,120 bytes, SHA-256 68380d47e6eb6f98bb5c6de0fe93e4feaaed4e849317f7faefaa7a502ba117d0. |
| Fresh Pro ISO build | Pass | Built separately so Pro cannot overwrite or masquerade as Free: 4,152,623,104 bytes, SHA-256 e373edfea1cba30cade6f3fe6ad13fb6f836e68edafcb300be2cb49fc9858c5e. |
| Signed release manifest | Pass | Both named ISOs hash locally, appear in one SHA256SUMS file, and the detached signature verifies against GPG key fingerprint 3A079F85DE74375DD65557096CE37402BA0A0EF8. |
| ISO structure and package manifests | Pass | BIOS and UEFI boot files were inspected. The finished images contain 1,810 Free and 2,537 Pro package records, published directly from each ISO's /live/filesystem.packages. |
| Current-host hardware preflight | Partial | A read-only Windows inventory of an MSI desktop found a Ryzen 7 7700X, Radeon RX 9070 XT, Realtek 8126 Ethernet and MediaTek RZ616 Wi-Fi. The released image contains matching kernel driver entries and firmware packages. No removable USB disk was attached, so Dagric was not booted on this hardware and graphics, networking, audio, camera, suspend and installation remain unproven. Full preflight record. |
| Legacy BIOS live boot | Pass | The Free image reached the branded live desktop and first-run setup in the QEMU harness. |
| UEFI and Secure Boot live boot | Pass | Free and Pro reached their branded live desktops through OVMF. Free also booted with Microsoft-enrolled virtual Secure Boot firmware; shim and GRUB signatures were inspected in both images. |
| Install and installed-system boot | Pass | Calamares installed Free to a blank 40 GB UEFI/GPT virtual disk. With the ISO detached, that disk reached the Dagric login, accepted the new local account and opened the Plasma desktop. |
| Public Free download | Pass | The customer-facing R2 URL was downloaded after promotion and hashed to 68380d47e6eb6f98bb5c6de0fe93e4feaaed4e849317f7faefaa7a502ba117d0, matching the signed local image. |
| Private Pro delivery gate | Pass | A live, one-use 100%-discount Stripe Checkout completed in production and Stripe marked the session complete and paid. Its private gate delivered the full 4,152,623,104-byte Pro ISO, whose SHA-256 matched the signed release, and returned a correct HTTP 206 Range response whose first 1 MiB matched the downloaded file. No non-zero live card charge was exercised. |
| Contact form delivery and retention | Pass | On August 30, 2026, a marked no-email message submitted through the public form returned a success response and appeared as the matching private R2 object. The exact test object was deleted and confirmed absent. An enabled lifecycle rule deletes objects under inbox/ after 365 days. |
Still not proven by this release process
- Physical USB media and a range of real PCs. A driver-and-firmware preflight now exists for one current desktop, but the ISO has not booted on it. The VM harness and a Windows inventory cannot prove a particular USB controller, firmware, Wi-Fi adapter, GPU, camera, printer, suspend path or battery works.
- Secure Boot on varied retail firmware. The chain is checked in the image and exercised in virtual firmware; broad physical-machine coverage does not exist yet.
- A screen-reader review by someone who relies on one. The speech stack is present and statically checked, but that is not a lived accessibility test.
- Every Windows application. Wine, Bottles and Proton compatibility is application-specific. The site never promises universal Windows-software compatibility.
Before installing, boot the live USB and run Check This PC. It reports on the hardware in front of you without writing to the disk. A compatibility result from someone else's computer is not a result for yours.
How to reproduce the public checks
gpg --import dagric-signing-key.asc
gpg --verify SHA256SUMS.sig SHA256SUMS
sha256sum -c SHA256SUMSThe build and release tooling is in the public tools directory. The reviewer kit gives the hands-on test order and press assets.