Releases: Jesssullivan/tummycrypt
Releases · Jesssullivan/tummycrypt
Release list
tcfs v0.12.17
v0.12.17
Jesssullivan
Jess Sullivan
This tag was signed with the committer’s verified signature.
Jesssullivan
Jess Sullivan
tcfs v0.12.17
Quick Install
macOS (.pkg installer path; Finder/FileProvider remains experimental):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/tcfs-0.12.17-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.17-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image (published by the parallel Build container image job; do not claim container support until that job is green):
podman pull --arch amd64 ghcr.io/jesssullivan/tcfsd:v0.12.17
podman pull --arch arm64 ghcr.io/jesssullivan/tcfsd:v0.12.17Ubuntu 24.04+ / Debian 13+:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/tcfsd-0.12.17-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/tcfs-0.12.17-amd64.deb
sudo dpkg -i tcfsd-0.12.17-amd64.deb tcfs-0.12.17-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/tcfsd-0.12.17-x86_64.rpm
sudo rpm -i tcfsd-0.12.17-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.17/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider app notarization is attempted for Apple artifacts. Signed .pkg
release jobs require notarization, stapling, Gatekeeper install assessment, and
package policy smoke before the package artifact is uploaded.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, Linux FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
What's Changed
- TIN-1758 add FileProvider fetch diagnostics and smoke SDK fix by @Jesssullivan in #487
- feat(sync): wire git-bundle mode so peer rehydrate keeps working git history by @Jesssullivan in #481
- TIN-1758 add macOS rollout readiness probe by @Jesssullivan in #488
- DRAFT: TIN-1737 fail-closed guard for symlink restore ingress (agent-drafted, needs review) by @Jesssullivan in #491
- DRAFT: TIN-1417 B1 FileProvider device-aware EncryptionContext (agent-drafted, needs review) by @Jesssullivan in #492
- DRAFT: TIN-1417 B1 propagate per_device_wrapping + device_registry_path to FileProvider config (agent-drafted, needs review) by @Jesssullivan in #493
- DRAFT: TIN-1417 tri-state crypto.wrap_mode migration (agent-drafted, needs review) by @Jesssullivan in #496
- DRAFT: TIN-1417 migration doc — tri-state crypto.wrap_mode (supersedes #490) (agent-drafted, needs review) by @Jesssullivan in #497
- DRAFT: TIN-1417 B4 sign the device registry (Ed25519, master-derived) (agent-drafted, needs review) by @Jesssullivan in #499
- DRAFT: TIN-1417 inline per-device recipients + age secret into Keychain config (agent-drafted, needs review) by @Jesssullivan in #498
- fix(fileprovider): restore cargo-deny and grpc-only build gates by @Jesssullivan in #500
- DRAFT: TIN-1898 FP direct/uniffi backends read Dual/v2 via master-wrap fallback (agent-drafted, needs review) by @Jesssullivan in #502
- DRAFT docs(ops): roam-enroll ~/.claude/projects via scheduled reconcile unit (agent-drafted, needs review) by @Jesssullivan in #501
- DRAFT: TIN-1899 scoped per-device key rotation for forward secrecy (agent-drafted, needs review) by @Jesssullivan in #504
- TIN-1620: dev-env zero-diff fingerprint for the repo-roam ladder by @Jesssullivan in #507
- docs: define git roam daily-driver acceptance by @Jesssullivan in #505
- test: harden repo-roam fingerprint deny-set by @Jesssullivan in #509
- DRAFT: reconcile restore fidelity (mtime preserve + symlink opt-in) for zero-diff roam — TIN-1620 T13-Z (agent-drafted, needs review) by @Jesssullivan in #508
- fix(sync): scope path manifest metadata by @Jesssullivan in #510
- docs(README): repo-roam dev-env zero-diff user story + reproducible neo->honey proof by @Jesssullivan in #511
- cleanup(tcfs-sync): dead-code + DRY in the conflict/reconcile chokepoints (pre .git-aware-resolution) by @Jesssullivan in #512
- TIN-1758 harden macOS rollout readiness checks by @Jesssullivan in #489
- fix(deny): resolve RUSTSEC-2026-0189/0190 (anyhow bump + justified rmcp stdio-only ignore) by @Jesssullivan in #516
- FACET 6: .git-as-files conflict/corruption safety for G5/TIN-1620 by @Jesssullivan in #506
- fence: never roam worktree gitfiles or .git/worktrees/** (merge-gate for #513) by @Jesssullivan in #515
- release: cut v0.12.15 (carries #508/#510 fidelity + #504/#502 crypto reads) + version-truth README + commit repo-roam evidence by @Jesssullivan in #514
- evidence: repo-roam no-crutch zero-diff canary on v0.12.15 (mtime fidelity live) by @Jesssullivan in #519
- DRAFT: .git-aware fast-forward conflict resolution (closes bidirectional repo-roam R3; G5-git-5 FF half) — agent-drafted, needs review by @Jesssullivan in #513
- release: cut v0.12.16 (carries #513 FF conflict resolution) by @Jesssullivan in #522
- feat(keep-both PR-1): fence .git conflicts from per-file resolution +
tcfs conflictsread verb by @Jesssullivan in #526 - docs(ops): ghost-device revocation safety analysis + parked packet (ledger item 9, TIN-1417) by @Jesssullivan in #521
- docs: dated decision record for the 2026-07-01 operator session by @Jesssullivan in #518
- Harden git conflict fence paths and persistence by @Jesssullivan in #527
- feat(sync): harden git keep-both prerequisites by @Jesssullivan in #528
- feat(sync): add repo git keep-both resolver by @Jesssullivan in #529
- design: divergent .git keep-both (T10/T11 — the non-FF half of G5-git-5) by @Jesssullivan in #523
- docs: extract pending large-workdir evidence from #517 by @Jesssullivan in #530
- docs: reconcile TCFS frontier truth after PZM recovery by @Jesssullivan in #533
- evidence: bidirectional FF handoff canary LIVE — closes G5-git-5 FF half (TIN-1620) by @Jesssullivan in #532
- evidence: rescue roam-canary + large-workdir packets (clean, no crypto) by @Jesssullivan in #531
- tcfs: loser-side no-loss guard for git keep-both (TIN-2552) by @Jesssullivan in #534
- docs: record current TCFS workstream truth by @Jesssullivan in #535
- docs: divergent keep-both canary runbook + truth refresh (PR-4 merged) by @Jesssullivan in #536
- docs: refresh TCFS keep-both and PZM truth by @Jesssullivan in #537
- docs: remove residual TCFS frontier drift by @Jesssullivan in #538
- tcfs-sync: record Conflict for out-of-band-diverged refs (TIN-2584) by @Jesssullivan in #540
- tcfs-sync: flip entry.status to Conflict on plan-path conflict record (TIN-2652) by @Jesssullivan in #541
- evidence: divergent keep-...
Contributors
Jesssullivan
Assets 18
- 240 Bytes
2026-07-09T05:46:07Z - 1.92 KB
2026-07-09T05:46:07Z - 1.18 KB
2026-07-09T05:46:07Z - 3.3 KB
2026-07-09T05:46:07Z - 96 Bytes
2026-07-09T05:46:07Z - 4.7 MB
2026-07-09T05:46:07Z - 4.21 MB
2026-07-09T05:46:07Z - 18.3 MB
2026-07-09T05:46:07Z - 17.4 MB
2026-07-09T05:46:07Z - 24.7 MB
2026-07-09T05:46:07Z -
2026-07-09T05:24:53Z -
2026-07-09T05:24:53Z - Loading
tcfs v0.12.14
v0.12.14
Jesssullivan
Jess Sullivan
This tag was signed with the committer’s verified signature.
Jesssullivan
Jess Sullivan
tcfs v0.12.14
Quick Install
macOS (.pkg installer path; Finder/FileProvider remains experimental):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/tcfs-0.12.14-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.14-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image (published by the parallel Build container image job; do not claim container support until that job is green):
podman pull --arch amd64 ghcr.io/jesssullivan/tcfsd:v0.12.14
podman pull --arch arm64 ghcr.io/jesssullivan/tcfsd:v0.12.14Ubuntu 24.04+ / Debian 13+:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/tcfsd-0.12.14-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/tcfs-0.12.14-amd64.deb
sudo dpkg -i tcfsd-0.12.14-amd64.deb tcfs-0.12.14-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/tcfsd-0.12.14-x86_64.rpm
sudo rpm -i tcfsd-0.12.14-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.14/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider app notarization is attempted for Apple artifacts. Signed .pkg
release jobs require notarization, stapling, Gatekeeper install assessment, and
package policy smoke before the package artifact is uploaded.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, Linux FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
What's Changed
- [codex] Add TCFS parity lifecycle proof by @Jesssullivan in #341
- [codex] Ground TCFS parity status docs by @Jesssullivan in #342
- [codex] Refresh remote governance and Nix fallback status by @Jesssullivan in #343
- [codex] Archive container distribution proof by @Jesssullivan in #344
- [codex] Archive Linux package distribution proof by @Jesssullivan in #345
- [codex] Ground release proof status docs by @Jesssullivan in #346
- [codex] Enable arm64 container release publishing by @Jesssullivan in #347
- [codex] Ground TCFS release and platform claims by @Jesssullivan in #348
- [codex] Refresh remote and distribution reality docs by @Jesssullivan in #349
- [codex] Ground release and platform proof boundaries by @Jesssullivan in #350
- [codex] Record tinyland branch prune proposal by @Jesssullivan in #351
- [codex] Ground repo reality hygiene by @Jesssullivan in #352
- [codex] Ground checkpoint and RFC identifiers by @Jesssullivan in #353
- Archive TCFS home canary QA proof by @Jesssullivan in #354
- Preserve TCFS symlinks for project-tree canaries by @Jesssullivan in #355
- Add mounted symlink target proof gate by @Jesssullivan in #356
- [codex] Harden linux-xr canary storage proof by @Jesssullivan in #357
- [codex] Verify honey canary binary provenance by @Jesssullivan in #358
- [codex] Harden S3 upload telemetry for fresh-prefix canaries by @Jesssullivan in #359
- [codex] Archive home canary storage summaries by @Jesssullivan in #360
- [codex] Expand M8 delete rename idempotence evidence by @Jesssullivan in #361
- [codex] Fix mounted stub detection and archive linux-xr parity by @Jesssullivan in #362
- [codex] Add linux-xr storage posture canary by @Jesssullivan in #363
- Bound S3 chunk upload stalls by @Jesssullivan in #364
- Bound S3 transport posture evidence by @Jesssullivan in #365
- Add M8 unhydrated delete rename regressions by @Jesssullivan in #366
- [codex] add TCFS on-prem cutover packet gate by @Jesssullivan in #368
- Add fresh-prefix file upload concurrency by @Jesssullivan in #367
- [codex] Document linux-xr-fast metadata blockers by @Jesssullivan in #369
- Add tcfs index inspect + seeded macOS FileProvider smoke gate (TIN-133, #309) by @Jesssullivan in #370
- Archive first green prod Dev ID FileProvider hydration smoke by @Jesssullivan in #371
- docs(macos): record production Dev ID FileProvider hydration PROVEN on 2026-05-18 by @Jesssullivan in #372
- Scaffold Linux post-install smoke harness (TIN-1422) by @Jesssullivan in #373
- Release prep: v0.12.13 — workspace bump + CHANGELOG by @Jesssullivan in #374
- release.yml: accept pre-release tag suffix (-rc1, -beta.2, etc.) by @Jesssullivan in #375
- docs(release): v0.12.13 evidence matrix by @Jesssullivan in #376
- test: wait for Linux postinstall daemon socket (TIN-1422) by @Jesssullivan in #380
- test: cover Linux postinstall evict and mutation paths (TIN-1422) by @Jesssullivan in #381
- ci: real-storage live test lane (TIN-1421) by @Jesssullivan in #377
- test: fail linux smoke on apt repair failure (TIN-1422) by @Jesssullivan in #382
- ci: install split Linux smoke packages by @Jesssullivan in #383
- ci: reuse shared TCFS smoke secrets for Linux by @Jesssullivan in #384
- Design recon: tcfs init first-run wizard (TIN-1425) by @Jesssullivan in #378
- Design recon: per-device crypto identity (TIN-1417) by @Jesssullivan in #379
- ci: expect Cargo version in Linux smoke by @Jesssullivan in #385
- ci: preflight Linux smoke endpoint reachability by @Jesssullivan in #386
- docs/ci: reconcile TCFS production readiness sweep by @Jesssullivan in #387
- storage: preserve HTTPS remote specs (TIN-1546) by @Jesssullivan in #388
- ci: fix macOS rc package smoke version gate (TIN-1547) by @Jesssullivan in #389
- sync: bound remote download read attempts (TIN-1546) by @Jesssullivan in #390
- docs: tighten tcfs QA gate drift by @Jesssullivan in #391
- ci: add homebrew install smoke lane (TIN-131) by @Jesssullivan in #393
- ci: add container runtime smoke lane (TIN-131) by @Jesssullivan in #392
- ci: tighten Linux smoke endpoint posture (TIN-1540) by @Jesssullivan in #394
- ci: bound macos CloudStorage enumeration probes (TIN-1547) by @Jesssullivan in #395
- ios: default FileProvider capabilities to read-only (TIN-1548) by @Jesssullivan in #397
- cli: add scoped storage posture canary (TIN-1546) by @Jesssullivan in #396
- ci: classify macos CloudStorage permission failures (TIN-1547) by @Jesssullivan i...
Contributors
Jesssullivan
Assets 18
tcfs v0.12.13-rc4
tcfs v0.12.13-rc4
Quick Install
macOS (.pkg installer path; Finder/FileProvider remains experimental):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/tcfs-0.12.13-rc4-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.13-rc4-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image (verify the published architecture explicitly):
podman pull --arch amd64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc4
podman pull --arch arm64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc4Ubuntu 24.04+ / Debian 13+:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/tcfsd-0.12.13-rc4-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/tcfs-0.12.13-rc4-amd64.deb
sudo dpkg -i tcfsd-0.12.13-rc4-amd64.deb tcfs-0.12.13-rc4-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/tcfsd-0.12.13-rc4-x86_64.rpm
sudo rpm -i tcfsd-0.12.13-rc4-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc4/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider app notarization is attempted for Apple artifacts. Signed .pkg
release jobs require notarization, stapling, Gatekeeper install assessment, and
package policy smoke before the package artifact is uploaded.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, Linux FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
What's Changed
- ops: archive neo-honey live acceptance packet by @Jesssullivan in #427
- linux-smoke: select runner-compatible artifact packages (TIN-1422) by @Jesssullivan in #429
- docs: record Linux rc3 first-use smoke evidence (TIN-131) by @Jesssullivan in #430
- fileprovider: preserve manifests during rename safety proof (TIN-1547) by @Jesssullivan in #428
- ci: gate FileProvider package affordance metadata (TIN-1547) by @Jesssullivan in #431
- storage-canary: prove allowed-prefix list access (TIN-1546) by @Jesssullivan in #433
- ios: fail closed on unverifiable enrollment invites (TIN-1424) by @Jesssullivan in #432
- storage: classify daemon health probes (TIN-1546) by @Jesssullivan in #434
Full Changelog: v0.12.13-rc3...v0.12.13-rc4
Contributors
Jesssullivan
Assets 18
tcfs v0.12.13-rc3
tcfs v0.12.13-rc3
Quick Install
macOS (.pkg installer path; Finder/FileProvider remains experimental):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/tcfs-0.12.13-rc3-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.13-rc3-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image (verify the published architecture explicitly):
podman pull --arch amd64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc3
podman pull --arch arm64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc3Ubuntu 24.04+ / Debian 13+:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/tcfsd-0.12.13-rc3-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/tcfs-0.12.13-rc3-amd64.deb
sudo dpkg -i tcfsd-0.12.13-rc3-amd64.deb tcfs-0.12.13-rc3-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/tcfsd-0.12.13-rc3-x86_64.rpm
sudo rpm -i tcfsd-0.12.13-rc3-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc3/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider app notarization is attempted for Apple artifacts. Signed .pkg
release jobs require notarization, stapling, Gatekeeper install assessment, and
package policy smoke before the package artifact is uploaded.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, Linux FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
What's Changed
- docs: refresh tcfs rc2 readiness posture by @Jesssullivan in #409
- ci: add storage posture canary workflow (TIN-1546) by @Jesssullivan in #410
- docs: define production storage posture gate (TIN-1546) by @Jesssullivan in #411
- fileprovider: harden rename and unsync semantics (TIN-1547) by @Jesssullivan in #412
- docs: record rc2 macOS package proof (TIN-1547) by @Jesssullivan in #413
- storage: support custom CA for posture canary (TIN-1546) by @Jesssullivan in #414
- storage: prove scoped credential denial in canary (TIN-1546) by @Jesssullivan in #415
- auth: sign full enrollment invite payload (TIN-1424) by @Jesssullivan in #417
- ci: add hosted runner disk headroom by @Jesssullivan in #418
- storage: add posture canary dispatch helper by @Jesssullivan in #419
- ops: add tcfs alpha gate preflight by @Jesssullivan in #420
- fileprovider: add signed HostApp root probe gate by @Jesssullivan in #421
- storage: require scoped denial for HTTPS canary by @Jesssullivan in #422
- linux: support custom CA in postinstall smoke by @Jesssullivan in #423
- linux-smoke: evict mounted cache by index by @Jesssullivan in #424
- ops: archive neo-honey smoke evidence packet by @Jesssullivan in #425
- storage: make daemon health prefix scoped by @Jesssullivan in #426
Full Changelog: v0.12.13-rc2...v0.12.13-rc3
Contributors
Jesssullivan
Assets 18
tcfs v0.12.13-rc2
tcfs v0.12.13-rc2
Quick Install
macOS (.pkg installer path; Finder/FileProvider remains experimental):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/tcfs-0.12.13-rc2-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.13-rc2-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image (verify the published architecture explicitly):
podman pull --arch amd64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc2
podman pull --arch arm64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc2Ubuntu 24.04+ / Debian 13+:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/tcfsd-0.12.13-rc2-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/tcfs-0.12.13-rc2-amd64.deb
sudo dpkg -i tcfsd-0.12.13-rc2-amd64.deb tcfs-0.12.13-rc2-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/tcfsd-0.12.13-rc2-x86_64.rpm
sudo rpm -i tcfsd-0.12.13-rc2-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc2/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider app notarization is attempted for Apple artifacts. Signed .pkg
release jobs require notarization, stapling, Gatekeeper install assessment, and
package policy smoke before the package artifact is uploaded.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, Linux FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
What's Changed
- docs(release): v0.12.13 evidence matrix by @Jesssullivan in #376
- test: wait for Linux postinstall daemon socket (TIN-1422) by @Jesssullivan in #380
- test: cover Linux postinstall evict and mutation paths (TIN-1422) by @Jesssullivan in #381
- ci: real-storage live test lane (TIN-1421) by @Jesssullivan in #377
- test: fail linux smoke on apt repair failure (TIN-1422) by @Jesssullivan in #382
- ci: install split Linux smoke packages by @Jesssullivan in #383
- ci: reuse shared TCFS smoke secrets for Linux by @Jesssullivan in #384
- Design recon: tcfs init first-run wizard (TIN-1425) by @Jesssullivan in #378
- Design recon: per-device crypto identity (TIN-1417) by @Jesssullivan in #379
- ci: expect Cargo version in Linux smoke by @Jesssullivan in #385
- ci: preflight Linux smoke endpoint reachability by @Jesssullivan in #386
- docs/ci: reconcile TCFS production readiness sweep by @Jesssullivan in #387
- storage: preserve HTTPS remote specs (TIN-1546) by @Jesssullivan in #388
- ci: fix macOS rc package smoke version gate (TIN-1547) by @Jesssullivan in #389
- sync: bound remote download read attempts (TIN-1546) by @Jesssullivan in #390
- docs: tighten tcfs QA gate drift by @Jesssullivan in #391
- ci: add homebrew install smoke lane (TIN-131) by @Jesssullivan in #393
- ci: add container runtime smoke lane (TIN-131) by @Jesssullivan in #392
- ci: tighten Linux smoke endpoint posture (TIN-1540) by @Jesssullivan in #394
- ci: bound macos CloudStorage enumeration probes (TIN-1547) by @Jesssullivan in #395
- ios: default FileProvider capabilities to read-only (TIN-1548) by @Jesssullivan in #397
- cli: add scoped storage posture canary (TIN-1546) by @Jesssullivan in #396
- ci: classify macos CloudStorage permission failures (TIN-1547) by @Jesssullivan in #398
- ci: ignore CloudStorage find stderr as enumeration (TIN-1547) by @Jesssullivan in #399
- ci: classify CloudStorage root permission failures (TIN-1547) by @Jesssullivan in #400
- ci: capture CloudStorage root permission inventory by @Jesssullivan in #401
- storage posture: support HTTPS SeaweedFS remotes by @Jesssullivan in #402
- ci: coordinate CloudStorage root enumeration by @Jesssullivan in #403
- ci: probe FileProvider user-visible root URL by @Jesssullivan in #404
- ci: probe FileProvider root from signed HostApp by @Jesssullivan in #405
- ci: find Homebrew in macOS notarization proof by @Jesssullivan in #406
- ci: make macOS proof keychains idempotent by @Jesssullivan in #407
- ci: restore macOS system path in notarization proof by @Jesssullivan in #408
Full Changelog: v0.12.13-rc1...v0.12.13-rc2
Contributors
Jesssullivan
Assets 18
tcfs v0.12.13-rc1
v0.12.13-rc1
Jesssullivan
Jess Sullivan
This tag was signed with the committer’s verified signature.
Jesssullivan
Jess Sullivan
tcfs v0.12.13-rc1
Quick Install
macOS (.pkg installer path; Finder/FileProvider remains experimental):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/tcfs-0.12.13-rc1-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.13-rc1-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image (verify the published architecture explicitly):
podman pull --arch amd64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc1
podman pull --arch arm64 ghcr.io/jesssullivan/tcfsd:v0.12.13-rc1Ubuntu 24.04+ / Debian 13+:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/tcfsd-0.12.13-rc1-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/tcfs-0.12.13-rc1-amd64.deb
sudo dpkg -i tcfsd-0.12.13-rc1-amd64.deb tcfs-0.12.13-rc1-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/tcfsd-0.12.13-rc1-x86_64.rpm
sudo rpm -i tcfsd-0.12.13-rc1-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.13-rc1/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider app notarization is attempted for Apple artifacts. Signed .pkg
release jobs require notarization, stapling, Gatekeeper install assessment, and
package policy smoke before the package artifact is uploaded.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, Linux FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
What's Changed
- [codex] Add TCFS parity lifecycle proof by @Jesssullivan in #341
- [codex] Ground TCFS parity status docs by @Jesssullivan in #342
- [codex] Refresh remote governance and Nix fallback status by @Jesssullivan in #343
- [codex] Archive container distribution proof by @Jesssullivan in #344
- [codex] Archive Linux package distribution proof by @Jesssullivan in #345
- [codex] Ground release proof status docs by @Jesssullivan in #346
- [codex] Enable arm64 container release publishing by @Jesssullivan in #347
- [codex] Ground TCFS release and platform claims by @Jesssullivan in #348
- [codex] Refresh remote and distribution reality docs by @Jesssullivan in #349
- [codex] Ground release and platform proof boundaries by @Jesssullivan in #350
- [codex] Record tinyland branch prune proposal by @Jesssullivan in #351
- [codex] Ground repo reality hygiene by @Jesssullivan in #352
- [codex] Ground checkpoint and RFC identifiers by @Jesssullivan in #353
- Archive TCFS home canary QA proof by @Jesssullivan in #354
- Preserve TCFS symlinks for project-tree canaries by @Jesssullivan in #355
- Add mounted symlink target proof gate by @Jesssullivan in #356
- [codex] Harden linux-xr canary storage proof by @Jesssullivan in #357
- [codex] Verify honey canary binary provenance by @Jesssullivan in #358
- [codex] Harden S3 upload telemetry for fresh-prefix canaries by @Jesssullivan in #359
- [codex] Archive home canary storage summaries by @Jesssullivan in #360
- [codex] Expand M8 delete rename idempotence evidence by @Jesssullivan in #361
- [codex] Fix mounted stub detection and archive linux-xr parity by @Jesssullivan in #362
- [codex] Add linux-xr storage posture canary by @Jesssullivan in #363
- Bound S3 chunk upload stalls by @Jesssullivan in #364
- Bound S3 transport posture evidence by @Jesssullivan in #365
- Add M8 unhydrated delete rename regressions by @Jesssullivan in #366
- [codex] add TCFS on-prem cutover packet gate by @Jesssullivan in #368
- Add fresh-prefix file upload concurrency by @Jesssullivan in #367
- [codex] Document linux-xr-fast metadata blockers by @Jesssullivan in #369
- Add tcfs index inspect + seeded macOS FileProvider smoke gate (TIN-133, #309) by @Jesssullivan in #370
- Archive first green prod Dev ID FileProvider hydration smoke by @Jesssullivan in #371
- docs(macos): record production Dev ID FileProvider hydration PROVEN on 2026-05-18 by @Jesssullivan in #372
- Scaffold Linux post-install smoke harness (TIN-1422) by @Jesssullivan in #373
- Release prep: v0.12.13 — workspace bump + CHANGELOG by @Jesssullivan in #374
- release.yml: accept pre-release tag suffix (-rc1, -beta.2, etc.) by @Jesssullivan in #375
Full Changelog: v0.12.12...v0.12.13-rc1
Contributors
Jesssullivan
Assets 18
tcfs v0.12.12
43e8721
This commit was signed with the committer’s verified signature.
Jesssullivan
Jess Sullivan
tcfs v0.12.12
Quick Install
macOS (.pkg installer — recommended):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/tcfs-0.12.12-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.12-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image:
podman pull ghcr.io/jesssullivan/tcfsd:v0.12.12Debian/Ubuntu:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/tcfsd-0.12.12-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/tcfs-0.12.12-amd64.deb
sudo dpkg -i tcfsd-0.12.12-amd64.deb tcfs-0.12.12-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/tcfsd-0.12.12-x86_64.rpm
sudo rpm -i tcfsd-0.12.12-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.12/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider and .pkg notarization is attempted for Apple artifacts, but release
publication does not fail if Apple's notarization service or account agreements are unavailable.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
Full Changelog: v0.12.11...v0.12.12
tcfs v0.12.11
tcfs v0.12.11
Quick Install
macOS (.pkg installer — recommended):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/tcfs-0.12.11-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.11-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image:
podman pull ghcr.io/jesssullivan/tcfsd:v0.12.11Debian/Ubuntu:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/tcfsd-0.12.11-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/tcfs-0.12.11-amd64.deb
sudo dpkg -i tcfsd-0.12.11-amd64.deb tcfs-0.12.11-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/tcfsd-0.12.11-x86_64.rpm
sudo rpm -i tcfsd-0.12.11-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.11/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider and .pkg notarization is attempted for Apple artifacts, but release
publication does not fail if Apple's notarization service or account agreements are unavailable.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
Full Changelog: v0.12.10...v0.12.11
tcfs v0.12.10
tcfs v0.12.10
Quick Install
macOS (.pkg installer — recommended):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/tcfs-0.12.10-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.10-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image:
podman pull ghcr.io/jesssullivan/tcfsd:v0.12.10Debian/Ubuntu:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/tcfsd-0.12.10-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/tcfs-0.12.10-amd64.deb
sudo dpkg -i tcfsd-0.12.10-amd64.deb tcfs-0.12.10-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/tcfsd-0.12.10-x86_64.rpm
sudo rpm -i tcfsd-0.12.10-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.10/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider and .pkg notarization is attempted for Apple artifacts, but release
publication does not fail if Apple's notarization service or account agreements are unavailable.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
Full Changelog: v0.12.9...v0.12.10
tcfs v0.12.9
tcfs v0.12.9
Quick Install
macOS (.pkg installer — recommended):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/tcfs-0.12.9-macos-aarch64.pkg
sudo installer -pkg tcfs-0.12.9-macos-aarch64.pkg -target /Linux/macOS tarball convenience installer (CLI-first, not a release-proof surface):
curl -fsSL https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/install.sh | shHomebrew:
brew tap --custom-remote Jesssullivan/tummycrypt https://github.com/Jesssullivan/tummycrypt.git
git -C "$(brew --repo Jesssullivan/tummycrypt)" fetch origin homebrew-tap
git -C "$(brew --repo Jesssullivan/tummycrypt)" checkout homebrew-tap
brew install Jesssullivan/tummycrypt/tcfsContainer image:
podman pull ghcr.io/jesssullivan/tcfsd:v0.12.9Debian/Ubuntu:
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/tcfsd-0.12.9-amd64.deb
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/tcfs-0.12.9-amd64.deb
sudo dpkg -i tcfsd-0.12.9-amd64.deb tcfs-0.12.9-amd64.debRPM (Fedora/RHEL/Rocky, daemon-only today):
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/tcfsd-0.12.9-x86_64.rpm
sudo rpm -i tcfsd-0.12.9-x86_64.rpmVerify checksums
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/SHA256SUMS.txt
sha256sum -c SHA256SUMS.txtVerify signature (Sigstore Cosign)
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/SHA256SUMS.txt.sig
curl -LO https://github.com/Jesssullivan/tummycrypt/releases/download/v0.12.9/SHA256SUMS.txt.pem
cosign verify-blob \
--signature SHA256SUMS.txt.sig \
--certificate SHA256SUMS.txt.pem \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'github.com/Jesssullivan/tummycrypt' \
SHA256SUMS.txtmacOS artifacts
macOS CLI binaries are Developer ID signed when Apple credentials are configured.
FileProvider and .pkg notarization is attempted for Apple artifacts, but release
publication does not fail if Apple's notarization service or account agreements are unavailable.
Binaries included
| Binary | Purpose |
|---|---|
tcfs |
CLI: push, pull, sync-status, mount, unsync |
tcfsd |
Daemon: gRPC socket, FUSE, Prometheus metrics |
tcfs-tui |
Terminal UI for interactive management |
tcfs-mcp |
MCP server for AI agent integration |
Full Changelog: v0.12.8...v0.12.9