1. Current release status
No public paid production build is currently approved. Version 0.3.0 is an internal evaluation build, is unsigned and has no production security-support promise. Checkout remains disabled.
2. Report a vulnerability privately
Use the published support address with the app version, affected component, reproduction steps and potential impact. Do not include customer documents, private keys, API keys or third-party personal data. Do not publicly disclose an unremediated issue before a reasonable coordination period has passed.
3. Production support period
Before any paid production release, this page must state the supported major version, first-sale date, security-support end date, update channel and installer-signing identity. A release cannot rely on “one-time purchase” wording to avoid mandatory security or conformity updates.
4. Incident readiness
The internal release gate requires a vulnerability register, triage owner, remediation record and jurisdiction-specific notification path. United Kingdom and EEA sales remain on hold pending qualified review, including applicable Cyber Resilience Act reporting and lifecycle obligations.