{
    "product_name":  "Kaitiaki Iron Sentinel",
    "version":  "0.6.20",
    "built_at":  "2026-06-17T01:43:20.8799366Z",
    "source_commit":  "local-build-20260617-gui-servicecall-status-fix",
    "broker_ready":  true,
    "install_path":  "C:\\Program Files\\Kaitiaki\\Iron Sentinel\\",
    "installer":  {
                      "filename":  "KaitiakiIronSentinel-0.6.20-kaitiaki-it.msi",
                      "size_bytes":  93831168,
                      "sha256":  "18838fcefbebe1dd2a5c704ba62fed9fb12aa1ea36e3810bfba34332c5de5e58",
                      "wix_version":  "4.0.5"
                  },
    "gui":  {
                "filename":  "KaitiakiIronSentinel.exe",
                "public_filename":  "KaitiakiIronSentinel-0.6.20.exe",
                "size_bytes":  45610984,
                "sha256":  "04c537ff50ead4ab1843c06c9b0bfe9e58b9d27434db3203fb07c51cf95b9800",
                "version":  "0.6.20 / 0.6.20.0"
            },
    "worker":  {
                   "filename":  "kit-vpn-0.6.19.exe",
                   "size_bytes":  10103680,
                   "sha256":  "5acda8520d534c34470f323c50eefca5480653cce8de56436c2d3dd2e486c171",
                   "version":  "0.6.19",
                   "note":  "Preserved proven service worker; GUI 0.6.20 fixes service-call delegation and status parsing."
               },
    "validation":  {
                       "authenticode":  "MSI, GUI, worker, wg.exe, and wireguard.exe verified valid locally.",
                       "gui_wrapper":  "IronSentinelClient.RunCliAsync(connect) delegates to service-call connect; GetTunnelStatusAsync reads service-call status.",
                       "live_wrapper_proof":  "outputs/evidence/iron_sentinel_0.6.20_gui_wrapper_service_call_proof_20260617.json",
                       "payload_extract":  "outputs/evidence/iron_sentinel_0.6.20_msi_payload_extract_20260617.json",
                       "install_caveat":  "Silent local install is blocked by Windows Installer policy 1625 until user-approved elevation is used."
                   },
    "production_ready":  false,
    "readiness_copy":  "0.6.20 signed release candidate: GUI service-call/status fixes are live-tested through the wrapper; elevated installed-upgrade proof is still required before production_ready=true.",
    "authenticode":  {
                         "signed":  true,
                         "signer":  "CN=Kaitiaki IT (Dev), O=Kaitiaki IT Pty Ltd, C=AU",
                         "thumbprint":  "2682A9B1F0551E4D7D2D9EAAAF8016176A1DB6E6",
                         "trust_model":  "Enterprise trust deployment via kaitiaki-au-codesign.cer; not public CA SmartScreen reputation."
                     }
}