Release notes

Published notes are generated from the same exact-source release manifest as the signed installer, checksums, SBOMs, notices, and rollback target.

No version is current merely because a file is signed. The public manifest is the freshness authority and rejects every older artifact as stale.