# UtiliVera Image 0.8.1 size-optimization remediation

Generated: 2026-09-04

## Outcome

The final 0.8.1 candidate preserves the audited 0.8.0 application workflows and UI while reducing the public Inno Setup package by 16,417,277 bytes (13.29%). The exact frozen executable and installer passed the full regression, localization, archive-composition, installation, and real N-1 upgrade gates listed below.

## Frozen release identities

| Artifact | Bytes | SHA-256 |
| --- | ---: | --- |
| `dist-0.8.1-candidate/UtiliVeraImage.exe` | 106,376,590 | `886552BDD401C5DCA3E4531D7F4AEDB66514475991717AA72C4D88EF81A30D28` |
| `dist/installer/UtiliVeraImage-Setup-0.8.1-Windows-x64.exe` | 107,149,248 | `41819264CD8D64C28957E46353146B1665D87CF056CF97E95CB32F4E8F55B92A` |

Both files are currently Authenticode `NotSigned`. Under the current release policy this does not block publication, but every direct website download must show an adjacent unsigned/Windows Unknown publisher warning, the exact SHA-256 value, and the official verification guide.

## Baseline and measured reduction

| Artifact | 0.8.0 bytes | 0.8.1 bytes | Saved | Reduction |
| --- | ---: | ---: | ---: | ---: |
| Frozen executable | 122,945,819 | 106,376,590 | 16,569,229 | 13.48% |
| Inno Setup installer | 123,566,525 | 107,149,248 | 16,417,277 | 13.29% |

## Builder remediation

- Removed the redundant legacy `pillow-avif-plugin`; Pillow 12.3's built-in AVIF codec remains present and was exercised through the frozen executable.
- Removed only root duplicate copies of `libredwg-0.dll` and `jpeg62.dll`; the required copies remain beside their vendor helper executables.
- Excluded pydicom test fixtures plus only true pyogrio/Shapely source and test files from the release archive.
- Closed independent-audit P1-01: replaced the unsafe `'.c'` path-substring filter with exact suffix matching. The final archive retains all 78 Pyogrio/GDAL CSV tables and 11 CMake runtime files, while excluding only `.c`, `.pyx`, `.pxd`, and `.pxi` sources.
- Added a recursive source-to-archive membership gate for all 89 Pyogrio runtime CSV/CMake files and a frozen EPSG:2227 State Plane Shapefile black-box case.
- Replaced the hard-coded rawpy site-packages path with a project-relative build path.
- Made the release build accept isolated dist/work paths and bind the installer to the explicitly verified source executable.
- Bumped product, executable, installer, manifest, and update identities to 0.8.1.
- Added a real 0.8.0-to-0.8.1 upgrade test that verifies binary replacement, user-setting preservation, AVIF conversion, uninstall registration, and clean uninstall.
- Added an archive-composition gate so the removed duplicates and fixtures cannot silently return.

## Exact-binary verification results

- Source suite: 366 passed, 15 skipped; no failures.
- Output formats: 75/75 passed, including controlled corrupt-input handling.
- Professional inputs: 18/18 passed.
- CAD/GIS conversion matrix: 19/19 passed, including frozen State Plane EPSG:2227 CRS preservation.
- CAD loading matrix: 17/17 passed.
- Professional CAD pack: 6/6 passed.
- Office/Visio pack: 14/14 passed with real LibreOffice and similarity checks.
- RECOIL formats: 150/150 passed.
- Advanced, structure, TIFF, and ICO suites: all passed.
- Isolated stress run: 1,000/1,000 passed in 44.26 seconds.
- UI evidence: 32 exact-binary captures passed across ten representative languages, RTL, light/dark modes, viewports, and scaling.
- Archive composition: 8/8 gates passed across 1,936 members; built-in AVIF is present, all prohibited duplicates/test fixtures are absent, and all 89 required Pyogrio runtime CSV/CMake files are present.
- Installer: silent install, command-line conversion, same-version repair, and uninstall passed.
- Upgrade: real 0.8.0 to 0.8.1 upgrade passed and preserved user data.
- Installer localization: 10/10 language install/uninstall evidence passed.

Two broad suites exceeded their legacy wall-clock limit only when several CPU-heavy frozen tests were launched concurrently. Each affected suite was immediately rerun in isolation against the same frozen SHA-256 and passed; the isolated results above are the release evidence. The 1,000-operation stress result also passed in isolation.

## Evidence root

The machine-readable release manifest is `outputs/image-081-size-optimization-evidence-manifest.json` (7,732 bytes, SHA-256 `291B21FDA12495E09F8A9C0728053CE765BB29B73E4E2A7491D4C6DD41EC7CAB`). It hash-binds 19 evidence artifacts and the changed release sources. The archive report is `work/image-081-8865-archive-composition.json` (1,152 bytes, SHA-256 `0211E984AB6DB2EF7879AA992B92636671866B4637F97BADA33FAE0853FB02FC`).

## Independent review request

The independent auditor must verify the exact executable and installer identities above, compare the result against the inherited 0.8.0 Top-5 audit baseline, independently rerun critical functional and packaging checks, and assign P0/P1/P2 findings. The builder does not approve this release.