Independent release evidence
UtiliVera Scan 0.5.2 audit
The frozen 0.5.2 application passed its independent Top-5 product gate at 96/100. The optimized installer is 18.9% smaller than 0.5.1 and passed an independent incremental review with P0=0 and P1=0.
Methodology and immutable artifacts
The independent reviewer compared the frozen product with NAPS2, VueScan, PaperScan, ABBYY FineReader PDF, and Adobe Acrobat Pro across acquisition, cleanup, OCR, page assembly, archival PDF, security, automation, recovery, accessibility, localization, performance, packaging, and professional workflows.
- Complete independent Top-5 product audit
- Independent 0.5.2 incremental and installer audit
- 51-test frozen-candidate summary
- All 51 named product tests
- Five public workflow evidence records
- Final stripped-runtime test evidence
- Pinned runtime optimization evidence
- Real 0.5.1 to 0.5.2 upgrade evidence
- Installer build evidence
- Install, localization, CLI, and prerequisite evidence
- Ten-run deterministic build evidence
- Frozen 202-file package manifest
- Current 28-component third-party SBOM
- Current third-party notices
- Current offline license index
- Pinned libtiff 4.6.0 corresponding source
- Reproducible no-JBIG libtiff build recipe
- Two-run no-JBIG build and PE evidence
- Pinned libiconv 1.17 corresponding source
- Pinned libthai 0.1.29 corresponding source
- Screenshot and video provenance
- Artifact hash manifest
Frozen identities
Application: 347,136 bytes
667A5188257ACEA54A56F66EAB46A96B47E4A3BABC0792758309E854B2816099Inno Setup 0.5.2: 83,368,866 bytes
F283C43FD3BD38F475A56E4707591436D5DE5EFBE64AC97A360938710ECAB180The installer is publicly available unsigned under the current policy. Windows may show “Unknown publisher”; the release page provides the exact checksum and official verification steps.
Unsigned release rule and 30-day target
The independently audited installer is publicly available unsigned under the current release policy. Windows may show “Unknown publisher”; users must download only from utilivera.com and verify SHA-256. The continuous 30-day target begins at 2026-08-21T14:56:01Z and ends at 2026-09-20T14:56:01Z.
Evidence refreshed: September 4, 2026
Current unsigned public release decision
Code signing is not a mandatory gate at the current stage. The frozen installer is public because the product audit and internal installer engineering passed. It remains unsigned, so Windows may show “Unknown publisher.” Download only from utilivera.com and verify SHA-256.