Sovereign Drive 1.7.0 (built 2026-10-03 from main @ af2ff94, GitHub Actions run 37165220923)

What is new in this build (full notes: RELEASE_NOTES.md):
  - Fixes three serious security findings in the AI tool connector: a web page open in your browser can no longer
    talk to it, and the file tools stay inside your vault folders.
  - Network access is now a setting (Agents > Connect > "Allow network access"). New installs start with it OFF, so
    only this computer can use the connector; an install that predates the setting keeps working over the LAN until
    you turn it off.
  - The Windows .exe installer now works on a fresh PC: it installs the Visual C++ runtime when it is missing.
  - When the connector is turned off, or a device is not allowed in, an agent is told why and what to ask you to do,
    instead of seeing a refused connection. Nothing from your vault is served in either case.

windows/   Sovereign Drive_1.7.0_x64-setup.exe   (recommended)   or   Sovereign Drive_1.7.0_x64_en-US.msi
           UNSIGNED (Azure signing isn't set up yet): SmartScreen will warn ("More info" > "Run anyway").
           The .exe installs the Microsoft Visual C++ runtime if the PC doesn't have it (you may see an
           administrator prompt). The .msi does NOT: on a PC without it, first install the "Microsoft Visual C++
           Redistributable (x64)" from https://aka.ms/vs/17/release/vc_redist.x64.exe, or use the .exe.
macos/     Sovereign Drive_1.7.0_aarch64.dmg   (Apple Silicon only; .app.tar.gz is the same app, zipped)
           UNSIGNED / not notarized: right-click > Open the first time.
linux/     sovereign-drive_1.7.0_amd64.deb     (Debian/Ubuntu: sudo apt install ./sovereign-drive_1.7.0_amd64.deb)
           sovereign-drive_1.7.0_amd64.AppImage (chmod +x, then run)

Verify a download: compare its SHA-256 with SHA256SUMS.txt in this folder.

------------------------------------------------------------------
macOS: "Sovereign Drive is damaged and can't be opened"
------------------------------------------------------------------
The app is unsigned and not notarized, so a copy that came through a browser/Drive download is
quarantined and Gatekeeper calls it "damaged". It isn't; clear the flag:

  1. Open the .dmg, drag Sovereign Drive into Applications.
  2. In Terminal:   xattr -cr "/Applications/Sovereign Drive.app"
  3. Open it normally.

Still won't open (Apple Silicon wants *a* signature)?  Sign it locally, then try again:
     codesign --force --deep --sign - "/Applications/Sovereign Drive.app"

If it says "unidentified developer" instead: right-click the app > Open > Open, or
System Settings > Privacy & Security > Open Anyway.

------------------------------------------------------------------
Upgrading from 1.6.0 or earlier
------------------------------------------------------------------
Installing next to an existing vault reopens it (as of 1.6.0). Network access keeps whatever it was (on, if you
installed before this setting existed); turn it off in Agents > Connect if only this computer needs the connector.