{
  "version": "2.4.6",
  "commit": "7e7fd27a5c9369004b36cda8e1aff0c71f381b8c",
  "sha256": "0896e5ab5ccd4cc42c67c85e82ccfc20f3e3a81e7044610039f820b46e446fff",
  "bytes": 20902481,
  "license": "FSL-1.1-MIT",
  "sdkLicense": "MIT",
  "cliLicense": "MIT",
  "signedRelease": false,
  "installationVerification": "Security hardening release: member-visible domain, address, quota and health routes are owner-only, shared labels change only by owner or creator, webhook signing secrets are encrypted at rest with lazy re-encryption of earlier rows, a second installer-generated secret (BOXOX_SIGNING_SECRET) derives every non-JWT key, the developer preview frame carries the message frame's content security policy, and docs/upgrade.md documents the upgrade path. No database migration. SDK 0.2.0, CLI 0.2.0 and email skill 0.4.1 packages are byte-identical to 2.4.5. The maintainer's own installation was upgraded from 2.4.0-era code to this source with the documented upgrade path and /health reported the commit; no fresh-account deployment, mail round trip, populated-mail recovery, DNS migration or throughput test was recorded for 2.4.6. Historical 2.4.0 installation/removal evidence is retained below.",
  "cleanAccountInstallVerified": false,
  "oneClickInstallVerified": false,
  "artifacts": [
    {
      "name": "boxox-v2.zip",
      "bytes": 20902481,
      "sha256": "0896e5ab5ccd4cc42c67c85e82ccfc20f3e3a81e7044610039f820b46e446fff"
    },
    {
      "name": "boxox-email-skill-0.4.1.zip",
      "bytes": 8007,
      "sha256": "fdc53c16f80743550544e1b2ff4d3345ceaeabdf887d0bd4d56d855e99c2a99b"
    },
    {
      "name": "boxox-mail-0.2.0.tgz",
      "bytes": 16122,
      "sha256": "e5fd7401ad745e562f69e8ee94e5033cfde6ae6ae535a40eb24c3fe33663bd1c"
    },
    {
      "name": "boxox-cli-0.2.0.tgz",
      "bytes": 41210,
      "sha256": "aaa0d5ca9890d9db50ce9fc2672ea40d05cf45038d6c39bf2e8b8ee4f65270fb"
    },
    {
      "name": "boxox-cli-0.2.0.mjs",
      "bytes": 162700,
      "sha256": "fb26e91921e153ced1e4e3d5cd15ba07fa3a63816f2dd43cee9d7967ea98fc45"
    }
  ],
  "freeAccountInstallVerified": false,
  "predecessorFreshAccountAppVerification": {
    "version": "2.4.0",
    "profile": "free",
    "domains": 0,
    "ownerSignInVerified": true,
    "mailDeliveryVerified": false
  },
  "predecessorFreshAccountRemovalVerification": {
    "version": "2.4.0",
    "profile": "free",
    "domains": 0,
    "messages": 0,
    "attachments": 0,
    "r2Objects": 0,
    "appResourcesRemoved": true,
    "accessAppsAndUnusedPoliciesRemoved": true,
    "oldAppEndpointsChecked": 7,
    "oldAppStatus": 404,
    "accessCleanup": "authorized-dashboard",
    "accountSubscriptionsRetained": true,
    "wranglerProfilesRetained": true,
    "mailMigrationVerified": false,
    "populatedMailRecoveryVerified": false
  },
  "publicationPrivacy": {
    "sourceSanitized": true,
    "scanner": "Gitleaks 8.30.1 with exact reviewed test-fixture hashes, plus Cloudflare resource-ID and bounce-address checks",
    "generatedArchiveScanRequired": true,
    "priorSourceVersionsWithdrawn": [
      "2.0.0",
      "2.0.1",
      "2.1.0",
      "2.1.1",
      "2.1.2",
      "2.2.0",
      "2.3.0",
      "2.4.0",
      "2.4.1",
      "2.4.2",
      "2.4.3",
      "2.4.4"
    ],
    "requiredAttributionPreserved": true,
    "priorPackagesWithdrawn": [
      "boxox-email-skill-0.1.0.zip",
      "boxox-email-skill-0.2.0.zip",
      "boxox-email-skill-0.3.0.zip",
      "boxox-email-skill-0.4.0.zip",
      "boxox-brand-assets-1.0.0.zip",
      "boxox-brand-assets-1.1.0.zip"
    ]
  }
}