v1.0.6.44 - Final Release Chrome TLS Closure

CHANGELOG.md

@@ -1,3 +1,13 @@
+## v1.0.6.44 — Final Release Chrome TLS Closure — 2026-08-18
+
+- Final forensic verification of completed Phase-1 and Phase-2 behavior against the v1.0.6.43 baseline.
+- Fixed Google Chrome prerequisite MSI download failures caused by the portable Python urllib/OpenSSL certificate-chain path.
+- The approved Google MSI now downloads through the existing Requests runtime dependency with mandatory TLS verification, no automatic redirects, and validation of every redirect against the exact dl.google.com Stable x64 MSI policy.
+- Preserved mandatory Windows Authenticode trust and Google LLC publisher verification before installer execution.
+- No TLS bypass, HTTP fallback, Chromium fallback, Plugin API change, persistence schema change, licensing change, power change, workflow-lifecycle change or new UI page.
+
+---
+
 ## v1.0.6.43 — Phase 2 Forensic Closure — 2026-08-18
 
 - Re-audited v1.0.6.42 workflow lifecycle and true multiworkflow implementation against the approved Phase-2 contract.

CITATION.cff

@@ -2,7 +2,7 @@ cff-version: 1.2.0
 title: "VibraPilot — Vib Tools Browser Automation Desktop"
 message: "If you reference this software, cite the Vib Tools project."
 type: software
-version: 1.0.6.43
+version: 1.0.6.44
 authors:
   - name: "Vib Tools"
 url: "https://vib.tools/"

COMPATIBILITY.md

@@ -1,3 +1,12 @@
+# v1.0.6.44 Final Release Compatibility
+
+- Baseline: v1.0.6.43.
+- Plugin API remains 1; workspace/runtime schemas remain 2.
+- Existing external workflows, per-Task multiworkflow identity, background runtime, power guard and browser profiles remain compatible.
+- Chrome installer source/signature policy is unchanged; only the verified HTTPS transport is corrected for portable Windows certificate-chain reliability.
+
+---
+
 # v1.0.6.43 Phase 2 Forensic Closure Compatibility
 
 - External Workflow Plugin API remains version 1.

DELTA_FILE_LIST.txt

@@ -10,36 +10,22 @@ SHA256SUMS.txt
 UPDATE_LOG.md
 VERSIONING.md
 config/AppConfig/app.py
-config/verification/v1.0.6.43_phase2_forensic_closure_scope.json
+config/verification/v1.0.6.44_final_release_chrome_tls_scope.json
 docs/docs.manifest.ygit
 docs/index.md
-docs/updates/v1.0.6.43-phase2-forensic-closure.md
-docs/verification/V1.0.6.43_PHASE2_FORENSIC_CLOSURE.md
-project/CURRENT_PROJECT_STATE.md
-project/README.md
-project/updates/v1.0.6.39-v1.0.6.40-production-readiness/03_PHASE_PROGRESS_COMPLETION_LEDGER.md
-project/updates/v1.0.6.39-v1.0.6.40-production-readiness/04_ERROR_HANDLING_AUDIT_AND_PLAN.md
-project/updates/v1.0.6.39-v1.0.6.40-production-readiness/05_ACTUAL_IMPLEMENTATION_STATUS.md
-project/updates/v1.0.6.39-v1.0.6.40-production-readiness/07_ACCEPTANCE_TEST_MATRIX.md
-project/updates/v1.0.6.39-v1.0.6.40-production-readiness/08_REQUIREMENTS_TRACEABILITY_MATRIX.md
-project/updates/v1.0.6.42-phase2-workflow-lifecycle-multiworkflow/08_PHASE2_PROGRESS_LEDGER.md
-project/updates/v1.0.6.42-phase2-workflow-lifecycle-multiworkflow/09_ACTUAL_IMPLEMENTATION_STATUS.md
-project/updates/v1.0.6.42-phase2-workflow-lifecycle-multiworkflow/10_FINAL_VERIFICATION_REPORT.md
-project/updates/v1.0.6.43-phase2-forensic-closure/00_SCOPE_LOCK.md
-project/updates/v1.0.6.43-phase2-forensic-closure/01_FORENSIC_AUDIT_REPORT.md
-project/updates/v1.0.6.43-phase2-forensic-closure/02_ROOT_CAUSE_AND_FIX_REPORT.md
-project/updates/v1.0.6.43-phase2-forensic-closure/03_VERIFICATION_MATRIX.md
-project/updates/v1.0.6.43-phase2-forensic-closure/04_ACTUAL_IMPLEMENTATION_STATUS.md
+docs/updates/v1.0.6.44-final-release-chrome-tls.md
+docs/verification/V1.0.6.44_FINAL_RELEASE_CHROME_TLS.md
 pyproject.toml
 scripts/verify_repository.py
-src/vibrapilot/qt_app.py
-src/vibrapilot/workflow/plugin_loader.py
-src/vibrapilot/workspace_state.py
+src/vibrapilot/chrome_installer.py
 tests/test_app_config.py
-tests/test_v10623_pr06_workflow_state_atomic_switch.py
-tests/test_v10624_pr07_workflow_showcase.py
-tests/test_v10626_pr09_data_persistence_reporting_compatibility.py
-tests/test_v10627_pr10_workflow_error_recovery.py
-tests/test_v10642_workflow_lifecycle.py
-tests/test_v10643_phase2_forensic_closure.py
+tests/test_v10638_portable_runtime_root_fix.py
+tests/test_v10644_chrome_tls_transport.py
 vibproject.ygit
+project/CURRENT_PROJECT_STATE.md
+project/README.md
+project/updates/v1.0.6.44-final-release-chrome-tls/00_SCOPE_LOCK.md
+project/updates/v1.0.6.44-final-release-chrome-tls/01_FORENSIC_AUDIT_REPORT.md
+project/updates/v1.0.6.44-final-release-chrome-tls/02_ROOT_CAUSE_AND_FIX.md
+project/updates/v1.0.6.44-final-release-chrome-tls/03_VERIFICATION_MATRIX.md
+project/updates/v1.0.6.44-final-release-chrome-tls/04_ACTUAL_IMPLEMENTATION_STATUS.md

PATCH_MANIFEST.md

@@ -1,54 +1,46 @@
-# VibraPilot v1.0.6.43 — Phase 2 Forensic Closure Replace-Ready Patch
+# VibraPilot v1.0.6.44 — Final Release Chrome TLS Closure Replace-Ready Patch
 
 ## Official baseline
 
-- Input: `VibraPilot_Official_v1.0.6.42_Baseline(1).zip`
-- Input SHA-256: `0713798e061b0eef15c1a1d4cb52e1347687f7498419b9ab1a79b3017f31dae1`
-- Baseline version: `1.0.6.42`
-- Baseline branch commit: `8c3e9a137ecf852aa152dba0590414e7f8f6209d`
-- Baseline Git tree: `c61a9864e99659bf0a3d3cb229e1ad6e5e85cb69`
-- Target version: `1.0.6.43`
-
-## Corrective scope
-
-- restart-free historical workflow-switch compatibility service;
-- lifecycle transaction root/type and workflow-identity fail-closed validation;
-- schema-v2 workspace Task-shell preservation when workflow identity is unresolved/unavailable;
-- unresolved legacy unfinished-run package-mutation blocking;
-- same-session live lifecycle transaction blocking for package mutation, Task creation and browser start;
-- Default Workflow UI semantics replacing residual global `ACTIVE` wording;
-- removal of one duplicated staging-directory setup statement.
-
-## Production source changes
-
-- `src/vibrapilot/qt_app.py`
-- `src/vibrapilot/workflow/plugin_loader.py`
-- `src/vibrapilot/workspace_state.py`
-
-Chrome prerequisite/runtime/installer/AuthentiCode, Plugin API 1, backend worker logic, runtime DB schema-v2 implementation, power, licensing, settings defaults, dependencies, CI and portable packaging are frozen from v1.0.6.42.
-
-## Verification evidence
-
-- v1.0.6.42 baseline: repository verifier PASS; pytest 541 passed / 6 skipped / 105 subtests; unittest 201 OK / 6 skipped; compileall PASS.
-- tests-first v1.0.6.43 reproduction: 8 concrete failures reproduced / 1 guard already passing.
-- corrected v1.0.6.43 closure tests: 9 PASS.
-- targeted historical/current correction gate: 123 PASS.
-- broader Phase-1/Phase-2/persistence/Chrome gate: 190 PASS.
-- frozen SHA audit: PASS.
-- metadata/current scope tests: 13 PASS; repository verifier PASS.
-- final full pytest: 550 passed, 6 skipped, 105 subtests passed.
-- final full unittest: 201 OK, 6 skipped.
-- compileall: PASS.
-- `git diff --check`: PASS.
-- deleted files: 0.
+- Input: `VibraPilot_Official_v1.0.6.43_Baseline(2).zip`
+- Input SHA-256: `eb3d838d9fcdd1c1597883b820942b362123d3bb47190295a1f3565f37005002`
+- Baseline version: `1.0.6.43`
+- GitHub main merge: `8d76720740f9d822afb7ce5bc4f04f1e2407b5e9`
+- Baseline source commit: `ab148f8137c1066e497136d6246ac6f84db54024`
+- Baseline tree: `1fa6033f55e59d7abcdfa1fe62a781edb4024f36`
+- Target version: `1.0.6.44`
+
+## Confirmed defect and correction
+
+The portable Windows Chrome prerequisite downloader used Python `urllib` and reproduced `CERTIFICATE_VERIFY_FAILED: unable to get local issuer certificate`. The default network transport now uses the existing Requests dependency with mandatory TLS verification. Automatic redirects are disabled; every redirect is validated against the exact approved `https://dl.google.com/dl/chrome/install/googlechromestandaloneenterprise64.msi` policy. Windows Authenticode trust and Google LLC publisher verification remain mandatory before execution. No insecure SSL or HTTP fallback is added.
+
+## Production source scope
+
+- `src/vibrapilot/chrome_installer.py` only.
+
+Phase-1, Phase-2, workflow lifecycle/multiworkflow, Plugin API 1, schemas, licensing, power, browser profiles, settings defaults, dependencies, CI and portable packaging architecture remain unchanged.
+
+## Verification
+
+- baseline repository verifier: PASS
+- baseline pytest: 550 passed / 6 skipped / 105 subtests
+- baseline unittest: 201 OK / 6 skipped
+- tests-first Chrome TLS reproduction: 3 failures before fix
+- targeted Chrome gate: 25 PASS
+- final repository verifier: PASS
+- final pytest: 553 passed / 6 skipped / 105 subtests
+- final unittest: 201 OK / 6 skipped
+- compileall: PASS
+- git diff check: PASS
+- deleted files: 0
 
 ## Delta inventory
 
-- Public changed/new files: 30
-- Private/local `project/` files: 15
-- Total Delta entries: 45
-- `project/**` is local/private only and must never be staged/pushed.
+- Public changed/new files: 24
+- Private/local `project/` files: 7
+- Total Delta entries: 31
+- `project/**` is local/private only and must never be staged or pushed.
 
-## External gates
+## External release gates
 
-Windows live acceptance and GitHub v1.0.6.43 CI remain PENDING and are not claimed PASS.
+Real Windows portable Chrome download/install acceptance and GitHub v1.0.6.44 CI/portable build remain pending external evidence.

PROJECT_STRUCTURE.md

@@ -1,3 +1,9 @@
+# Project Structure — v1.0.6.44 Final Release Closure
+
+`src/vibrapilot/chrome_installer.py` is the only production source modified. It retains exact Google-source validation and Windows Authenticode/Google LLC verification while using Requests verified TLS transport for the MSI download.
+
+---
+
 # Project Structure — v1.0.6.43 Phase 2 Forensic Closure
 
 ```text

README.md

@@ -1,3 +1,9 @@
+# VibraPilot v1.0.6.44 — Final Release Candidate
+
+v1.0.6.44 seals the completed Phase-1/Phase-2 production work and fixes the Windows portable Chrome prerequisite download TLS failure. Chrome installation remains fail-closed: exact approved Google HTTPS source, verified TLS, redirect revalidation, Windows Authenticode trust and Google LLC publisher identity are required before execution.
+
+---
+
 # VibraPilot v1.0.6.43 — Phase 2 Forensic Closure
 
 v1.0.6.43 is a scope-locked corrective seal over v1.0.6.42. It preserves Workflow Update/Remove/Deactivate, restart-free lifecycle, immutable per-Task workflow identity and true simultaneous multiworkflow execution while closing concrete lifecycle-transaction, legacy-recovery, workspace-preservation and Default Workflow UI semantic gaps. Chrome prerequisite/secure-install, Plugin API 1, licensing, browser-profile, power, dependency, CI and packaging architecture remain unchanged.

ROADMAP.md

@@ -1,3 +1,9 @@
+# Current Roadmap — v1.0.6.44 Final Release Closure
+
+Phase 1: **COMPLETE**. Phase 2: **COMPLETE**. Phase-2 forensic closure: **COMPLETE**. v1.0.6.44 performs final release verification and fixes the reproduced Chrome prerequisite TLS transport failure. No new feature phase is introduced.
+
+---
+
 # Current Roadmap — v1.0.6.43 Phase 2 Forensic Closure
 
 ## Phase 2 status

SHA256SUMS.txt

@@ -1,44 +1,30 @@
-3ca9efd2042d59e05ddf81905cc811c37bce42b23af042a6dc9e14fb38d642c3  CHANGELOG.md
-55382d5dafbab1aba4eb0996690d609634536bd8939b23d4aa71e735fb848f42  CITATION.cff
-e235132874f0227512d450b8381810b4fa06449050d5adc0d340feee55b46850  COMPATIBILITY.md
-f091ee13ba2934dd04d045a2442085c44778ce6d44a003367300652190b9127f  DELTA_FILE_LIST.txt
-3cb32c4eaa173cbff68b07b04e6a5539d2fe3e6b172b0df28df79e707c1a6d02  PATCH_MANIFEST.md
-71397439692a9ba350b1d8e644da373823bb0f314c40491c948885de94e4d812  PROJECT_STRUCTURE.md
-fbb8f9040f3b54ed6ae4258dace8ef19e88272f7eff2f0c56c4943eff67356b6  README.md
-8e74f72ac687d8382b3ccbe3ebea0b632151f036e3620a58226ddf2d13b37e52  ROADMAP.md
-e1d2d87987b77eb6f918b0869752e8e6a33c646f03fb404b685e58117fd827c9  UPDATE_LOG.md
-0661aa6b4fc0f4089832dab9d02dd835c236609eca468b38af7d03b057c779e0  VERSIONING.md
-4d1e2490170d7757fadf29c08decd2c838ebd1fbcb04c63a7d55732759de6701  config/AppConfig/app.py
-279bf322a267bd90c319af0d1a946ecc98f30f1237fb519a15cc2a8fee228b04  config/verification/v1.0.6.43_phase2_forensic_closure_scope.json
-126d4fe3c24215edd2a86a8c725e5226d88508f7d760d1fb85c542e0d33d4022  docs/docs.manifest.ygit
-6546113c1da8907713592217ecb200abedc9400eea0ed5059f250a12a526e51b  docs/index.md
-562264a0c3849e3a107d180dc69b6310cdfac8a808397dfd8e72d3f665882324  docs/updates/v1.0.6.43-phase2-forensic-closure.md
-83d348427d10e73fb14f2d164a7c0e96572089161e9cbc6f9497fb4ffd79eb8e  docs/verification/V1.0.6.43_PHASE2_FORENSIC_CLOSURE.md
-47f0891fbab098ff73eec1437e3edc9aa9452a0e09171b595509129be0321909  project/CURRENT_PROJECT_STATE.md
-7cacde2453c913fa2514b33961ff42ebfd7952e9ae809bd8457000ec034a39fd  project/README.md
-8d3c834769da7d236cafe8211ea85847f130a15de94cc6177b0287018f321c8c  project/updates/v1.0.6.39-v1.0.6.40-production-readiness/03_PHASE_PROGRESS_COMPLETION_LEDGER.md
-f15bc0d550722dc3ce65a62ab067cbc9164f9eba748f34c4e91985e4a9672437  project/updates/v1.0.6.39-v1.0.6.40-production-readiness/04_ERROR_HANDLING_AUDIT_AND_PLAN.md
-714c116784765b6b2a4f8e5c1aaf5f3a6c4210cf0a9cfd48dc56e3be671511b2  project/updates/v1.0.6.39-v1.0.6.40-production-readiness/05_ACTUAL_IMPLEMENTATION_STATUS.md
-3db19d7fced4da0d62e1cff7219c1ac6986c5990c277a26f2b68ab0ab0296b75  project/updates/v1.0.6.39-v1.0.6.40-production-readiness/07_ACCEPTANCE_TEST_MATRIX.md
-48cd5e78ac5583507e1ad54b2f15547526e39e9286c36933e5152c09fec72644  project/updates/v1.0.6.39-v1.0.6.40-production-readiness/08_REQUIREMENTS_TRACEABILITY_MATRIX.md
-7800d0bb2edd848946420e0f57cfce362f461ba7e13da63ad78d9bb9ed3d341a  project/updates/v1.0.6.42-phase2-workflow-lifecycle-multiworkflow/08_PHASE2_PROGRESS_LEDGER.md
-9fc8d56a71d7974c8eb29f481ef637c09ca80edabbd1027cc6361460ca9952fd  project/updates/v1.0.6.42-phase2-workflow-lifecycle-multiworkflow/09_ACTUAL_IMPLEMENTATION_STATUS.md
-04cbb70c9c31be346ee1a6aaa2c520ddf23f163f40ab3a9e8a99f1b0abe829b1  project/updates/v1.0.6.42-phase2-workflow-lifecycle-multiworkflow/10_FINAL_VERIFICATION_REPORT.md
-fa3ee8efabd172f948d0cf916d4ff15125985855b4775835e8b59bae5ea9688b  project/updates/v1.0.6.43-phase2-forensic-closure/00_SCOPE_LOCK.md
-affa217a6e2f09b6f23e60d7f68ea6bc966b6a9ba32d2458464a9ad8c1dcc074  project/updates/v1.0.6.43-phase2-forensic-closure/01_FORENSIC_AUDIT_REPORT.md
-b2ce52ba801b854ad73caab6883574ac75fb9097ea6d80cc9eb11cbdb6dde875  project/updates/v1.0.6.43-phase2-forensic-closure/02_ROOT_CAUSE_AND_FIX_REPORT.md
-37759d13937d1598741c8a5bc88c7dafc1a115b2b4e58230b5b4428aa618987d  project/updates/v1.0.6.43-phase2-forensic-closure/03_VERIFICATION_MATRIX.md
-11c64a20aaa114a4df9558538a95a2b5b7c1a2aeb0eb353282bfe92b4e3bb50e  project/updates/v1.0.6.43-phase2-forensic-closure/04_ACTUAL_IMPLEMENTATION_STATUS.md
-895eca262c66c06978acba6abf9696ac657e4c6c3872f535239d3988605cd562  pyproject.toml
-c58c6f8ca2e7f2de427fa3e559249f30a48754f5fea999214b3d481e24d8fb8b  scripts/verify_repository.py
-087ae992e95a7778944cfc2a41d692bd19df237b2714eaeeb2b30d7723e6d982  src/vibrapilot/qt_app.py
-175b95801aad71d3e01b17f0521cc20eb2ac90384fa00031ff3c52705217746d  src/vibrapilot/workflow/plugin_loader.py
-b346b90e433f7b1c728887d497783428f6ef2099d82cfacba2e73c8ee4c54f7e  src/vibrapilot/workspace_state.py
-b043e4573d61da2e2aa441e73b8e86ff64d58aa1fd1e2dca1c5a936c505a3a70  tests/test_app_config.py
-2a748ec89fe7ab0ef259279418cf4cc662e1f2ca14d36ffe0eeced790b5c6697  tests/test_v10623_pr06_workflow_state_atomic_switch.py
-819040a94cd41a2b156d12f6ccb8baf4e2d99eb26def4c91065b1f699b918fdb  tests/test_v10624_pr07_workflow_showcase.py
-37110669b838914b656a09f0c4552f82f923b300bda0d7f8c5ab0b055b40d26f  tests/test_v10626_pr09_data_persistence_reporting_compatibility.py
-7b7e9452dce6ce1e319bfa4966cdeae07773f2baa83b5ab3037757c374914233  tests/test_v10627_pr10_workflow_error_recovery.py
-a42c3ef5020d08a0b67cdbb36f6bdd604536dd5e825693056cacd0923d785fbb  tests/test_v10642_workflow_lifecycle.py
-591135843c74f322df6403f5509b28b5956ae288727836ec8d40bcb70f39adfe  tests/test_v10643_phase2_forensic_closure.py
-3b483474b389953c16abf8b4c2581704c0a1a8ee0c9bf924c2f7aa0570e7846f  vibproject.ygit
+ed6d4ae0424574cc2e70ded0842af3bdbd432a507f0afadac169190d38db01b0  CHANGELOG.md
+40cff9a939b25a492b8ecb0bfbb7c64e99abe8993b3b0223121a79b322c5c379  CITATION.cff
+02a013792fe38a53c3920145da4d23b3262758b374e670a9992e16d65e0260dd  COMPATIBILITY.md
+c30cf696fce20d3d9fb0f6b4b80414119a217d4d2f03f63e73f510b4ada5242c  DELTA_FILE_LIST.txt
+dca579355d191c4e6187a8246e1c3da963b9be0177d178c499c6291eb2be055e  PATCH_MANIFEST.md
+b3d2fe399cb87fa17cb53ad8332cc6a0065950ae3223345803c1dcaf38c888fe  PROJECT_STRUCTURE.md
+3023e922002373d59dc675dcf55db8552da89fa2b6b136b857da5695a9365b63  README.md
+8c52d1d95605eaca1a13a6c2aaf3fa0081c071e39c695bd520bc08b33129e04f  ROADMAP.md
+ab7f5ac9d9b3fc20fe9fa39952ea751d17079b0dc1f06baaa2c2f7391bdaab6f  UPDATE_LOG.md
+bbbf6b4fe1b6d5195ad7d1312e4d3f9af154715ca0bfb3a3f1a4413cbc75b084  VERSIONING.md
+019fabf5fc986da7132f58bba57495b7b7ef79963bf1a06472815088f879ef97  config/AppConfig/app.py
+421c64791e66bd6004c01572ebe4e105c9fc2cf22d3d05efca7643fa97b66077  config/verification/v1.0.6.44_final_release_chrome_tls_scope.json
+ac543917c510a49cfb5dcfc5f47f12b1426d49da89d0219ad5a6961f499f8942  docs/docs.manifest.ygit
+1efaf8d10ad2f9d588a40895db15c2d20f6a65dbecbfc8c8087195cf4a2d1f94  docs/index.md
+e0a019bcf6eddf0aeb787f0eea4870395cf76eda3aac342f31172ca6e5b0e935  docs/updates/v1.0.6.44-final-release-chrome-tls.md
+d8861a76e59a2fc89b16942548970ad4a5578d2cd357417029a734d1637999be  docs/verification/V1.0.6.44_FINAL_RELEASE_CHROME_TLS.md
+cf8b992a3527df77318db2956162bbdcddbe24d60974bf33ffd15a49167166d1  pyproject.toml
+a7e438ee0a5a90eef5219dc17fe62c2e6ac946e2ad5a205d8c533c6553d6f777  scripts/verify_repository.py
+a80806577bbd65dc7d627800514f74717580fafd6e130bcff100deb33dc3a163  src/vibrapilot/chrome_installer.py
+d9483f12960a14a414343dff1448d078232d42b6a9c49df510c09d1ad7778288  tests/test_app_config.py
+6d83d38d91f79701bdaa821b5031eedc06671929b4c65a832071abac9c81d1b6  tests/test_v10638_portable_runtime_root_fix.py
+5e3de87acec5ea5da43e23fa332decebad03ede2cb19d056ad12f95ddb529712  tests/test_v10644_chrome_tls_transport.py
+a9ae4ffeee518b9ed26c248b53a04ef14e3823c20057a69749fbf36176217bb6  vibproject.ygit
+3feb1ce17bba4c4bafc07a2c132f4f17149764d5bbc971de16ba11007c090a6f  project/CURRENT_PROJECT_STATE.md
+d2b124448ede408533c9ebc5ae05b6dfe1db7573fbd0ce6225ac7492bb834e72  project/README.md
+eac734115e8b0839d1e37803c136c12d9858e20ac910d944ae84c27ea51a7d80  project/updates/v1.0.6.44-final-release-chrome-tls/00_SCOPE_LOCK.md
+8f777c857839bb6b5c59498a726aa1c1e0f0d352f0c487adde1a93aa1063ee0b  project/updates/v1.0.6.44-final-release-chrome-tls/01_FORENSIC_AUDIT_REPORT.md
+b78de5432bb486051c2846b8067c2d81ddb386a9358bd3407a49738369cf5e30  project/updates/v1.0.6.44-final-release-chrome-tls/02_ROOT_CAUSE_AND_FIX.md
+2d4819f8fab3bcfbcdab0265db5e19cbd2ac1eacec0ec54bfa51b6f453c0d5c9  project/updates/v1.0.6.44-final-release-chrome-tls/03_VERIFICATION_MATRIX.md
+9f1644af2d589188b7a2c99099553faf4585452a9db93926634141f32fe538ac  project/updates/v1.0.6.44-final-release-chrome-tls/04_ACTUAL_IMPLEMENTATION_STATUS.md

UPDATE_LOG.md

@@ -1,3 +1,9 @@
+# v1.0.6.44 — Final Release Chrome TLS Closure
+
+Replaced only the Chrome MSI network transport path with Requests verified-CA HTTPS transport while preserving the existing exact Google source/redirect policy and Authenticode/Google LLC execution gate. Phase-1, Phase-2, UI, persistence, workflow lifecycle and multiworkflow behavior remain unchanged.
+
+---
+
 # v1.0.6.43 — Phase 2 Forensic Closure Update Log — 2026-08-18
 
 - Official baseline: v1.0.6.42 / `8c3e9a137ecf852aa152dba0590414e7f8f6209d` / tree `c61a9864e99659bf0a3d3cb229e1ad6e5e85cb69`.

VERSIONING.md

@@ -1,3 +1,9 @@
+# v1.0.6.44
+
+Final-release corrective version over v1.0.6.43. Production code scope is limited to `src/vibrapilot/chrome_installer.py`; completed Phase-1 and Phase-2 architecture remains frozen.
+
+---
+
 # v1.0.6.43 Version Boundary
 
 - Official input: v1.0.6.42.

config/AppConfig/app.py

@@ -12,7 +12,7 @@
 DESCRIPTION = "VibraPilot browser automation desktop application by Vib Tools."
 TAGLINE = "Authorized browser automation desktop application."
 
-VERSION = "1.0.6.43"
+VERSION = "1.0.6.44"
 CREATED_DATE = "2026-08-07"
 RELEASE_DATE = "2026-08-18"
 UPDATED_DATE = "2026-08-18"