Release notes

The binding record is the CHANGELOG.md in the source repository. No version is invented: every released version references a real annotated tag with its peeled commit and archive digest.

This page states the release status as of 2026-10-01. It is updated when the status changes, for example when the release tag is created or a distribution channel opens.

1.0.0 ("Public Core 1.0")

Status: repo-ready, not live-ready. The version number 1.0.0 is set in the source tree (owner decision of 2026-10-01). As of the date above, the annotated tag v1.0.0 has not been created; the changelog states that it is created only after the merge, on the merge commit. This entry makes no production release claim, and no live claim for the W7 and W11 work packages.

What the 1.0.0 change set contains:

• The app version moves from 0.1.0-dev0 to 1.0.0 in the package metadata and in the app hooks.
• The SBOM generator reads the version from the single package constant. A mismatch between the version and the committed SBOM or VEX fails the check.
• SBOM and VEX are regenerated for insurance-broker-core@1.0.0.
• The jhf-ibc-pack app pack changes its digest as expected, because the version files are part of the pack.

Scope boundaries that apply to 1.0.0

• Reference bench. The reference bench is pinned to the vendor image frappe/erpnext:v16.22.0 by digest (ERPNext 16.22.0, Frappe 16.20.0), so that one ERPNext version serves the related products. That pin is below the ERPNext 16.23.0 security patch (GHSA-p577-cxv9-h82f); the owner accepted this for the reference bench. Check the advisories and plan the patch level of your own production bench yourself. The performance baseline is a documented exception and was measured on a newer image.
• Accounting stays at strategy None, the regulatory engine stays off, and AI capability stays blocked by default.
• No executable Disposition Ledger re-apply path is shipped.
• The review packets for security, legal, privacy, and finance in the repository are not externally approved.

Prereleases

Release	Content
v0.1.0-alpha.1	First prerelease, bilingual operations runbooks
v0.1.0-alpha.2	Adds the tender DocTypes and release documentation

Both are prereleases without production admission; the tag text and the changelog state that explicitly.

Distribution

• Source: Helpifyr/insurance-broker-core.
• Customer delivery shape: the vendor frappe/erpnext image by digest plus the jhf-ibc-pack app pack (see Installation).
• Frappe Marketplace: not published. The repository holds prepared listing and publish-readiness material only, and no external publish action has been performed.

License

AGPL-3.0-or-later. Owner: ANYFER GmbH.