docs and release: update v1.0.4 docs, EULA, security attestation, winget manifests, and proof suite

Author: qectorlab

AGENT.md

@@ -36,7 +36,7 @@ those modules, the code is the source of truth  -  re-derive, do not improvise.
 | Property | Value (from code) |
 |---|---|
 | Server name (`serverInfo.name`) | `qector-workbench` |
-| Server version | `WORKBENCH_VERSION` = **1.0.3** |
+| Server version | `WORKBENCH_VERSION` = **1.0.4** |
 | Backend | `qector_decoder_v3` **1.0.0** (min supported 1.0.0) |
 | MCP protocol version | **2024-11-05** |
 | Transport | newline-delimited **JSON-RPC 2.0** over **stdio** |
@@ -223,7 +223,7 @@ These are non-negotiable. Violating them is a defect, not a style choice.
    `get_hardware_info`. "cuda unavailable" is a valid, honest answer.
 8. **Reproducibility or silence.** If you cannot name the exact `seed` and inputs
    that produced a result, do not report the result as fact.
-9. **Cite the versions.** When it matters, state workbench 1.0.3 / backend 1.0.0.
+9. **Cite the versions.** When it matters, state workbench 1.0.4 / backend 1.0.0.
    They are separate release lines and must not be assumed equal.
    Do not claim behavior from other versions you have not run.
 10. **When unsure, run a tool or say "unknown."** "I don't have a measurement for

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.0.4
+
+- **EULA Display**: Fixed EULA display and acceptance dialog flow to ensure license agreement prompts show properly and preferences persist cleanly.
+- **Export Security & Path Sanitization**: Fixed `utils.sanitize_export_path` to permit valid user-selected export paths (e.g. saving to Desktop or custom directories via file dialogs) while maintaining strict directory traversal (`..`) protection and system directory guards.
+- **CLI Boot Test & Terminal Window**: Registered `test` in CLI commands, automatically attaching/allocating a terminal console window on Windows when launched, and streaming full verbose test output after EULA verification.
+- **Boot Test Scheduling**: Fixed boot test runner scheduling logic to ensure background boot tests run reliably on workbench startup.
+- **Documentation & Versioning**: Updated all version references to v1.0.4 across core files, manuals, and platform packages.
+
 ## 1.0.3
 
 - **Security hardening**: MCP `get_server_env` redacts secrets; MCP token auth

EULA.rtf

@@ -1,7 +1,7 @@
 {\rtf1\ansi\deff0{\fonttbl{\f0\fswiss\fcharset0 Segoe UI;}{\f1\fmodern\fcharset0 Consolas;}}
 {\colortbl;\red0\green0\blue0;\red44\green62\blue80;\red100\green100\blue100;\red0\green90\blue160;}
 \viewkind4\uc1\pard\qc\sb200\sa100\b\f0\fs28\cf2 END USER LICENSE AGREEMENT (EULA)\par
-\fs22 QECTOR Decoder Workbench v1.0.3\par
+\fs22 QECTOR Decoder Workbench v1.0.4\par
 \pard\sb60\sa60\b0\fs18\cf3\qc Effective Date: August 2026  |  Last Updated: August 18, 2026\par
 Licensor: Guillaume Lessard / iD01t Productions\par
 Website: https://www.qector.store  |  Contact: admin@qector.store\par
@@ -53,7 +53,7 @@ Website: https://www.qector.store  |  Contact: admin@qector.store\par
 \b Amendments:\b0  Licensor reserves the right to modify this Agreement. Updated terms are included with new releases.\par
 \b Export Compliance:\b0  User agrees to comply with all applicable export control laws.\par
 \pard\sb40\sa40\b Contact:\b0  Guillaume Lessard / iD01t Productions  |  admin@qector.store  |  https://www.qector.store\par
-\pard\qc\sb200\sa100\b\fs20\cf2\line QECTOR Decoder Workbench v1.0.3\par
+\pard\qc\sb200\sa100\b\fs20\cf2\line QECTOR Decoder Workbench v1.0.4\par
 \b0\fs18\cf3 \u169? 2026 Guillaume Lessard / iD01t Productions\par
 All rights reserved except as expressly granted herein.\par
 Powered by QECTOR.\par

EULA.txt

@@ -2,7 +2,7 @@
 
                      END USER LICENSE AGREEMENT (EULA)
 
-                       QECTOR Decoder Workbench v1.0.3
+                       QECTOR Decoder Workbench v1.0.4
 
 ================================================================================
 
@@ -16,8 +16,8 @@ Contact:         admin@qector.store
 
 
 This End User License Agreement ("Agreement") is a legal agreement between
-you � whether an individual, academic institution, research laboratory, or
-a single corporate entity � ("User") and Guillaume Lessard, operating as
+you — whether an individual, academic institution, research laboratory, or
+a single corporate entity — ("User") and Guillaume Lessard, operating as
 iD01t Productions ("Licensor"), for the QECTOR Decoder Workbench software
 application, including but not limited to all executable binaries, graphical
 interface components, command-line tools, MCP server modules, documentation
@@ -30,9 +30,9 @@ BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE
 TO THESE TERMS, DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE.
 
 
-����������������������������������������
+————————————————————————————————————————
   1.  GRANT OF LICENSE
-����������������������������������������
+————————————————————————————————————————
 
 1.1  Licensor hereby grants User a non-exclusive, royalty-free, worldwide,
      fully paid-up, perpetual (subject to Section 9) license to:
@@ -50,12 +50,12 @@ TO THESE TERMS, DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE.
 
 1.2  This license covers the QECTOR Decoder Workbench application only.
      The runtime backend engine (qector-decoder-v3) is a separately
-     licensed component governed by its own terms � see Section 7.
+     licensed component governed by its own terms — see Section 7.
 
 
-����������������������������������������
+————————————————————————————————————————
   2.  RESTRICTIONS
-����������������������������������������
+————————————————————————————————————————
 
 User shall not:
 
@@ -85,13 +85,13 @@ User shall not:
      prior written consent.
 
 
-����������������������������������������
+————————————————————————————————————————
   3.  INTELLECTUAL PROPERTY
-����������������������������������������
+————————————————————————————————————————
 
-3.1  The Software and all intellectual property rights therein � including
+3.1  The Software and all intellectual property rights therein — including
      but not limited to copyrights, trademarks, trade secrets, patents, and
-     design rights � are and shall remain the exclusive property of
+     design rights — are and shall remain the exclusive property of
      Licensor. This Agreement does not transfer any ownership rights.
 
 3.2  The "QECTOR" name, logo, icon, and associated branding elements are
@@ -105,9 +105,9 @@ User shall not:
      (b) Accurate attribution when published or distributed.
 
 
-����������������������������������������
+————————————————————————————————————————
   4.  USER-GENERATED OUTPUT
-����������������������������������������
+————————————————————————————————————————
 
 4.1  The Software generates analysis results, benchmark data, decode
      reports, and documentation in various formats (Markdown, JSON, HTML,
@@ -120,9 +120,9 @@ User shall not:
      the purpose for which the output is used.
 
 
-����������������������������������������
+————————————————————————————————————————
   5.  NETWORK & OFFLINE OPERATION
-����������������������������������������
+————————————————————————————————————————
 
 5.1  The Software is fully self-contained and operates entirely offline.
      The decoder engine wheel is bundled inside the application and is
@@ -134,9 +134,9 @@ User shall not:
      usage analytics, crash reports, or telemetry of any kind.
 
 
-����������������������������������������
+————————————————————————————————————————
   6.  MCP SERVER & AI INTEGRATION
-����������������������������������������
+————————————————————————————————————————
 
 6.1  The Software includes a Model Context Protocol (MCP) server that
      exposes decoder functionality via stdio JSON-RPC. When launched in
@@ -150,9 +150,9 @@ User shall not:
      actions taken by third-party AI systems using the MCP interface.
 
 
-����������������������������������������
+————————————————————————————————————————
   7.  THIRD-PARTY COMPONENTS & BACKEND LICENSE
-����������������������������������������
+————————————————————————————————————————
 
 7.1  RUNTIME BACKEND:  The Software depends on the qector-decoder-v3
      engine at runtime. This backend is a separately licensed, source-
@@ -184,9 +184,9 @@ User shall not:
      the application's installation directory where applicable.
 
 
-����������������������������������������
+————————————————————————————————————————
   8.  DISCLAIMER OF WARRANTIES
-����������������������������������������
+————————————————————————————————————————
 
 THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY
 OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:
@@ -210,9 +210,9 @@ MEDICAL DEVICES, OR ANY APPLICATION WHERE FAILURE COULD LEAD TO
 PERSONAL INJURY, DEATH, OR SIGNIFICANT PROPERTY DAMAGE.
 
 
-����������������������������������������
+————————————————————————————————————————
   9.  LIMITATION OF LIABILITY
-����������������������������������������
+————————————————————————————————————————
 
 9.1  TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT
      SHALL LICENSOR, ITS AFFILIATES, CONTRIBUTORS, OR AGENTS BE LIABLE
@@ -242,9 +242,9 @@ PERSONAL INJURY, DEATH, OR SIGNIFICANT PROPERTY DAMAGE.
      (WHICH, FOR THE FREE LICENSE, IS ZERO).
 
 
-����������������������������������������
+————————————————————————————————————————
   10. INDEMNIFICATION
-����������������������������������������
+————————————————————————————————————————
 
 User agrees to indemnify, defend, and hold harmless Licensor, its
 officers, employees, and agents from and against any claims, damages,
@@ -257,9 +257,9 @@ fees) arising out of or related to:
       any output generated by the Software.
 
 
-����������������������������������������
+————————————————————————————————————————
   11. TERMINATION
-����������������������������������������
+————————————————————————————————————————
 
 11.1 This Agreement is effective from the date User first uses the
      Software and remains in effect until terminated.
@@ -278,9 +278,9 @@ fees) arising out of or related to:
      termination of this Agreement.
 
 
-����������������������������������������
+————————————————————————————————————————
   12. GOVERNING LAW & DISPUTE RESOLUTION
-����������������������������������������
+————————————————————————————————————————
 
 12.1 This Agreement shall be governed by and construed in accordance with
      the laws of the Province of Quebec, Canada, without regard to its
@@ -297,9 +297,9 @@ fees) arising out of or related to:
      jurisdiction in the Province of Quebec, Canada.
 
 
-����������������������������������������
+————————————————————————————————————————
   13. GENERAL PROVISIONS
-����������������������������������������
+————————————————————————————————————————
 
 13.1 ENTIRE AGREEMENT:  This Agreement constitutes the entire agreement
      between User and Licensor regarding the Software and supersedes all
@@ -338,7 +338,7 @@ fees) arising out of or related to:
 
 ================================================================================
 
-  QECTOR Decoder Workbench v1.0.3
+  QECTOR Decoder Workbench v1.0.4
   (c) 2026 Guillaume Lessard / iD01t Productions
   All rights reserved except as expressly granted herein.
 

INSTALL_LINUX.md

@@ -1,12 +1,12 @@
-# QECTOR Decoder Workbench v1.0.3 - Linux
+# QECTOR Decoder Workbench v1.0.4 - Linux
 
 The Linux release is a portable, air-gapped application. It includes the decoder wheel locally and never downloads packages or contacts an external service at runtime. Available as a standalone portable binary and a Debian package.
 
 ## Portable Binary (Recommended)
 
 ```bash
 # From the release zip:
-unzip QectorWorkbench-Linux-v1.0.3.zip
+unzip QectorWorkbench-Linux-v1.0.4.zip
 chmod +x QectorWorkbench-Portable
 ./QectorWorkbench-Portable
 ```
@@ -16,7 +16,7 @@ The portable binary contains the GUI, CLI, MCP server, documentation generators,
 ## Debian Package
 
 ```bash
-sudo dpkg -i qector-workbench_1.0.3_amd64.deb
+sudo dpkg -i qector-workbench_1.0.4_amd64.deb
 qector-workbench          # GUI
 qector-workbench --cli diagnostics
 qector-workbench --mcp    # 85-tool MCP server
@@ -43,14 +43,14 @@ Expected Entra state is `disabled` with `airgapped: true`. Expected compliance s
 Runtime state is stored under `~/.local/share/QectorWorkbench` (or `$XDG_DATA_HOME/QectorWorkbench` if set). Override it with `QECTOR_DATA_DIR` when a lab policy requires an explicitly managed location.
 No cloud synchronization, telemetry, update check, or browser action is performed by the application.
 
-## Checksums (v1.0.3)
+## Checksums (v1.0.4)
 
 ```
-SHA-256 (ZIP):      TBD  QectorWorkbench-Linux-v1.0.3.zip
+SHA-256 (ZIP):      TBD  QectorWorkbench-Linux-v1.0.4.zip
 SHA-256 (Portable): TBD  QectorWorkbench-Portable
 ```
 
-Verify locally: `sha256sum QectorWorkbench-Portable` and `sha256sum QectorWorkbench-Linux-v1.0.3.zip`.
+Verify locally: `sha256sum QectorWorkbench-Portable` and `sha256sum QectorWorkbench-Linux-v1.0.4.zip`.
 
 ## Hardware Measurements
 

QectorWorkbench-onefile.spec

@@ -32,7 +32,7 @@ hiddenimports = [
     'batch_streaming_tab', 'hardware_tab', 'diagnostics_tab', 'documentation_tab',
     'lab_info_tab', 'history_tab', 'compliance', 'entra_auth',
     'generate_manuals', 'api_reference', 'docs_exporter',
-    'boot_test_runner', 'self_autodebug_backend', 'certification',
+    'boot_test_runner', 'self_autodebug_backend', 'certification', 'test_qector_decoder_v3_proofs',
     # ---------- Runtime deps of the decoder ----------
     'cffi', '_cffi_backend',
     # ---------- In-app official docs export ----------

QectorWorkbench.spec

@@ -27,9 +27,11 @@ hiddenimports = [
     'app', 'backend', 'state', 'theme', 'utils', 'logger', 'console', 'version',
     'version_service', 'decoder_provisioner', 'doc_generator',
     'threading_utils', 'results_tracker', 'hardware_routing',
-    'mcp_server', 'mcp_resources', 'dialogs', 'autodebug', 'cli',
+    'mcp_server', 'mcp_resources',    'code_explorer_tab', 'decoder_lab_tab', 'benchmark_tab',
+    'batch_streaming_tab', 'hardware_tab', 'diagnostics_tab', 'documentation_tab',
+    'lab_info_tab', 'history_tab', 'compliance', 'entra_auth',
     'generate_manuals', 'api_reference', 'docs_exporter',
-    'boot_test_runner', 'self_autodebug_backend', 'certification',
+    'boot_test_runner', 'self_autodebug_backend', 'certification', 'test_qector_decoder_v3_proofs',
     # ---------- Runtime deps of the decoder ----------
     'cffi', '_cffi_backend',
     # ---------- In-app official docs export ----------