ApeXArts Recursive Renames 1.4.0 verification record

Final Windows SHA256 f0645bc9d17f4cf96bd1ab5db17ff39ae39235e0a6aac4861d7d5f5d163836ca
Final Linux SHA256   39fd04eb8713d5e345ac86b341f50f452cbcabee4ddb6a38013e9f7c8e5445a0

123 Linux tests and110 Windows test-executable tests under Wine passed.
Full command outputs are retained. Strict all-target Clippy both platforms,
formatting and the zero-external-Cargo-package guard passed. Windows executable
and final GUI tests ran under Wine, not native Windows hardware. Final narrow
GUI repaint/footer fixes were additionally checked on their exact release files.
A separate offline same-host/toolchain Windows rebuild was byte-identical.

Backend coverage includes whole original targets regardless of rename scope,
hidden/empty/binary/version-control content, independent no-overwrite snapshots,
streaming beyond64MiB, readonly data, private container, unsupported metadata,
links/hardlinks, failed copies/cleanup, stale previews, failure before Apply,
and retaining a completed snapshot after later Apply failure. Source resource
and text engine regressions remain in the full suite.

Windows-final-gui-checks.json and linux-ui/LINUX-GUI-REVIEW.json bind final GUI
checks to their exact executable hashes. Both check manual/automatic backups,
default cancellation, destination controls, whole original copies, confirmed
Apply, separate restoration copies and preserved snapshots. Final PNGs are
actual local captures. Windows-screenshot-integrity.json records final image
hashes; the application source archive embeds the matching release-preview.png.

Windows GUI readback found only current-user and SYSTEM ACEs, no broad-user
grants, on newly created backup containers/descendants, despite broad source
and destination fixture ACLs. Wine does not faithfully report protection/
inheritance or directory readonly flags; native Windows enforcement is not
certified. The app requests protected current-user inheritance via native APIs.

security/ is the exact-file local static PE/CAPA review. It is not an antivirus
scan or clearance. No candidate disassembly/address claims are transferred.
Earlier1.2.0/1.2.1 user-reported antivirus classifications remain unresolved.
No sample upload or vendor message occurred. Analyst tools are external to the
application and introduce no application dependencies. No private source ZIP
is part of the public website payload.

Sources/destinations must remain idle and supported. Snapshots are not universal
metadata archives, automatic undo, secure erasure or a power/disk-loss guarantee.
Restore plain original-named copies manually as described in README/SECURITY.
No i5 server or dmot rig access was used.
