# Tuck 0.1.0-rc.2 — release audit

Prepared 9 September 2026 for Windows 11 x64. This is a local release candidate, not a published public beta.

## Compact utility revision

RC 2 changes the default window from 1280 × 860 to 640 × 540, with a 560 × 480 minimum. It removes the sidebar, hero illustration, large typography, and bundled fonts in favor of a small toolbar and compact controls. The file-operation backend is unchanged. Layout and accessibility are tested at the new sizes.

## Implemented against the outline

| Outline requirement | Candidate behavior |
|---|---|
| Downloads without configuration | Windows Known Folder API; Quick tidy selected by default |
| Desktop, another folder, recent locations | Native folder picker and saved recent locations |
| Preview before moving | Before/after groups, exact paths, explanations, sizes, eligibility, checkboxes, search, 50-row pagination |
| Seven file-type categories | Images, Videos, Documents, Applications, Archives, Audio, Other |
| Custom rules and presets | Ordered AND conditions, first match wins, exclusions, move/leave, enabled state, duplicate/edit/delete, button reordering |
| Date grouping | Last-modified year/month in local time, explicitly labeled |
| Collision safeguards | Case-folded reservations, previewed numbered names, Windows non-replacing handle rename |
| Eligibility checks | Locked/changed/hidden/system/offline/recall/reparse/partial/recent items skipped |
| Scope boundaries | Loose files only; no recursion, background runs, network, cross-volume copy, or user-file deletion |
| Progress and stop | Current file/destination, counts, progress bar, stop after current move, final results |
| Durable recovery | Synced intent/result journals, interrupted-session discovery, conditional undo preview |
| Directory cleanup | Only still-empty created directories with matching recorded file identity |
| Privacy | Local full-path records disclosed, individual journal removal, recent-location clearing |
| Accessibility | Both themes, focus indicators, confirmation focus, keyboard controls, reduced motion |
| Delivery | Current-user installer, portable archive, source archive, SHA-256 checksums |

## Automated validation

- 27 Rust tests pass: categories, extensionless files, all-condition matching, precedence/exclusions, disabled rules, date grouping, empty folders, malformed rule rejection, reserved and unsafe paths, partial/recent files, locked files before and after preview, changed and replaced files, collision handling, occupied destinations, Unicode paths longer than 260 characters, junction rejection, offline/hidden attributes, selection exclusions, cancellation, full move/undo round trip, changed/occupied undo targets, recovery before/after move and undo intents, truncated/corrupt journal handling, nonempty folder preservation, and replaced-folder identity preservation.
- Six Playwright interface tests pass, covering quick tidy/confirmation/undo, persistent presets and ordering, light/dark accessibility across the main screens, primary-button reachability at both compact sizes, minimum window width, keyboard dialog focus, and reduced motion. Axe reports no WCAG A/AA violations on the tested screens; this is automated coverage, not a complete assistive-technology certification.
- TypeScript production build passes. Rust Clippy passes with warnings treated as errors.
- Runtime npm dependency audit reports zero known vulnerabilities in its current response. Third-party inventory includes license text for all 280 discovered components, with no unknown declared licenses.
- Packaged native UI passes: folder selection, 50-row pagination, collision handling, confirmation, 61 moves, undo preview, and restoration with all original SHA-256 hashes matching. Stale plan and forged entry IDs are rejected. A 700-file fixture verifies mid-operation cancellation, exclusion of concurrent operations, actual process termination/relaunch, recovery discovery, reconciliation, and full restoration. No native JavaScript errors were observed.
- Current-user installation, bundled-resource presence, installed native launch, Known Folder resolution, and silent uninstall pass on Windows 11 Home x64 build 26200. Installed payload verification permits only Tauri's documented three-byte bundle marker difference (`NSS` for installer, `UNK` for standalone); every other byte must match. Test records are in `artifacts/native-results.json` and `artifacts/installer-results.json` in the workspace.
- The final portable ZIP was extracted to a fresh directory and launched successfully with isolated settings; its executable hash matches the tested standalone build. All release files have SHA-256 checksums. The ready-to-run `release/Tuck` folder contains the same application and documentation.

## Remaining release gates and practical limits

- No independent Windows machine was available. A clean Windows 11 user profile, different hardware/storage, and absent-WebView2 installation still require independent acceptance before broad release.
- No publisher signing certificate was supplied; executable and installer are unsigned. Windows reputation prompts may appear. No signing, reputation, or malware-free claim is made.
- Offline/hidden attributes and junctions were tested locally. A real unavailable OneDrive placeholder, network-redirection environment, alternate local volume, removable-drive interruption, and permissions restricted by a separate standard-user account were not available for full end-to-end coverage. These paths fail closed by policy and backend checks.
- Actual interruption testing covers process termination/restart, not sudden physical power loss or failing storage. Flush durability depends on the filesystem and hardware.
- Change detection is based on file identity, size, and last-write time. Deliberately metadata-preserving edits are outside that guarantee. History is local plaintext, not protected against malicious programs already running as the current user.
- History retains full session records until forgotten. Preview tables paginate; scanning and planning still hold metadata for the selected folder in memory. Very large directories should be measured on target hardware before claiming a scale limit.
- The browser-only preview is explicitly a sample-data demo; native validation uses actual disposable files. No real user Downloads or Desktop files are moved by the test suite.
- No automatic updater, tray/background watcher, telemetry, account system, or public product page is included. The design outline places public beta publishing after the release-candidate milestone.

See `PRIVACY.md` and `SECURITY.md` for the local data model and trust boundaries. Keep recovery history until you have verified the resulting file arrangement.