Tbench Actions / Personal-device CLI bundle / 0.2.2-k2

Publisher: Reconcile Softech KGN Private Limited
Official source: https://actions.tbench.in/install
Support: support@tbench.in

This is a branded portable collection, NOT a native desktop application, an
OS-signed installer, or a zero-dependency runtime. Python 3.12+, Git and a running
Linux Docker Engine 28+ are separate prerequisites. Windows x64 + Linux Docker
and Linux x64 are the supported host paths; macOS/ARM is not qualified.

1. Compare the ZIP SHA-256 with the HTTPS download page before extracting.
2. Open START-HERE.html or read VERIFY.txt. Check the exact file allowlist.
3. With Python + cryptography already installed, run verify-bundle.py to verify
   all 13 signed source members and the fixed bootstrap offline. It changes nothing.
4. Review release/install.ps1 (Windows) or release/install.sh (Linux). Those
   existing scripts fetch a fixed, hash-pinned bootstrap over HTTPS and verify
   its signed worker payload. Installation/dependency setup needs network access;
   including the archive here does not make the existing installer offline.
5. Run the reviewed script explicitly with --onboard only when ready. Approval,
   private enrollment and foreground serving each remain separate consent steps.

No auto-start, background service, payment, enrollment, hosted fallback or PATH
change occurs by extracting or opening this bundle. It contains no credentials,
device state, private keys, model weights, customer source or repository archive.

The inner manifest is signed with Tbench's pinned Ed25519 release key. The ZIP
itself is not Authenticode/Developer-ID signed. Hashes in this ZIP are an integrity
register, not an independent trust anchor; compare the outer ZIP hash from the
official HTTPS page. Ed25519 integrity is not Microsoft/Apple publisher trust.
