{
  "schema_version": "1.0",
  "latest_version": "v1.0.0-rc.10",
  "latest_url": "https://releases.bmh.ai/qs/v1.0.0-rc.10/qs-v1.0.0-rc.10.tar.gz",
  "latest_sha256": "9c2357defa4909f2d9262c781db25a8fd51a76aa48667518241739ce7cff2c81",
  "released_at": "2026-04-27T08:35:38Z",
  "released_by": "releases@bmh.ai",
  "minimum_version_supported": "v0.0.0",
  "requires_schema_migration": false,
  "migration_phase": "none",
  "required_env_vars_added": [],
  "breaking_changes": false,
  "release_notes_url": "https://releases.bmh.ai/qs/v1.0.0-rc.10/release-notes.html",
  "release_notes_summary": "v1.0.0-rc.10 — first release cut from Phase-1-aware release.sh\n\nThis release is the first cut after B4-03 Phase 1 shipped. It exercises\nthe new release pipeline end to end:\n\n  preflight #10  tarball self-containment audit (post-build)\n  preflight #11  per-version artifact immutability (HEAD-check before any side effect)\n  dual signing   per-version manifest at /qs/v1.0.0-rc.10/manifest.json AND latest.json\n                 with byte-identical body, both signed by the same GPG key\n  ordered upload per-version artifacts land before latest.json advances\n\nPer-version manifest at /qs/v1.0.0-rc.10/manifest.json + .sig is now\npublished as an immutable per-version artifact. latest.json continues\nto be the mutable channel pointer.\n\nNo functional QS code changes vs v1.0.0-rc.9. This release exists to\nprovide a Phase-1-era release for B4-03 Phase 2 cloud-init\nverification against both release_channel (\"latest\") and\nrelease_version (\"v1.0.0-rc.10\") provisioning paths.",
  "estimated_downtime_seconds": 45
}