Release5, tag v0.2.0-preview.canvas-repair.20260912, identifies Studio source33e30c1. Evidence checkpoint0c53c210306d768fc8b1ae6cee3618701c887bb6 preserves completed native/package/server acceptance. The server retains its separate321897f provenance.

All three uploaded attachments were downloaded through same-origin GET requests with redirects refused. Their complete bytes, SHA256, metadata sizes and final on-disk readback matched the explicit local assets. Remote tag/release/asset identity was checked before and after. readback.json records exact time, IDs, lengths and hashes. ZIP and duplicate downloaded artifacts are excluded; the unchanged validation attachment and prose are retained. expected-assets.json records private source paths only as provenance. No credentials are included.

The independent release review preserves pre-substitution file hashes; the only final prose change was insertion of the immutable evidence link. Validation attachment links were converted from relative paths to the same evidence commit, with each target checked locally. Its local-acceptance wording intentionally predates publication; this separate receipt completes publication evidence. acceptance-staged-readback.json binds all254 previously committed evidence files to exact Git bytes.

manifest.json binds exact copied originals; record construction verified original/copy/original bytes. Source scripts are provenance, not portable reproduction instructions. The Windows build is an unfinished unoptimized prerelease; full OA/SA completion and Linux acceptance are not claimed.