Corresponding source
OpenBurnBar future releases are licensed under AGPL-3.0-only. The source for the app, services, extension, release scripts, dependency lockfiles, and build notes is available from the public repository and release source archives.
Plain-language version → burnbar.ai/trust
Repository
Canonical source repository: https://github.com/Imagine-That-Ai/BurnBar
Current published source commit: e16553c91577d0b7e42fe88ef238a594ac335227
Canonical source-offer URL: https://burnbar.ai/legal/source
Release source archive
New direct-download releases publish a corresponding source archive next to the signed macOS DMG, ZIP, SBOM, checksums, and release metadata. While the branded direct-download host is being republished, the public repository remains the canonical source offer for the current website and GitHub-hosted macOS fallback.
Release artifacts are listed at https://github.com/Imagine-That-Ai/BurnBar/releases.
What is included
- Exact Git commit SHA and release metadata.
- OpenBurnBar source tree, build scripts, release scripts, and docs.
- Dependency lockfiles, SBOM/license reports, and third-party notices.
-
Official Signal libsignal pin, generated binding instructions, and
third_party/libsignal/runtime-readiness.json. - Hosted-service deployment notes with secret values redacted.
Crypto runtime status
The source archive includes the libsignal runtime-readiness manifest. That manifest is the source of truth for whether official libsignal is only pinned for migration work or is already the runtime crypto core for new private-domain writes across macOS, iOS, Android, Functions, and hosted services.
Hosted services
Public OpenBurnBar health and metadata endpoints expose license,
source.repository, source.commit, and
source.correspondingSource fields so network users can find the matching source offer.