Corresponding source
OpenBurnBar future releases are licensed under AGPL-3.0-only. The source for the app, services, extension, release scripts, dependency lockfiles, and build notes is available from the public repository and release source archives.
Plain-language version → burnbar.ai/trust
Repository
Canonical source repository: https://github.com/Imagine-That-Ai/BurnBar
Current published source commit: 64b28693fd7da0e100cfc065d95b4fe66e5e384f
Canonical source-offer URL: https://burnbar.ai/legal/source
Release source archive
Direct-download releases publish a corresponding source archive named
OpenBurnBar-1.0.2-corresponding-source.tar.gz next to the signed macOS DMG, ZIP, SBOM, checksums, and release
metadata.
Release artifacts are listed at https://github.com/Imagine-That-Ai/BurnBar/releases.
What is included
- Exact Git commit SHA and release metadata.
- OpenBurnBar source tree, build scripts, release scripts, and docs.
- Dependency lockfiles, SBOM/license reports, and third-party notices.
-
Official Signal libsignal pin, generated binding instructions, and
third_party/libsignal/runtime-readiness.json. - Hosted-service deployment notes with secret values redacted.
Crypto runtime status
The source archive includes the libsignal runtime-readiness manifest. That manifest is the source of truth for whether official libsignal is only pinned for migration work or is already the runtime crypto core for new private-domain writes across macOS, iOS, Android, Functions, and hosted services.
Hosted services
Public OpenBurnBar health and metadata endpoints expose license,
source.repository, source.commit, and
source.correspondingSource fields so network users can find the matching source offer.