0.7.4 (2026-04-10)
🔧 Miscellaneous
Artifact Verification
All release artifacts include Sigstore provenance attestations. Verify with the GitHub CLI:
# Download the source archive
gh release download v0.7.4 --repo microsoft/physical-ai-toolchain --pattern 'source-v0.7.4.tar.gz'
# Verify build provenance
gh attestation verify source-v0.7.4.tar.gz --repo microsoft/physical-ai-toolchain
# Verify SBOM attestation
gh attestation verify source-v0.7.4.tar.gz --repo microsoft/physical-ai-toolchain --predicate-type https://spdx.dev/Document