Approved early-access package

SpiritBox Ultimate v1.12

The SpiritBox Ultimate v1.12 release-status page publishes the current Windows package identity, SHA-256 checksum, scoped qualification evidence, and remaining operator boundaries.

SpiritBox_Ultimate_v1.12_Windows.zip · 83,508,629 bytes · Windows release

Package identity: SHA-256 81488fef194f8b32bd7b879890b45aa23258b4943b98ad1e8e47acf5a94cba62. Match this value before opening the archive.

Qualification evidence

  • 399 automated tests passed with one documented skip.
  • Exact-package Bandit scan: 0 high and 0 medium findings across 79,334 scanned lines.
  • Exact-package Trivy filesystem scan: 0 high/critical dependency vulnerabilities and 0 secrets.
  • Package-boundary review excluded runtime data, secrets, caches, internal business material, and development-only files.
  • Nine default Compose services were verified; Voice Lab training is an optional profile.

Evidence boundary

The package scans do not mean every upstream runtime image is vulnerability-free, and they are not an independent security audit. The accepted release record documents known upstream image findings and the operator decision to ship early access with those exceptions.

What early access means

The exact Windows ZIP is approved for Gumroad distribution. Buyers should still expect local model setup, Docker Desktop and WSL2 prerequisites, configuration choices, and environment-specific troubleshooting. macOS and Linux are not qualified by this Windows package.