## v1.1.0  April 2026  LATEST  SIGNED

[NEW] Code-signed releases
      Every binary in the installer is now digitally signed by
      LXBSTUDIO LLC via Microsoft Trusted Signing.
      SmartScreen reputation will build over time.

[SEC] TLS verification re-enabled for IRC
      The community-chat connection now properly verifies the
      Rizon server cert. Was encrypted-but-unauthenticated; now
      hardened against MITM.

[SEC] License validation fails closed
      Removed a fallback path that, under contrived conditions,
      could let forged licenses validate. License flow now hard-
      requires the cryptography package & RSA-PSS signatures.

[SEC] Hardened RSS / SEC EDGAR XML parsing
      Switched all news, SEC filings, and press-release feeds
      to defusedxml — closes a low-likelihood DoS / SSRF
      vector on tampered feeds.

[FIX] Windows 11 24H2 hardware ID
      Hardware-bound licenses now work on the latest Windows.
      Microsoft removed wmic from 24H2; Moon Scanner now uses
      PowerShell Get-CimInstance and returns the same value.

[FIX] Fresh installs no longer fail at launch
      Two missing runtime dependencies (psutil, plyer) are now
      properly declared.

[NEW] Smarter IRC reconnect
      Exponential backoff with jitter, capped at 5 minutes,
      replaces the old fixed 5-second retry. Gentler on Rizon
      and on your network.

[NEW] README Privacy section
      Explicit list of every network call MoonScanner makes
      and every file it stores under .moonscanner\.

────────────────────────────────────────────────────

## v1.0.0  January 2026

Initial release. Volume, options, insider, sentiment &
technical scanners. Confluence scoring. Local LLM
integration. Three-tier licensing (Free / Pro / Elite).

✓ Code-signed by LXBSTUDIO LLC. v1.1.0 is the first signed release of MoonScanner. The installer and every executable inside it are digitally signed via Microsoft Trusted Signing (Azure Artifact Signing). On Windows you can right-click the .exe → Properties → Digital Signatures to inspect the certificate.

Note: Windows SmartScreen may still warn on first install — SmartScreen reputation builds over time as more users run the signed binary. To proceed past the warning: click More info, then Run anyway.

🔒 SHA-256 of the signed installer. The Authenticode signature above is your primary proof of authenticity. The hash below is here as an extra reference if you’d like to confirm the file you have on disk matches the one we shipped:

Step 1 — open PowerShell in the folder where you downloaded the installer. For most users that’s the Downloads folder, so paste this in any PowerShell window:

cd $env:USERPROFILE\Downloads

Step 2 — verify the SHA-256 hash:

Get-FileHash MoonScanner-v1.1.0-Setup.exe

The Hash column in the output must match the SHA-256 value above exactly.

Step 3 — verify the Authenticode signature:

Get-AuthenticodeSignature MoonScanner-v1.1.0-Setup.exe | Format-List *

You should see Status : Valid and a SignerCertificate.Subject that begins with CN=LXBSTUDIO LLC, issued by Microsoft ID Verified CS EOC CA 03. When both checks pass, you have the official LXBSTUDIO LLC release.