Release Orven 3.0 with new identity and Mac diagnostics

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,5 +1,5 @@
 name: Bug report
-description: Report a reproducible Toolbox problem without exposing private paths or files.
+description: Report a reproducible Orven problem without exposing private paths or files.
 title: "[Bug]: "
 labels:
   - bug
@@ -9,13 +9,13 @@ body:
       value: |
         Thanks for reporting a reproducible problem. For a security issue, use [private vulnerability reporting](https://github.com/thangldw/toolbox/security/advisories/new) instead.
 
-        Do not paste private paths, filenames, file contents, account data, credentials, signing material, or an unredacted Toolbox export.
+        Do not paste private paths, filenames, file contents, account data, credentials, signing material, or an unredacted Orven export.
   - type: input
     id: toolbox-version
     attributes:
-      label: Toolbox version
+      label: Orven version
       description: Use the version shown in Settings or the GitHub release tag.
-      placeholder: v2.0.0
+      placeholder: v3.0.0
     validations:
       required: true
   - type: input

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,13 +1,13 @@
 name: Feature request
-description: Propose a user problem for Toolbox to solve safely and locally.
+description: Propose a user problem for Orven to solve safely and locally.
 title: "[Feature]: "
 labels:
   - enhancement
 body:
   - type: markdown
     attributes:
       value: |
-        Start with the user problem, not an implementation. Toolbox prioritizes local processing, explicit review, bounded scope, and recoverable actions.
+        Start with the user problem, not an implementation. Orven prioritizes local processing, explicit review, bounded scope, and recoverable actions.
   - type: textarea
     id: problem
     attributes:
@@ -18,7 +18,7 @@ body:
   - type: dropdown
     id: workflow
     attributes:
-      label: Closest Toolbox workflow
+      label: Closest Orven workflow
       options:
         - Storage
         - Projects

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,4 +1,4 @@
-# Toolbox pull request
+# Orven pull request
 
 [English](#english) · [Tiếng Việt](#tiếng-việt) · [日本語](#日本語)
 

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
         run: python3 tests/check_diagrams.py docs/diagrams/*.html
 
   toolbox:
-    name: Toolbox 2.0
+    name: Orven macOS
     runs-on: macos-15
     timeout-minutes: 25
     defaults:
@@ -51,14 +51,15 @@ jobs:
           ./scripts/test_storage.sh
           ./scripts/test_changes.sh
           ./scripts/test_app.sh
+          ./scripts/test_monitoring.sh
           ./scripts/lint_localizations.swift
       - name: Release build
         run: swift build -c release
       - name: Assemble app bundle
         run: |
           ./scripts/build_app.sh
-          test -x dist/Toolbox.app/Contents/MacOS/Toolbox
-          test -f dist/Toolbox.app/Contents/Resources/en.lproj/Localizable.strings
-          test -f dist/Toolbox.app/Contents/Resources/vi.lproj/Localizable.strings
+          test -x dist/Orven.app/Contents/MacOS/Toolbox
+          test -f dist/Orven.app/Contents/Resources/en.lproj/Localizable.strings
+          test -f dist/Orven.app/Contents/Resources/vi.lproj/Localizable.strings
           plutil -lint Resources/Info.plist Resources/en.lproj/*.strings Resources/vi.lproj/*.strings
-          codesign --verify --deep --strict dist/Toolbox.app
+          codesign --verify --deep --strict dist/Orven.app

.github/workflows/release.yml

@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     tags:
-      - "v2.0.0"
+      - "v3.0.0"
   workflow_dispatch:
 
 concurrency:
@@ -26,7 +26,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
       - name: Require the supported release tag
-        run: test "$GITHUB_REF" = "refs/tags/v2.0.0"
+        run: test "$GITHUB_REF" = "refs/tags/v3.0.0"
       - name: Format
         run: swift format lint --recursive --parallel Sources Tests Package.swift
       - name: XCTest
@@ -37,19 +37,20 @@ jobs:
           ./scripts/test_storage.sh
           ./scripts/test_changes.sh
           ./scripts/test_app.sh
+          ./scripts/test_monitoring.sh
           ./scripts/lint_localizations.swift
       - name: Universal release contract
         run: |
           ./scripts/build_universal.sh
-          ./Tests/Distribution/release_contract.sh dist/Toolbox.app
+          ./Tests/Distribution/release_contract.sh dist/Orven.app
       - name: Public release contracts
         working-directory: .
         run: |
           bash tests/site_contract.sh
           bash tests/launch_assets.sh
 
   release:
-    name: Build and publish unsigned stable release
+    name: Build and publish ad-hoc Orven release
     needs: validate
     runs-on: macos-15
     timeout-minutes: 45
@@ -64,7 +65,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - name: Build and verify exact unsigned artifacts
+      - name: Build and verify exact ad-hoc artifacts
         run: |
           ./scripts/build_universal.sh
           ./scripts/build_dmg.sh
@@ -75,10 +76,10 @@ jobs:
           GH_TOKEN: ${{ github.token }}
         run: |
           gh release create "$GITHUB_REF_NAME" \
-            dist/Toolbox-2.0.0.dmg \
-            dist/Toolbox-2.0.0.dmg.sha256 \
+            dist/Orven-3.0.0.dmg \
+            dist/Orven-3.0.0.dmg.sha256 \
             --repo "$GITHUB_REPOSITORY" \
             --verify-tag \
-            --notes-file ../../docs/launch/toolbox-2.0.0.md \
+            --notes-file ../../docs/launch/orven-3.0.0.md \
             --latest \
-            --title "Toolbox 2.0.0"
+            --title "Orven 3.0.0"

.gitignore

@@ -173,3 +173,6 @@ NamiQuant-Claude-Design.html
 
 # Local isolated worktrees
 /.worktrees/
+
+# Private machine verification is local evidence, never a release asset.
+docs/monitoring/evidence/