Each product has its own release path.

The website follows the same product-specific release metadata used by installed Stonefern applications where applicable, while installed apps enforce their own cryptographic verification before applying updates.

Public release paths

Disk Insight: /updates/disk-insight/latest.json
Network Repair: /releases/network-repair/windows/x86_64/latest.json with versioned installers under the same release tree.
PC Repair: /updates/pc-repair/stable.json with installers under /downloads/pc-repair/.
DeskLink: /updates/desklink/stable/latest.json with installers under /downloads/desklink/.
AudioLink: /updates/audiolink/stable.json with installers under /downloads/audiolink/.
Subtitle & Audio Cleanup: /updates/audio-subtitles/beta/latest.json with installers under /downloads/audio-subtitles/.

Website download behavior

Every download button is bound to a specific versioned installer path. When live release metadata is reachable, the website validates the product identity, version, expected installer filename, and Stonefern download host, then performs a lightweight installer availability probe before enabling or repointing the button. A manifest alone is never treated as proof that the installer exists.

Installed-app verification

The website resolver is a convenience layer, not the updater trust boundary. Installed products perform product-specific verification such as SHA-256, Ed25519 signatures, and—in the configured public workflows—Windows Authenticode verification before launching updates.

Rebuild safety

The website build preserves existing public/updates, public/downloads, and public/releases state before rebuilding dist, so ordinary page/UI changes do not erase an already published installer.

Windows warnings

New or low-reputation software can trigger Windows reputation warnings even when the files are signed. Stonefern will not instruct users to disable Windows security globally in order to install a product.