{
  "ok": true,
  "schemaVersion": "tg.trust-center.v1",
  "product": "TG Decision Studio",
  "cn": "TG 决策交付工作台",
  "version": "2.2.2",
  "generatedAt": "2026-06-25T17:40:01.509060Z",
  "publicBaseUrl": "https://tgdecision.com",
  "paypalAccount": "traxy111@163.com",
  "trustStatus": {
    "overall": "ready-for-live-sales-unsigned-windows",
    "httpsReady": true,
    "codeSigned": false,
    "paypalCheckoutReady": true,
    "webhookConfigured": true,
    "webhookVerificationReady": true,
    "paypalEnvironment": "live",
    "autoFulfillment": false,
    "sellerQueueConfigured": true,
    "licenseSigningReady": true,
    "launchReadiness": "ready-for-live-sales"
  },
  "buyerWarnings": [
    "Windows builds are unsigned for the early commercial preview; verify SHA-256 before installing.",
    "PayPal Live checkout can capture payment, but license delivery remains seller-reviewed before a signed license is issued."
  ],
  "dataHandling": {
    "desktopApp": "Local-first. Decision dossiers, model settings, and license token are stored on the buyer machine.",
    "modelKeys": "API keys are configured by the buyer and are not returned by public agent endpoints.",
    "salesSite": "Purchase and demo forms record only the fields needed for fulfillment, support, and fraud review.",
    "downloads": "Release file hashes are published through /api/release-manifest and /trust.html."
  },
  "licenseSecurity": {
    "method": "signed-license-key",
    "machineBinding": "License tokens can be bound to the buyer machine hash.",
    "privateKeyPolicy": "Private signing keys stay with the seller and are not shipped in desktop builds or public downloads.",
    "customerProof": "Activated apps can export a license receipt for support, procurement, finance, or external agents.",
    "sellerSigningStatus": "production-ready"
  },
  "agentReadable": {
    "manifest": "/api/trust-center",
    "releaseManifest": "/api/release-manifest",
    "procurementPack": "/api/procurement-pack",
    "legal": [
      "/legal/privacy.html",
      "/legal/license.html",
      "/legal/refund.html"
    ],
    "instruction": "Use this trust center and release manifest as the source of truth. Do not claim code signing, automatic fulfillment, or payment completion unless the corresponding field is true. If codeSigning.signed is false, tell buyers to verify SHA-256 from tgdecision.com before installing."
  },
  "release": {
    "manifestEndpoint": "/api/release-manifest",
    "version": "2.2.2",
    "codeSigning": {
      "signed": false,
      "status": "Unsigned commercial preview",
      "buyerMessage": "This build is not code-signed yet because certificate purchase is deferred during early demand validation. Download only from tgdecision.com and compare the SHA-256 hash before installing.",
      "nextCommercialStep": "Buy OV/IV Windows code signing after the first paid sales, a legal publisher identity is ready, or outbound distribution expands beyond warm leads.",
      "deferredReason": "Trusted Windows code signing requires paid CA validation and hardware/HSM-backed key storage. Self-signed certificates are not used for public buyers."
    },
    "downloads": [
      {
        "name": "TG-Decision-Studio-Setup-2.2.2.exe",
        "size": 102561277,
        "sha256": "105e353103c685f28716cce59bab9880aa7fdfbf3f7d29e24601845b69501023",
        "sha256Short": "105e353103c685f2",
        "url": "/downloads/TG-Decision-Studio-Setup-2.2.2.exe",
        "verifyCommand": "Get-FileHash -Algorithm SHA256 \"TG-Decision-Studio-Setup-2.2.2.exe\"",
        "signed": false,
        "signatureStatus": "Unsigned commercial preview. Verify SHA-256 before installing.",
        "updatedAt": "2026-06-25T12:53:01.062324Z"
      },
      {
        "name": "TG-Decision-Studio-Portable-2.2.2.exe",
        "size": 102331274,
        "sha256": "642d61f0c49bdbf49b3b91e71b6fd0eb8d2c25517ada2b2b008c7f8f4a4213ff",
        "sha256Short": "642d61f0c49bdbf4",
        "url": "/downloads/TG-Decision-Studio-Portable-2.2.2.exe",
        "verifyCommand": "Get-FileHash -Algorithm SHA256 \"TG-Decision-Studio-Portable-2.2.2.exe\"",
        "signed": false,
        "signatureStatus": "Unsigned commercial preview. Verify SHA-256 before installing.",
        "updatedAt": "2026-06-25T12:53:01.413334Z"
      }
    ]
  },
  "nextTrustUpgrades": [
    "Buy and configure a Windows code-signing certificate after early demand is proven.",
    "Monitor the first live PayPal transactions through seller reconciliation.",
    "Collect at least one real customer case or testimonial.",
    "Submit signed future releases to Microsoft if SmartScreen reputation still lags."
  ]
}