From 6c775c12a03468cc84445bc7d5dc83860609efea Mon Sep 17 00:00:00 2001
From: Dr Jones <india@proxygod.local>
Date: Fri, 22 May 2026 20:12:10 -0700
Subject: [PATCH] docs: track releases README while keeping binaries local-only

---
 .gitignore         |  3 ++-
 releases/README.md | 25 +++++++++++++++++++++++++
 2 files changed, 27 insertions(+), 1 deletion(-)
 create mode 100644 releases/README.md

diff --git a/.gitignore b/.gitignore
index a4e53d7..25f300f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,6 +29,7 @@ signup_draft.json
 proxy_chain_manager/_bundled/
 
 # Release output (scripts/release_build.ps1) — upload as CI artifacts / GitHub Release
-releases/
+releases/*
+!releases/README.md
 build/version_info.txt
 
diff --git a/releases/README.md b/releases/README.md
new file mode 100644
index 0000000..1ffd66e
--- /dev/null
+++ b/releases/README.md
@@ -0,0 +1,25 @@
+# Proxy God — Windows releases
+
+Production builds live here after running `build_release.bat` from the repo root.
+
+## Latest: v1.0.0
+
+| File | Description |
+|------|-------------|
+| `v1.0.0/ProxyChainManager.exe` | Main application (UAC admin, one-file PyInstaller build) |
+| `v1.0.0/ProxyChainManager.exe.sha256` | SHA256 checksum |
+| `v1.0.0/RELEASE_MANIFEST.json` | Version, git commit, build time, platform |
+| `v1.0.0/SBOM.json` | Frozen dependency list at build time |
+| `v1.0.0/requirements-frozen.txt` | Same as SBOM, pip freeze format |
+| `v1.0.0/LICENSE` | MIT |
+| `v1.0.0/OPERATOR_RUNBOOK.md` | Emergency ops (firewall disengage, etc.) |
+| `ProxyGod-v1.0.0-windows-amd64.zip` | Full release archive |
+
+### Verify download
+
+```powershell
+Get-FileHash -Algorithm SHA256 releases\v1.0.0\ProxyChainManager.exe
+Get-Content releases\v1.0.0\ProxyChainManager.exe.sha256
+```
+
+Build commit: see `RELEASE_MANIFEST.json` inside the folder.