· Sandwich Hime · release engineering
I put Sandwich Hime's intended v1 on macOS and Linux.
I built Sandwich Hime because I wanted Go templates to feel like pages again. RC.1 is the point where I am comfortable freezing that language and generated contract, publishing the exact native tools, and asking the wider world to help me observe it before I call it v1.
The same source had to tell the same story twice
The compiler and Apache-2.0 runtime are tagged separately at v1.0.0-rc.1, but both tags point to the same reviewed public commit. Native Linux/amd64 and Apple Silicon macOS/arm64 gates ran with pinned Go 1.26.7 and Go 1.27.0 toolchains. Generated .sando.go stayed identical across the maintained targets.
The Linux archive is reproducible and checksummed. The Mac archive is reproducible before signing; I then signed the application with my Developer ID identity, submitted it to Apple's notary service, stapled the accepted ticket, and verified it through Gatekeeper. My signing identity and notary credentials never entered the build runner.
I want release evidence to travel with the program
The native packages carry manifests, SPDX SBOMs, checksums, and source/build provenance. The final macOS DMG has SHA-256 1ac00f3d9968d91589561c47e6840a06411acdaaef392521ed54808f076dfc19. The Linux archive has SHA-256 b5d4e5dd77940ee82b5a1d1c2a6414b8a27e50709bb29ec72b94ed9999e91265.
I am not presenting signatures, scanners, or reproducible bytes as proof that software has no bug. They are evidence that the thing I reviewed is the thing I published, and that I can explain how it reached your machine.
RC means I am deliberately not rushing the last step
Sandwichhime.com, EQL Helper, the runnable tutorial starter, the Agent Skill, and the VS Code extension now form the observation surface. I am giving RC.1 at least 14 days of real dogfooding. A release-blocking finding gets a new immutable RC and a renewed boundary; it does not get hidden beneath a moved tag.
That is the exciting part for me: the language feels small, visible, and finished enough to stop adding things. The next job is to watch it carry work.