diff --git a/MANIFEST.md b/MANIFEST.md
index e32118e..b232bf6 100644
--- a/MANIFEST.md
+++ b/MANIFEST.md
@@ -1,6 +1,6 @@
# Published files declaration — transitrix.github.io
-**Last updated:** 2026-09-17
+**Last updated:** 2026-10-14
This file declares the published artefacts served by transitrix.github.io (the transitrix.com website). A file served to a reader is listed below. Internal machinery, source files, and build artifacts are not published and are not listed.
@@ -30,6 +30,7 @@ This file declares the published artefacts served by transitrix.github.io (the t
- `learn/index.html` — Learning hub
- `library/index.html` — Library page
- `library/archimate-cheat-sheet/index.html` — ArchiMate cheat sheet HTML
+- `marketplace-status/index.html` — Marketplace status and release verification
- `methodology/index.html` — Methodology page
- `quickstart/index.html` — Quickstart page
- `recipes/index.html` — Recipes page
diff --git a/install/index.html b/install/index.html
index cc704ca..2102733 100644
--- a/install/index.html
+++ b/install/index.html
@@ -68,6 +68,7 @@
1. Install Studio
In Cursor, VSCodium and Windsurf you can also just search Transitrix Studio in the Extensions panel — they read Open VSX.
On stock VS Code, take the file instead. Microsoft's build reads only its own marketplace, so an Extensions search will not find Studio there. Download the .vsix from the Open VSX listing, then use Extensions → … → Install from VSIX…, or run code --install-extension transitrix-studio-*.vsix. Same build, same version.
Sequence, state and ER/class diagrams render natively via PlantUML — no extra extension needed. For lighter, quicker views, add Markdown Preview Mermaid Support alongside it — same plain-text model, no lock-in.
Transitrix Studio 3.2.0 was removed from Visual Studio Marketplace on 10 August 2026 under a Malware classification. We dispute this classification and have requested technical review. Microsoft has replied several times; its 5 October response maintained the block. We are still seeking the technical findings and a review path for an improved version.
We audited all four 3.2.0 packages distributed through Open VSX. Microsoft Defender reported no threats; VirusTotal recorded zero malicious and zero suspicious results, with some engines unable to complete analysis. These point-in-time results do not guarantee safety.
+
The Microsoft and Open VSX builds used the same source commit and build commands. The original Microsoft-served files are unavailable, so we cannot independently verify byte-for-byte identity. A Windows x64 rebuild matched all 519 extracted files by content hash.
Since then, we have removed the platform-specific PNG rendering dependency. Release 3.8.1 provides the VSIX, checksums, a software bill of materials and build-provenance verification instructions. The 3.2.0 scan results should not be read as scan results for 3.8.1.
+
Please review the published evidence against your organisation’s requirements and keep security protections enabled.