diff --git a/docs/adr/0004-untrusted-releases-and-artifacts.md b/docs/adr/0004-untrusted-releases-and-artifacts.md
new file mode 100644
index 000000000..3fbf380ad
--- /dev/null
+++ b/docs/adr/0004-untrusted-releases-and-artifacts.md
@@ -0,0 +1,82 @@
+# 4. Untrusted releases and artifacts
+
+Date: 2026-10-06
+
+## Status
+
+Proposed
+
+## Context
+
+Releases and their artifacts are COBs, so anyone can create a release in a
+repo they replicate, and anyone can register an artifact on any release,
+including a delegate's. An artifact is a file a user downloads and may run.
+A release that sits in a well-known repo gets some of that repo's trust in
+the eyes of a user who doesn't know what a delegate is. This makes it easy
+to trick a user into downloading something malicious.
+
+Trust is set at two levels:
+
+- **Release:** its creator decides the title, tag and commit.
+- **Artifact:** its author decides the bytes behind the CID.
+
+The two can differ. A delegate's release can carry an artifact a
+non-delegate registered, and a delegate can register an artifact on a
+non-delegate's release.
+
+The app, like radicle-explorer, splits releases and artifacts into two
+disjoint scopes by author: Delegates and Others. In the code the scopes are
+`trusted` and `untrusted`. The discussion is in the
+[Artifacts topic](https://radicle.zulipchat.com/#narrow/channel/444463-Desktop/topic/Artifacts/with/624009755)
+on Zulip.
+
+## Decision
+
+**Trust follows delegates.** A release or artifact is trusted when its
+creator or author is a delegate of the repo, and untrusted otherwise. The
+UI keeps the labels Delegates and Others, as "Untrusted" reads as too
+alarming for content that is often harmless.
+
+**Warn where untrusted content shows.** A short warning
+(`UntrustedWarning.svelte`) says the content is not from a delegate and to
+download it only if the user trusts its author. It stays small, so it
+informs without alarm. It shows:
+
+- above the Others releases list;
+- on a release by a non-delegate, for the whole release;
+- on a delegate's release, while it shows artifacts by non-delegates;
+- in the download popover of an artifact by a non-delegate, whatever the
+  release, because that is where the user acts;
+- in the browser tab of a delegate's artifact, while it lists links added
+  by non-delegates, as those downloads are not checked against the CID.
+
+**Count only delegate attestations.** The attestation badge on an artifact
+counts delegates only, as anyone can make keys that attest their own
+artifact. The full list still shows every attestation.
+
+**Keep untrusted content visible.** Others' releases and artifacts stay
+listed by default, behind their own filter.
+
+## Alternatives considered
+
+- **Hide Others by default**, behind a global setting. This protects users
+  best, and avoids showing links to malware at all, which is a reputation
+  risk a warning doesn't remove. It also hides legitimate contributions,
+  such as builds by a release manager who is not a delegate. It is still
+  open.
+- **Rename Delegates to Official** or Others to Untrusted. This changes
+  only the wording and leaves the warning to a single label.
+- **A list of trusted publishers in the repo identity**, like canonical ref
+  rules. This lets non-delegates publish trusted releases, but adds a
+  second trust model. Linking a release to a canonical annotated tag gives
+  part of this already, so canonical refs are the preferred path.
+
+## Consequences
+
+- Users see a warning before they download an untrusted artifact, also when
+  it sits on a trusted release.
+- A trusted artifact on an untrusted release still shows the release
+  warning, as its title, tag and commit are not trusted.
+- Delegation is the only trust signal. Release managers who are not
+  delegates show as Others until releases can use canonical ref rules.
+- radicle-explorer should show the same warnings so that both clients agree.
diff --git a/src/components/ArtifactDownloadButton.svelte b/src/components/ArtifactDownloadButton.svelte
index 07e75540d..5354c5249 100644
--- a/src/components/ArtifactDownloadButton.svelte
+++ b/src/components/ArtifactDownloadButton.svelte
@@ -17,14 +17,13 @@
   import ExternalLink from "@app/components/ExternalLink.svelte";
   import Icon from "@app/components/Icon.svelte";
   import Popover from "@app/components/Popover.svelte";
+  import UntrustedWarning from "@app/components/UntrustedWarning.svelte";
 
   interface Props {
     artifact: Artifact;
     delegateIds: Set<string>;
     releaseId: string;
     rid: string;
-    /// Whether the node already seeds this artifact, asked of the node rather
-    /// than assumed from what this component did.
     seeding: boolean;
     onDownloaded: () => void;
   }
@@ -40,8 +39,6 @@
 
   let activeTab: "app" | "cli" | "browser" = $state("app");
   let expanded = $state(false);
-  // Which transfer is running: a download writes to disk, a fetch only fills
-  // the node's store.
   let running: "download" | "fetch" | undefined = $state();
   let progress: ArtifactProgress | undefined = $state();
   let downloadError: string | undefined = $state();
@@ -54,8 +51,6 @@
     }
   });
 
-  // Clear the outcome of a finished download once the popover closes, so a
-  // later visit starts fresh.
   $effect(() => {
     if (!expanded && !running) {
       finished = undefined;
@@ -63,8 +58,6 @@
     }
   });
 
-  // The node reports byte movement per CID, so a shared event channel
-  // is filtered down to this artifact.
   $effect(() => {
     // Events only exist under Tauri, not against the test HTTP API.
     if (!window.__TAURI_INTERNALS__) {
@@ -146,12 +139,13 @@
   const webLocations = $derived(
     releases.webLocations(artifact.locations, delegateIds),
   );
-  // Any location at all can be fetched with the CLI, web locations included.
+  const authorTrusted = $derived(delegateIds.has(artifact.author.did));
+  const linksByOthers = $derived(
+    webLocations.some(l => !delegateIds.has(l.user.did)),
+  );
   const downloadable = $derived(seeding || artifact.locations.length > 0);
   const downloadLabel = $derived(seeding ? "Save" : "Download");
 
-  // The app and CLI tabs fetch through the artifact node, so they are only
-  // usable while it answers. The browser tab does not need it.
   const nodeRunning = $derived($artifactNodeRunning);
   const START_COMMAND = "rad-artifact node start";
   const command = $derived(
@@ -171,6 +165,9 @@
   .start-command {
     margin-bottom: 0.75rem;
   }
+  .untrusted {
+    margin-bottom: 0.75rem;
+  }
   .tabs {
     display: flex;
     gap: 2px;
@@ -265,6 +262,12 @@
 
   {#snippet popover()}
     <div class="popover">
+      {#if !authorTrusted}
+        <div class="untrusted">
+          <UntrustedWarning
+            text="Not from a delegate. Only download if you trust the author." />
+        </div>
+      {/if}
       <div class="tabs">
         <Button
           styleWidth="100%"
@@ -393,6 +396,12 @@
           <Icon name="warning" />
           These downloads are not checked against the CID.
         </div>
+        {#if authorTrusted && linksByOthers}
+          <div class="untrusted">
+            <UntrustedWarning
+              text="Links without a delegate badge are not from a delegate. Only use them if you trust who added them." />
+          </div>
+        {/if}
         <div class="locations">
           {#each webLocations as location (`${location.user.did}:${location.url}`)}
             <div class="location">
diff --git a/src/components/ArtifactRow.svelte b/src/components/ArtifactRow.svelte
new file mode 100644
index 000000000..834c3090c
--- /dev/null
+++ b/src/components/ArtifactRow.svelte
@@ -0,0 +1,1167 @@
+<script lang="ts">
+  import type { Artifact } from "@bindings/cob/release/Artifact";
+  import type { ArtifactDigest } from "@bindings/cob/release/ArtifactDigest";
+
+  import { slide } from "svelte/transition";
+
+  import { pickLike } from "@app/lib/artifactPickers";
+  import { artifactNodeRunning } from "@app/lib/events";
+  import { invoke, InvokeError } from "@app/lib/invoke";
+  import { show } from "@app/lib/modal";
+  import {
+    attestedBy,
+    canAttest,
+    canEditMetadata,
+    delegatesFirst,
+    displayMetadataValue,
+    locationsByNode,
+    parseMetadataValue,
+    redactedByDelegate,
+  } from "@app/lib/releases";
+  import { authorForNodeId, formatBytes } from "@app/lib/utils";
+
+  import ArtifactDownloadButton from "@app/components/ArtifactDownloadButton.svelte";
+  import Button from "@app/components/Button.svelte";
+  import DelegateBadge from "@app/components/DelegateBadge.svelte";
+  import Icon from "@app/components/Icon.svelte";
+  import Id from "@app/components/Id.svelte";
+  import NodeId from "@app/components/NodeId.svelte";
+  import Popover, { closeFocused } from "@app/components/Popover.svelte";
+  import TextInput from "@app/components/TextInput.svelte";
+  import ConfirmRedact from "@app/modals/ConfirmRedact.svelte";
+
+  interface Props {
+    artifact: Artifact;
+    rid: string;
+    releaseId: string;
+    ownDid: string;
+    delegateIds: Set<string>;
+    cidLabel: string;
+    seeding: boolean;
+    onChange: () => Promise<void>;
+  }
+
+  const {
+    artifact,
+    rid,
+    releaseId,
+    ownDid,
+    delegateIds,
+    cidLabel,
+    seeding,
+    onChange,
+  }: Props = $props();
+
+  const SIZE_KEY = "sizeBytes";
+  // `title` in the metadata is the convention for a display name.
+  const TITLE_KEY = "title";
+
+  const size = $derived.by(() => {
+    const size = artifact.metadata[SIZE_KEY];
+    return typeof size === "number" ? formatBytes(size) : undefined;
+  });
+  const metadata = $derived(
+    Object.entries(artifact.metadata).filter(([key]) => key !== SIZE_KEY),
+  );
+  const artifactName = $derived.by(() => {
+    const title = artifact.metadata[TITLE_KEY];
+    return typeof title === "string" && title.trim() !== ""
+      ? title.trim()
+      : undefined;
+  });
+  const locations = $derived(
+    delegatesFirst(
+      locationsByNode(artifact.locations),
+      g => g.user.did,
+      delegateIds,
+    ),
+  );
+  const redactions = $derived(
+    delegatesFirst(artifact.redactions, r => r.user.did, delegateIds),
+  );
+  const attestations = $derived(
+    delegatesFirst(artifact.attestations, n => n.did, delegateIds),
+  );
+  const trust = $derived.by(() => {
+    const count = attestedBy(attestations, delegateIds);
+    return count === 0
+      ? undefined
+      : `Attested by ${count} delegate${count === 1 ? "" : "s"}`;
+  });
+  const editable = $derived(canEditMetadata(artifact, ownDid, delegateIds));
+  const artifactNodeUp = $derived($artifactNodeRunning);
+
+  let open = $state(false);
+
+  function openRedact() {
+    show({
+      component: ConfirmRedact,
+      props: {
+        name: artifactName ?? artifact.name,
+        seeding,
+        confirm: async (reason: string) => {
+          await invoke("redact_artifact", {
+            rid,
+            releaseId,
+            cid: artifact.cid,
+            reason,
+          });
+          await onChange();
+        },
+      },
+    });
+  }
+
+  // The key being edited, or an empty key for a new entry.
+  let editing: string | undefined = $state();
+  let draftKey = $state("");
+  let draftValue = $state("");
+  let saving = $state(false);
+  let metadataError: string | undefined = $state();
+
+  function startEdit(key: string, value: unknown) {
+    editing = key;
+    draftKey = key;
+    draftValue = key === "" ? "" : displayMetadataValue(value);
+    metadataError = undefined;
+  }
+
+  function cancelEdit() {
+    editing = undefined;
+    draftKey = "";
+    draftValue = "";
+    metadataError = undefined;
+  }
+
+  async function saveMetadata(previousKey: string) {
+    const key = draftKey.trim();
+    if (key === "") {
+      metadataError = "A key is required.";
+      return;
+    }
+    if (key === SIZE_KEY) {
+      metadataError = `"${SIZE_KEY}" is maintained by the app.`;
+      return;
+    }
+
+    saving = true;
+    metadataError = undefined;
+    try {
+      // Renaming a key is a remove plus a set, since the COB has no rename.
+      if (previousKey !== "" && previousKey !== key) {
+        await invoke("remove_artifact_metadata", {
+          rid,
+          releaseId,
+          cid: artifact.cid,
+          key: previousKey,
+        });
+      }
+      await invoke("set_artifact_metadata", {
+        rid,
+        releaseId,
+        cid: artifact.cid,
+        key,
+        value: parseMetadataValue(draftValue),
+      });
+      cancelEdit();
+      await onChange();
+    } catch (error) {
+      console.error("Saving artifact metadata failed", error);
+      metadataError = "Saving failed.";
+    } finally {
+      saving = false;
+    }
+  }
+
+  async function removeMetadata(key: string) {
+    saving = true;
+    metadataError = undefined;
+    try {
+      await invoke("remove_artifact_metadata", {
+        rid,
+        releaseId,
+        cid: artifact.cid,
+        key,
+      });
+      cancelEdit();
+      await onChange();
+    } catch (error) {
+      console.error("Removing artifact metadata failed", error);
+      metadataError = "Removing failed.";
+    } finally {
+      saving = false;
+    }
+  }
+
+  let attesting = $state(false);
+  let attestError: string | undefined = $state();
+
+  async function attest() {
+    const path = await pickLike(artifact.directory);
+    if (!path) {
+      return;
+    }
+
+    attesting = true;
+    attestError = undefined;
+    try {
+      await invoke("attest_artifact", {
+        rid,
+        releaseId,
+        cid: artifact.cid,
+        path,
+      });
+    } catch (error) {
+      attestError =
+        error instanceof InvokeError &&
+        error.code === "ArtifactError.CidMismatch"
+          ? "Your build has a different CID, so it was not attested."
+          : "Attesting failed.";
+    } finally {
+      attesting = false;
+      await onChange();
+    }
+  }
+
+  let reseeding = $state(false);
+  let reseedError: string | undefined = $state();
+
+  async function reseed() {
+    const path = await pickLike(artifact.directory);
+    if (!path) {
+      return;
+    }
+
+    reseeding = true;
+    reseedError = undefined;
+    try {
+      const digest = await invoke<ArtifactDigest>("compute_artifact_cid", {
+        path,
+      });
+      if (digest.cid !== artifact.cid) {
+        reseedError = "CID mismatch";
+        return;
+      }
+      await invoke("seed_artifact", {
+        rid,
+        releaseId,
+        cid: artifact.cid,
+        sourcePath: path,
+      });
+    } catch (error) {
+      console.error("Seeding failed", error);
+      reseedError = (await invoke<boolean>("artifact_node_running").catch(
+        () => false,
+      ))
+        ? "Seeding failed"
+        : "Artifact node not running";
+    } finally {
+      reseeding = false;
+      await onChange();
+    }
+  }
+
+  let unseeding = $state(false);
+  let unseedFailed = $state(false);
+
+  async function stopSeeding() {
+    unseeding = true;
+    unseedFailed = false;
+    try {
+      await invoke("unseed_artifact", { rid, releaseId, cid: artifact.cid });
+    } catch (error) {
+      console.error("Unseeding failed", error);
+      unseedFailed = true;
+    } finally {
+      unseeding = false;
+      await onChange();
+    }
+  }
+
+  let addingLocation = $state(false);
+  let draftUrl = $state("");
+  let savingLocation = $state(false);
+  let locationError: string | undefined = $state();
+
+  function startAddLocation() {
+    addingLocation = true;
+    draftUrl = "";
+    locationError = undefined;
+  }
+
+  function cancelAddLocation() {
+    addingLocation = false;
+    draftUrl = "";
+    locationError = undefined;
+  }
+
+  async function addLocation() {
+    const url = draftUrl.trim();
+    if (url === "") {
+      locationError = "A URL is required.";
+      return;
+    }
+
+    savingLocation = true;
+    locationError = undefined;
+    try {
+      await invoke("add_artifact_location", {
+        rid,
+        releaseId,
+        cid: artifact.cid,
+        url,
+      });
+      cancelAddLocation();
+      await onChange();
+    } catch (error) {
+      console.error("Adding a location failed", error);
+      locationError =
+        error instanceof InvokeError &&
+        error.code === "ArtifactError.InvalidLocation"
+          ? "This is not a URL peers can fetch from."
+          : "Adding the location failed.";
+    } finally {
+      savingLocation = false;
+    }
+  }
+
+  async function removeLocation(url: string) {
+    savingLocation = true;
+    locationError = undefined;
+    try {
+      await invoke("remove_artifact_location", {
+        rid,
+        releaseId,
+        cid: artifact.cid,
+        url,
+      });
+      closeFocused();
+      await onChange();
+    } catch (error) {
+      console.error("Removing a location failed", error);
+      locationError = "Removing the location failed.";
+    } finally {
+      savingLocation = false;
+    }
+  }
+</script>
+
+<style>
+  .artifact {
+    padding: 0.75rem 0.25rem;
+    border-bottom: 1px solid var(--color-border-subtle);
+  }
+  .artifact:first-child {
+    border-top: 1px solid var(--color-border-subtle);
+  }
+  .artifact-row {
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+  }
+  .summary {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    min-width: 0;
+    background: none;
+    border: 0;
+    padding: 0;
+    margin: 0;
+    color: inherit;
+    font: inherit;
+    text-align: left;
+    cursor: pointer;
+  }
+  .summary:hover .toggle,
+  .summary:focus-visible .toggle {
+    color: var(--color-text-primary);
+  }
+  .identity {
+    display: flex;
+    align-items: baseline;
+    gap: 0.5rem;
+    flex-wrap: nowrap;
+    min-width: 0;
+  }
+  .name {
+    font: var(--txt-body-l-regular);
+    color: var(--color-text-primary);
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    min-width: 0;
+    flex-shrink: 1;
+  }
+  .trailing {
+    display: inline-flex;
+    align-items: baseline;
+    align-self: center;
+    gap: 0.5rem;
+    flex-shrink: 0;
+    max-width: 60%;
+    min-width: 0;
+  }
+  .filename {
+    font: var(--txt-body-m-regular);
+    color: var(--color-text-tertiary);
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    min-width: 0;
+  }
+  .artifact-actions {
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+    margin-left: auto;
+    flex-shrink: 0;
+  }
+  .size {
+    font: var(--txt-body-m-regular);
+    color: var(--color-text-tertiary);
+    white-space: nowrap;
+    flex-shrink: 0;
+  }
+  .identity.expanded {
+    flex-wrap: wrap;
+  }
+  .identity.expanded .trailing {
+    max-width: none;
+  }
+  .identity.expanded .name,
+  .identity.expanded .filename {
+    white-space: normal;
+    overflow: visible;
+    text-overflow: clip;
+    overflow-wrap: anywhere;
+    max-width: none;
+    min-width: 0;
+  }
+  .toggle {
+    display: inline-flex;
+    align-items: center;
+    align-self: center;
+    flex-shrink: 0;
+    color: var(--color-text-tertiary);
+    transition: transform 0.15s;
+  }
+  .toggle.open {
+    transform: rotate(180deg);
+  }
+  .artifact-meta {
+    display: flex;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 0.75rem;
+    margin-top: 0.375rem;
+    font: var(--txt-body-s-regular);
+  }
+  .cid {
+    color: var(--color-text-tertiary);
+    font: var(--txt-code-small);
+  }
+  .trust {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.25rem;
+    color: var(--color-foreground-success);
+    white-space: nowrap;
+  }
+  .seeding {
+    display: inline-flex;
+    align-items: center;
+    height: 1.75rem;
+    padding: 0 0.5rem;
+    border: none;
+    border-radius: var(--border-radius-sm);
+    background: none;
+    cursor: pointer;
+    font: var(--txt-body-m-regular);
+    color: var(--color-text-tertiary);
+    white-space: nowrap;
+  }
+  .seeding:hover:not(:disabled),
+  .seeding:focus-visible {
+    background: var(--color-surface-subtle);
+    color: var(--color-text-primary);
+  }
+  .seeding-label {
+    display: inline-grid;
+  }
+  .seeding-idle,
+  .seeding-stop {
+    grid-area: 1 / 1;
+    text-align: center;
+  }
+  .seeding-stop {
+    visibility: hidden;
+  }
+  .seeding:hover:not(:disabled) .seeding-idle,
+  .seeding:focus-visible .seeding-idle {
+    visibility: hidden;
+  }
+  .seeding:hover:not(:disabled) .seeding-stop,
+  .seeding:focus-visible .seeding-stop {
+    visibility: visible;
+  }
+  .unseed-error {
+    color: var(--color-foreground-red);
+  }
+  .seed-error {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.25rem;
+    color: var(--color-feedback-warning-text);
+    font: var(--txt-body-s-regular);
+    white-space: nowrap;
+  }
+  .contributor {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.5rem;
+    color: var(--color-text-secondary);
+  }
+  .redacted-badge {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.25rem;
+    flex-shrink: 0;
+    white-space: nowrap;
+    font: var(--txt-body-s-regular);
+    color: var(--color-text-tertiary);
+    border: 1px solid var(--color-border-subtle);
+    border-radius: var(--border-radius-sm);
+    padding: 0 0.375rem;
+  }
+  .details {
+    display: flex;
+    flex-direction: column;
+    gap: 1rem;
+    margin-top: 0.75rem;
+  }
+  .section {
+    display: flex;
+    flex-direction: column;
+    gap: 0.5rem;
+    font: var(--txt-body-m-regular);
+  }
+  .section-title {
+    display: flex;
+    align-items: center;
+    min-height: 1.5rem;
+    gap: 0.5rem;
+    font: var(--txt-body-s-medium);
+    color: var(--color-text-secondary);
+  }
+  .section-count {
+    color: var(--color-text-tertiary);
+    font: var(--txt-body-s-regular);
+  }
+  .empty-section {
+    color: var(--color-text-tertiary);
+  }
+  .people {
+    display: flex;
+    flex-direction: column;
+    gap: 0.5rem;
+  }
+  .person {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    color: var(--color-foreground-success);
+  }
+  .meta-row {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    min-width: 0;
+    width: fit-content;
+    max-width: 100%;
+  }
+  .meta-key {
+    color: var(--color-text-tertiary);
+    flex-shrink: 0;
+  }
+  .meta-value {
+    word-break: break-word;
+    min-width: 0;
+  }
+  .meta-actions {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.25rem;
+    opacity: 0;
+  }
+  .meta-row:hover .meta-actions,
+  .meta-row:focus-within .meta-actions {
+    opacity: 1;
+  }
+  .meta-editor {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    flex-wrap: wrap;
+  }
+  .key-field {
+    width: 9rem;
+    flex-shrink: 0;
+  }
+  .value-field {
+    width: 16rem;
+    max-width: 100%;
+  }
+  .meta-error {
+    color: var(--color-feedback-error-text);
+    font: var(--txt-body-s-regular);
+  }
+  .confirm-remove {
+    display: flex;
+    flex-direction: column;
+    gap: 0.75rem;
+    padding: 0.75rem;
+    min-width: 15rem;
+    max-width: 22rem;
+    border: 1px solid var(--color-border-subtle);
+    border-radius: var(--border-radius-sm);
+    background-color: var(--color-surface-canvas);
+  }
+  .confirm-remove-text {
+    display: flex;
+    flex-direction: column;
+    gap: 0.5rem;
+    color: var(--color-text-primary);
+  }
+  .confirm-remove-note {
+    color: var(--color-text-secondary);
+  }
+  .confirm-remove-actions {
+    display: flex;
+    justify-content: flex-end;
+    gap: 0.5rem;
+  }
+  .confirm-remove-button {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.5rem;
+    height: 2rem;
+    padding: 0 0.75rem;
+    border: 0;
+    border-radius: var(--border-radius-sm);
+    background-color: var(--color-feedback-error-fill);
+    color: var(--color-text-on-brand);
+    cursor: pointer;
+    transition: background-color 0.1s ease;
+  }
+  .confirm-remove-button:hover:not(:disabled),
+  .confirm-remove-button:focus-visible:not(:disabled) {
+    background-color: var(--color-feedback-error-fill-hover);
+  }
+  .confirm-remove-button:disabled {
+    cursor: default;
+    opacity: 0.6;
+  }
+  .locations,
+  .redactions {
+    display: flex;
+    flex-direction: column;
+    gap: 0.5rem;
+    font: var(--txt-body-m-regular);
+  }
+  .location-group {
+    display: flex;
+    flex-direction: column;
+    gap: 0.25rem;
+    min-width: 0;
+  }
+  .location-node {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+  }
+  .location-url {
+    color: var(--color-text-secondary);
+    word-break: break-all;
+  }
+  .url-field {
+    width: 24rem;
+    max-width: 100%;
+  }
+  .redaction {
+    display: flex;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 0.5rem;
+    color: var(--color-text-secondary);
+  }
+  .reason {
+    color: var(--color-text-tertiary);
+    word-break: break-word;
+  }
+</style>
+
+<div class="artifact">
+  <div class="artifact-row">
+    <button
+      type="button"
+      class="summary"
+      aria-expanded={open}
+      title={open ? "Hide details" : "Show details"}
+      onclick={() => (open = !open)}>
+      <span class="identity" class:expanded={open}>
+        <span class="name">{artifactName ?? artifact.name}</span>
+        <span class="trailing">
+          {#if artifactName}
+            <span class="filename">{artifact.name}</span>
+          {/if}
+          {#if artifact.redacted}
+            <span class="redacted-badge">
+              {redactedByDelegate(artifact, delegateIds)
+                ? "Redacted by delegate"
+                : "Redacted by author"}
+            </span>
+          {/if}
+          <span class="toggle" class:open>
+            <Icon name="chevron-down" />
+          </span>
+        </span>
+      </span>
+    </button>
+    {#if size}
+      <span class="size">{size}</span>
+    {/if}
+    <div class="artifact-actions">
+      {#if seeding}
+        <button
+          class="seeding"
+          disabled={unseeding}
+          title="Your node is seeding this artifact. Click to unseed."
+          onclick={stopSeeding}>
+          {#if unseeding}
+            Unseeding…
+          {:else}
+            <span class="seeding-label">
+              <span class="seeding-idle">Seeding</span>
+              <span class="seeding-stop">Unseed</span>
+            </span>
+          {/if}
+        </button>
+      {:else if !artifact.redacted}
+        {#if reseedError}
+          <span class="seed-error">
+            <Icon name="warning" />{reseedError}
+          </span>
+        {/if}
+        <Button
+          variant="naked"
+          styleHeight="1.75rem"
+          disabled={reseeding || artifactNodeUp === false}
+          title={artifactNodeUp === false
+            ? "Your artifact node is not running"
+            : "Seed your own copy so others can download it"}
+          onclick={reseed}>
+          {reseeding ? "Seeding…" : "Seed"}
+        </Button>
+      {/if}
+      <ArtifactDownloadButton
+        {artifact}
+        {delegateIds}
+        {seeding}
+        onDownloaded={onChange}
+        {releaseId}
+        {rid} />
+    </div>
+  </div>
+
+  <div class="artifact-meta">
+    <span class="cid">
+      <Id id={cidLabel} clipboard={artifact.cid} label="CID" shorten={false} />
+    </span>
+    <span class="contributor">
+      <NodeId {...authorForNodeId(artifact.author)} />
+      {#if delegateIds.has(artifact.author.did)}
+        <DelegateBadge />
+      {/if}
+    </span>
+    {#if trust}
+      <span class="trust">
+        <Icon name="checkmark" />
+        {trust}
+      </span>
+    {/if}
+    {#if unseedFailed}
+      <span class="unseed-error">Could not unseed.</span>
+    {/if}
+  </div>
+
+  {#if open}
+    <div class="details" transition:slide={{ duration: 180 }}>
+      <div class="section">
+        <div class="section-title">
+          Metadata
+          <span class="section-count">{metadata.length}</span>
+          {#if editable && editing !== ""}
+            <Button
+              variant="naked"
+              styleHeight="1.5rem"
+              disabled={saving}
+              onclick={() => startEdit("", undefined)}>
+              <Icon name="plus" />Add
+            </Button>
+          {/if}
+        </div>
+
+        {#if metadata.length === 0 && editing !== ""}
+          <div class="empty-section">No metadata</div>
+        {/if}
+
+        {#each metadata as [key, value] (key)}
+          {#if editing === key}
+            <div class="meta-editor">
+              <span class="key-field">
+                <TextInput
+                  bind:value={draftKey}
+                  placeholder="Key"
+                  styleHeight="1.75rem"
+                  disabled={saving} />
+              </span>
+              <span class="value-field">
+                <TextInput
+                  bind:value={draftValue}
+                  placeholder="Value"
+                  styleHeight="1.75rem"
+                  disabled={saving}
+                  onSubmit={() => saveMetadata(key)} />
+              </span>
+              <Button
+                variant="secondary"
+                styleHeight="1.75rem"
+                disabled={saving}
+                onclick={() => saveMetadata(key)}>
+                Save
+              </Button>
+              <Button
+                variant="naked"
+                styleHeight="1.75rem"
+                disabled={saving}
+                onclick={cancelEdit}>
+                Cancel
+              </Button>
+            </div>
+          {:else}
+            <div class="meta-row">
+              <span class="meta-key">{key}</span>
+              <span class="meta-value">
+                {displayMetadataValue(value)}
+              </span>
+              {#if editable}
+                <span class="meta-actions">
+                  <Button
+                    variant="naked"
+                    styleHeight="1.5rem"
+                    title="Edit"
+                    disabled={saving}
+                    onclick={() => startEdit(key, value)}>
+                    <Icon name="edit" />
+                  </Button>
+                  <Popover placement="bottom-end" popoverPadding="0">
+                    {#snippet toggle(onclick)}
+                      <Button
+                        variant="naked"
+                        styleHeight="1.5rem"
+                        title="Remove"
+                        disabled={saving}
+                        {onclick}>
+                        <Icon name="trash" />
+                      </Button>
+                    {/snippet}
+                    {#snippet popover()}
+                      <div class="confirm-remove">
+                        <div class="confirm-remove-text">
+                          <div class="txt-body-m-medium">
+                            Remove "{key}"?
+                          </div>
+                          <div class="confirm-remove-note txt-body-m-regular">
+                            The entry is dropped from the release for everyone
+                            who replicates it. You can set it again afterwards.
+                          </div>
+                        </div>
+                        <div class="confirm-remove-actions">
+                          <Button
+                            variant="outline"
+                            disabled={saving}
+                            onclick={closeFocused}>
+                            Cancel
+                          </Button>
+                          <button
+                            type="button"
+                            class="confirm-remove-button txt-body-m-medium"
+                            disabled={saving}
+                            onclick={() => removeMetadata(key)}>
+                            <Icon name="trash" />
+                            {saving ? "Removing…" : "Remove"}
+                          </button>
+                        </div>
+                      </div>
+                    {/snippet}
+                  </Popover>
+                </span>
+              {/if}
+            </div>
+          {/if}
+        {/each}
+
+        {#if editing === ""}
+          <div class="meta-editor">
+            <span class="key-field">
+              <TextInput
+                bind:value={draftKey}
+                placeholder="Key"
+                autofocus
+                styleHeight="1.75rem"
+                disabled={saving} />
+            </span>
+            <span class="value-field">
+              <TextInput
+                bind:value={draftValue}
+                placeholder="Value"
+                styleHeight="1.75rem"
+                disabled={saving}
+                onSubmit={() => saveMetadata("")} />
+            </span>
+            <Button
+              variant="secondary"
+              styleHeight="1.75rem"
+              disabled={saving}
+              onclick={() => saveMetadata("")}>
+              Save
+            </Button>
+            <Button
+              variant="naked"
+              styleHeight="1.75rem"
+              disabled={saving}
+              onclick={cancelEdit}>
+              Cancel
+            </Button>
+          </div>
+        {/if}
+
+        {#if metadataError}
+          <div class="meta-error">{metadataError}</div>
+        {/if}
+      </div>
+
+      <div class="section">
+        <div class="section-title">
+          Attestations
+          <span class="section-count">{attestations.length}</span>
+          {#if canAttest(artifact, ownDid)}
+            <Button
+              variant="naked"
+              styleHeight="1.5rem"
+              disabled={attesting}
+              title="Attest that your own build has the same CID"
+              onclick={attest}>
+              <Icon name="checkmark" />
+              {attesting ? "Attesting…" : "Attest"}
+            </Button>
+          {/if}
+        </div>
+        {#if attestError}
+          <div class="meta-error">{attestError}</div>
+        {/if}
+        {#if attestations.length === 0}
+          <div class="empty-section">Nobody has attested to this artifact</div>
+        {:else}
+          <div class="people">
+            {#each attestations as node (node.did)}
+              <div class="person">
+                <Icon name="checkmark" />
+                <NodeId {...authorForNodeId(node)} />
+                {#if delegateIds.has(node.did)}
+                  <DelegateBadge tooltip="Attested by a delegate" />
+                {/if}
+              </div>
+            {/each}
+          </div>
+        {/if}
+      </div>
+
+      <div class="section">
+        <div class="section-title">
+          Redactions
+          <span class="section-count">{redactions.length}</span>
+          <!-- Only the author's and delegates' redactions hide an artifact. -->
+          {#if editable && !redactions.some(r => r.user.did === ownDid)}
+            <Button variant="naked" styleHeight="1.5rem" onclick={openRedact}>
+              <Icon name="warning" />Redact
+            </Button>
+          {/if}
+        </div>
+        {#if redactions.length === 0}
+          <div class="empty-section">No redactions</div>
+        {:else}
+          <div class="redactions">
+            {#each redactions as redaction (redaction.user.did)}
+              <div class="redaction">
+                <NodeId {...authorForNodeId(redaction.user)} />
+                {#if delegateIds.has(redaction.user.did)}
+                  <DelegateBadge tooltip="Redacted by a delegate" />
+                {/if}
+                <span class="reason">
+                  {redaction.reason || "No reason"}
+                </span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+      </div>
+
+      <div class="section">
+        <div class="section-title">
+          Locations
+          <span class="section-count">{artifact.locations.length}</span>
+          {#if !artifact.redacted && !addingLocation}
+            <Button
+              variant="naked"
+              styleHeight="1.5rem"
+              disabled={savingLocation}
+              title="Add a URL others can download this artifact from"
+              onclick={startAddLocation}>
+              <Icon name="plus" />Add
+            </Button>
+          {/if}
+        </div>
+        {#if addingLocation}
+          <div class="meta-editor">
+            <span class="url-field">
+              <TextInput
+                bind:value={draftUrl}
+                placeholder="https://…"
+                autofocus
+                styleHeight="1.75rem"
+                disabled={savingLocation}
+                onDismiss={cancelAddLocation}
+                onSubmit={addLocation} />
+            </span>
+            <Button
+              variant="secondary"
+              styleHeight="1.75rem"
+              disabled={savingLocation}
+              onclick={addLocation}>
+              Save
+            </Button>
+            <Button
+              variant="naked"
+              styleHeight="1.75rem"
+              disabled={savingLocation}
+              onclick={cancelAddLocation}>
+              Cancel
+            </Button>
+          </div>
+        {/if}
+        {#if locationError}
+          <div class="meta-error">{locationError}</div>
+        {/if}
+        {#if artifact.locations.length === 0}
+          {#if !addingLocation}
+            <div class="empty-section">No locations</div>
+          {/if}
+        {:else}
+          <div class="locations">
+            {#each locations as group (group.user.did)}
+              <div class="location-group">
+                <div class="location-node">
+                  <NodeId {...authorForNodeId(group.user)} />
+                  {#if delegateIds.has(group.user.did)}
+                    <DelegateBadge tooltip="Location added by a delegate" />
+                  {/if}
+                </div>
+                {#each group.urls as url (url)}
+                  <div class="meta-row">
+                    <span class="location-url">
+                      <Id
+                        id={url}
+                        clipboard={url}
+                        label="location URL"
+                        shorten={false} />
+                    </span>
+                    {#if group.user.did === ownDid}
+                      <span class="meta-actions">
+                        <Popover placement="bottom-end" popoverPadding="0">
+                          {#snippet toggle(onclick)}
+                            <Button
+                              variant="naked"
+                              styleHeight="1.5rem"
+                              title="Remove location"
+                              disabled={savingLocation}
+                              {onclick}>
+                              <Icon name="trash" />
+                            </Button>
+                          {/snippet}
+                          {#snippet popover()}
+                            <!-- Withdrawing your own endpoint also unseeds, as in Unseed. -->
+                            {@const unseeds =
+                              url.startsWith("radiroh:") && seeding}
+                            {@const busy = savingLocation || unseeding}
+                            <div class="confirm-remove">
+                              <div class="confirm-remove-text">
+                                <div class="txt-body-m-medium">
+                                  {unseeds
+                                    ? "Unseed this artifact?"
+                                    : "Remove this location?"}
+                                </div>
+                                <div
+                                  class="confirm-remove-note txt-body-m-regular">
+                                  {#if unseeds}
+                                    This is your node's location. Removing it
+                                    also unseeds it from your node seeding the
+                                    artifact.
+                                  {:else}
+                                    Peers stop downloading the artifact from it.
+                                  {/if}
+                                </div>
+                              </div>
+                              <div class="confirm-remove-actions">
+                                <Button
+                                  variant="outline"
+                                  disabled={busy}
+                                  onclick={closeFocused}>
+                                  Cancel
+                                </Button>
+                                <button
+                                  type="button"
+                                  class="confirm-remove-button txt-body-m-medium"
+                                  disabled={busy}
+                                  onclick={async () => {
+                                    if (unseeds) {
+                                      await stopSeeding();
+                                      closeFocused();
+                                    } else {
+                                      await removeLocation(url);
+                                    }
+                                  }}>
+                                  <Icon name="trash" />
+                                  {#if unseeds}
+                                    {busy ? "Unseeding…" : "Unseed"}
+                                  {:else}
+                                    {busy ? "Removing…" : "Remove"}
+                                  {/if}
+                                </button>
+                              </div>
+                            </div>
+                          {/snippet}
+                        </Popover>
+                      </span>
+                    {/if}
+                  </div>
+                {/each}
+              </div>
+            {/each}
+          </div>
+        {/if}
+      </div>
+    </div>
+  {/if}
+</div>
diff --git a/src/components/UntrustedWarning.svelte b/src/components/UntrustedWarning.svelte
new file mode 100644
index 000000000..b3efcbb9c
--- /dev/null
+++ b/src/components/UntrustedWarning.svelte
@@ -0,0 +1,29 @@
+<script lang="ts">
+  import Icon from "@app/components/Icon.svelte";
+
+  interface Props {
+    text: string;
+  }
+
+  const { text }: Props = $props();
+</script>
+
+<style>
+  .banner {
+    display: flex;
+    align-items: center;
+    gap: 0.375rem;
+    color: var(--color-text-secondary);
+    font: var(--txt-body-s-regular);
+  }
+  .icon {
+    display: flex;
+    flex-shrink: 0;
+    color: var(--color-feedback-warning-text);
+  }
+</style>
+
+<div class="banner" role="note">
+  <span class="icon"><Icon name="warning" /></span>
+  <span>{text}</span>
+</div>
diff --git a/src/lib/releases.ts b/src/lib/releases.ts
index 0ca162502..50eda0ef9 100644
--- a/src/lib/releases.ts
+++ b/src/lib/releases.ts
@@ -22,18 +22,12 @@ export function releaseListScope(
 export interface ArtifactView {
   scope: ReleaseScope;
   shown: Artifact[];
-  // Redacted artifacts within the current author scope.
   redactedCount: number;
-  // What each scope would show, so an artifact hidden as redacted never
-  // counts towards a scope.
   counts: Record<ReleaseScope, number>;
-  // Filter only when both scopes hold something.
   showFilters: boolean;
 }
 
-// Split a release's artifacts into two disjoint scopes by author. Show the
-// scope asked for unless it is empty, and hide artifacts redacted by their
-// author or a delegate unless asked to show them.
+// Falls back to the other scope when the one asked for is empty.
 export function artifactView(
   artifacts: Artifact[],
   delegates: Set<string>,
@@ -70,7 +64,6 @@ export function redactedByDelegate(
   return artifact.redactions.some(r => delegates.has(r.user.did));
 }
 
-// Group locations by the contributing node, preserving order.
 export function locationsByNode(
   locations: Location[],
 ): { user: Author; urls: string[] }[] {
@@ -83,9 +76,7 @@ export function locationsByNode(
   return [...groups.values()];
 }
 
-// Order a node-keyed list so delegates come first. The backend returns these
-// sorted by DID (arbitrary to a reader); sort is stable, so the original
-// order is preserved within each group.
+// The backend sorts by DID, which means nothing to a reader.
 export function delegatesFirst<T>(
   items: T[],
   did: (item: T) => string,
@@ -96,9 +87,6 @@ export function delegatesFirst<T>(
   );
 }
 
-// Locations a browser can open, as opposed to ones fetched from a seeder
-// over the radicle-artifact protocol. Delegate locations come first: they
-// are the ones a reader can trust most.
 export function webLocations(
   locations: Location[],
   delegates: Set<string>,
@@ -119,8 +107,6 @@ export function attestedBy(
   return attestations.filter(a => delegates.has(a.did)).length;
 }
 
-// Only metadata by the author or a delegate is shown, so only they get an
-// editor.
 export function canEditMetadata(
   artifact: Artifact,
   ownDid: string,
@@ -140,9 +126,7 @@ export function canAttest(artifact: Artifact, ownDid: string): boolean {
   );
 }
 
-// The COB stores values as free-form JSON. Text that parses as JSON is sent
-// as that value, so numbers and booleans round-trip; anything else is sent
-// as a plain string.
+// Text that parses as JSON is sent as that value, so numbers round-trip.
 export function parseMetadataValue(input: string): unknown {
   try {
     return JSON.parse(input);
@@ -155,8 +139,6 @@ export function displayMetadataValue(value: unknown): string {
   return typeof value === "string" ? value : JSON.stringify(value);
 }
 
-// Commits whose SHA starts with, or whose summary contains, the query. A
-// pasted commit outside the loaded history still shows as a choice.
 export function matchCommits(
   commits: Commit[],
   query: string,
@@ -179,3 +161,16 @@ export function canonicalTags(refs: RepoRefs): { name: string; tag: Tag }[] {
     .map(([name, tag]) => ({ name, tag }))
     .sort((a, b) => b.tag.timestamp - a.tag.timestamp);
 }
+
+// A release by a non-delegate is untrusted as a whole. On a delegate's
+// release, only the artifacts registered by others are.
+export function releaseWarning(
+  creatorDid: string,
+  delegates: Set<string>,
+  artifactScope: ReleaseScope,
+): "release" | "artifacts" | undefined {
+  if (!delegates.has(creatorDid)) {
+    return "release";
+  }
+  return artifactScope === "untrusted" ? "artifacts" : undefined;
+}
diff --git a/src/views/repo/Release.svelte b/src/views/repo/Release.svelte
index 4a6598770..5b3b40307 100644
--- a/src/views/repo/Release.svelte
+++ b/src/views/repo/Release.svelte
@@ -1,56 +1,32 @@
 <script lang="ts">
-  import type { Author } from "@bindings/cob/Author";
-  import type { Artifact } from "@bindings/cob/release/Artifact";
   import type { ArtifactDigest } from "@bindings/cob/release/ArtifactDigest";
   import type { Release } from "@bindings/cob/release/Release";
   import type { ReleaseScope } from "@bindings/cob/release/ReleaseScope";
   import type { Config } from "@bindings/config/Config";
   import type { RepoInfo } from "@bindings/repo/RepoInfo";
 
-  import { slide } from "svelte/transition";
-
-  import { pickFiles, pickFolder, pickLike } from "@app/lib/artifactPickers";
+  import { pickFiles, pickFolder } from "@app/lib/artifactPickers";
   import { basename } from "@app/lib/embeds";
-  import { artifactNodeRunning } from "@app/lib/events";
-  import { invoke, InvokeError } from "@app/lib/invoke";
+  import { invoke } from "@app/lib/invoke";
   import { show } from "@app/lib/modal";
-  import {
-    artifactView,
-    attestedBy,
-    canAttest,
-    canEditMetadata,
-    delegatesFirst,
-    displayMetadataValue,
-    locationsByNode,
-    parseMetadataValue,
-    redactedByDelegate,
-  } from "@app/lib/releases";
+  import { artifactView, releaseWarning } from "@app/lib/releases";
   import * as router from "@app/lib/router";
   import type { Picked, StagedArtifact } from "@app/lib/stageArtifacts";
   import { effective, stageArtifacts } from "@app/lib/stageArtifacts";
-  import {
-    authorForNodeId,
-    didFromPublicKey,
-    formatBytes,
-    shortenCids,
-  } from "@app/lib/utils";
+  import { didFromPublicKey, shortenCids } from "@app/lib/utils";
 
-  import ArtifactDownloadButton from "@app/components/ArtifactDownloadButton.svelte";
+  import ArtifactRow from "@app/components/ArtifactRow.svelte";
   import Button from "@app/components/Button.svelte";
-  import DelegateBadge from "@app/components/DelegateBadge.svelte";
   import Icon from "@app/components/Icon.svelte";
   import Id from "@app/components/Id.svelte";
   import InlineTitle from "@app/components/InlineTitle.svelte";
-  import NodeId from "@app/components/NodeId.svelte";
   import Popover, { closeFocused } from "@app/components/Popover.svelte";
   import ReleaseMetadata from "@app/components/ReleaseMetadata.svelte";
   import ScrollArea from "@app/components/ScrollArea.svelte";
   import ShareButton from "@app/components/ShareButton.svelte";
-  import TextInput from "@app/components/TextInput.svelte";
   import Topbar from "@app/components/Topbar.svelte";
-  import YouBadge from "@app/components/YouBadge.svelte";
+  import UntrustedWarning from "@app/components/UntrustedWarning.svelte";
   import ConfirmDeleteRelease from "@app/modals/ConfirmDeleteRelease.svelte";
-  import ConfirmRedact from "@app/modals/ConfirmRedact.svelte";
   import ConfirmRegisterArtifacts from "@app/modals/ConfirmRegisterArtifacts.svelte";
 
   import Layout from "./Layout.svelte";
@@ -67,23 +43,11 @@
   let { repo, config, release, scope, artifactScope }: Props = $props();
   /* eslint-enable prefer-const */
 
-  const SIZE_KEY = "sizeBytes";
-  // An artifact COB carries no display name of its own. `title` in the metadata
-  // map is the convention for one, set by the artifact's author or a delegate,
-  // with the file name always present underneath as the fallback. Reading it
-  // from the COB rather than guessing from the file name keeps every client
-  // showing the same thing.
-  const TITLE_KEY = "title";
-
   const ownDid = $derived(didFromPublicKey(config.publicKey));
 
-  // A release COB carries no name of its own. The backend resolves one from the
-  // annotated tag's message, falling back to the commit subject; failing both,
-  // the tag name and then the release id stand in.
   const title = $derived(release.title || release.tagName || release.id);
   const delegateIds = $derived(new Set(repo.delegates.map(d => d.did)));
 
-  // An artifact redacted by its own author or a delegate is hidden by default.
   let showRedacted = $state(false);
 
   const view = $derived(
@@ -95,56 +59,23 @@
     ),
   );
 
-  function artifactSize(artifact: Artifact): string | undefined {
-    const size = artifact.metadata[SIZE_KEY];
-    return typeof size === "number" ? formatBytes(size) : undefined;
-  }
+  const warning = $derived(
+    releaseWarning(release.creator.did, delegateIds, view.scope),
+  );
+  const untrustedWarning = $derived(
+    warning === "release"
+      ? "Not from a delegate. Only download if you trust the author."
+      : warning === "artifacts"
+        ? "Not from delegates. Only download if you trust the authors."
+        : undefined,
+  );
 
-  // Metadata entries other than the size hint, shown as raw key/value pairs.
-  function otherMetadata(artifact: Artifact): [string, unknown][] {
-    return Object.entries(artifact.metadata).filter(
-      ([key]) => key !== SIZE_KEY,
-    );
-  }
-
-  function attestationLabel(attestations: Author[]): string | undefined {
-    const count = attestedBy(attestations, delegateIds);
-    if (count === 0) {
-      return undefined;
-    }
-    return `Attested by ${count} delegate${count === 1 ? "" : "s"}`;
-  }
-
-  // Computed across the artifacts actually on screen, so the shortest form
-  // that tells them apart is the one shown.
   const cidLabels = $derived(shortenCids(view.shown.map(a => a.cid)));
 
-  function artifactTitle(artifact: Artifact): string | undefined {
-    const title = artifact.metadata[TITLE_KEY];
-    return typeof title === "string" && title.trim() !== ""
-      ? title.trim()
-      : undefined;
-  }
-
-  // Which artifact cards are expanded, keyed by CID.
-  const expanded: Record<string, boolean> = $state({});
-
-  function toggleExpanded(cid: string) {
-    expanded[cid] = !expanded[cid];
-  }
-
   let registering = $state(false);
   let registerError: string | undefined = $state();
 
-  // Registering an artifact is open to any user, so this is not gated on
-  // authorship. Seeding is what makes the bytes reachable, and it needs the
-  // artifact node, so it is attempted only when the node answers: without it
-  // the artifact is registered but nobody seeds it.
-  // Hash and measure first, then ask. Registering signs a COB entry that syncs
-  // to everyone holding the repo and, with the node up, starts seeding the
-  // bytes; none of that can be withdrawn afterwards, so the last chance to
-  // change your mind has to come before it, with the sizes and file counts on
-  // screen. Picking a folder by mistake is the case worth catching.
+  // Hash and measure first, then ask: registering cannot be withdrawn.
   async function registerArtifacts(paths: string[]) {
     if (paths.length === 0) {
       return;
@@ -205,8 +136,7 @@
     let unseeded = 0;
     let seedFailures = 0;
     try {
-      // One at a time: each is its own signed COB entry, so a failure part way
-      // through leaves the earlier ones registered.
+      // One at a time, so a failure part way leaves the earlier ones registered.
       for (const item of staged) {
         const { register, seed } = effective(item, includeRedacted);
         if (register) {
@@ -282,60 +212,6 @@
     });
   }
 
-  // Seeding needs the artifact node, so the seed action is only offered while
-  // it answers.
-  const artifactNodeUp = $derived($artifactNodeRunning);
-
-  function openRedact(artifact: Artifact) {
-    show({
-      component: ConfirmRedact,
-      props: {
-        name: artifactTitle(artifact) ?? artifact.name,
-        seeding: seededCids.has(artifact.cid),
-        confirm: async (reason: string) => {
-          await invoke("redact_artifact", {
-            rid: repo.rid,
-            releaseId: release.id,
-            cid: artifact.cid,
-            reason,
-          });
-          await reload();
-          await refreshSeeded();
-        },
-      },
-    });
-  }
-
-  // Writing metadata is constrained to the artifact's author or a repository
-  // delegate, so the editor stays hidden for everyone else.
-  // The key being edited, as `<cid>\n<key>`, so two artifacts sharing a key
-  // name never open each other's editor. An empty key means a new entry.
-  let editing: string | undefined = $state();
-  let draftKey = $state("");
-  let draftValue = $state("");
-  let saving = $state(false);
-  let metadataError: string | undefined = $state();
-
-  function editorId(cid: string, key: string): string {
-    return `${cid}\n${key}`;
-  }
-
-  function startEdit(cid: string, key: string, value: unknown) {
-    editing = editorId(cid, key);
-    draftKey = key;
-    draftValue = key === "" ? "" : displayMetadataValue(value);
-    metadataError = undefined;
-  }
-
-  function cancelEdit() {
-    editing = undefined;
-    draftKey = "";
-    draftValue = "";
-    metadataError = undefined;
-  }
-
-  // Seeding lives in the node, not the COB, so it has to be asked for rather
-  // than read off the release. One call per view, matched against the rows.
   let seededCids = $state<Set<string>>(new Set());
 
   async function refreshSeeded() {
@@ -351,109 +227,9 @@
     }
   }
 
-  // Attesting means reproducing the artifact: the backend hashes a local build
-  // and signs only when it arrives at the same CID.
-  let attesting: string | undefined = $state();
-  let attestError: { cid: string; message: string } | undefined = $state();
-
-  async function attest(artifact: Artifact) {
-    const cid = artifact.cid;
-    const path = await pickLike(artifact.directory);
-    if (!path) {
-      return;
-    }
-
-    attesting = cid;
-    attestError = undefined;
-    try {
-      await invoke("attest_artifact", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid,
-        path,
-      });
-    } catch (error) {
-      attestError = {
-        cid,
-        message:
-          error instanceof InvokeError &&
-          error.code === "ArtifactError.CidMismatch"
-            ? "Your build has a different CID, so it was not attested."
-            : "Attesting failed.",
-      };
-    } finally {
-      attesting = undefined;
-      await reload();
-    }
-  }
-
-  let reseeding: string | undefined = $state();
-  let reseedError: { cid: string; message: string } | undefined = $state();
-
-  async function reseed(artifact: Artifact) {
-    const cid = artifact.cid;
-    const path = await pickLike(artifact.directory);
-    if (!path) {
-      return;
-    }
-
-    reseeding = cid;
-    reseedError = undefined;
-    try {
-      const digest = await invoke<ArtifactDigest>("compute_artifact_cid", {
-        path,
-      });
-      if (digest.cid !== cid) {
-        reseedError = {
-          cid,
-          message: "This file has a different CID, so it was not seeded.",
-        };
-        return;
-      }
-      await invoke("seed_artifact", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid,
-        sourcePath: path,
-      });
-    } catch (error) {
-      console.error("Seeding failed", error);
-      reseedError = {
-        cid,
-        message: (await invoke<boolean>("artifact_node_running").catch(
-          () => false,
-        ))
-          ? "Seeding failed."
-          : "Your artifact node is not running.",
-      };
-    } finally {
-      reseeding = undefined;
-      await refreshSeeded();
-      await reload();
-    }
-  }
-
-  // CIDs with a stop request in flight, and the last one that failed.
-  let unseeding = $state<Set<string>>(new Set());
-  let unseedFailed: string | undefined = $state();
-
-  async function stopSeeding(cid: string) {
-    unseeding = new Set([...unseeding, cid]);
-    unseedFailed = undefined;
-    try {
-      await invoke("unseed_artifact", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid,
-      });
-    } catch (error) {
-      console.error("Unseeding failed", error);
-      unseedFailed = cid;
-    } finally {
-      unseeding = new Set([...unseeding].filter(c => c !== cid));
-      await refreshSeeded();
-      await reload();
-    }
+  async function refresh() {
+    await reload();
+    await refreshSeeded();
   }
 
   $effect(() => {
@@ -477,138 +253,6 @@
       console.error("Refreshing the release failed", error);
     }
   }
-
-  // Anyone may add a location, but only withdraw the ones they added: the COB
-  // keys each location by the node that signed it.
-  let addingLocation: string | undefined = $state();
-  let draftUrl = $state("");
-  let savingLocation = $state(false);
-  let locationError: { cid: string; message: string } | undefined = $state();
-
-  function startAddLocation(cid: string) {
-    addingLocation = cid;
-    draftUrl = "";
-    locationError = undefined;
-  }
-
-  function cancelAddLocation() {
-    addingLocation = undefined;
-    draftUrl = "";
-    locationError = undefined;
-  }
-
-  async function addLocation(cid: string) {
-    const url = draftUrl.trim();
-    if (url === "") {
-      locationError = { cid, message: "A URL is required." };
-      return;
-    }
-
-    savingLocation = true;
-    locationError = undefined;
-    try {
-      await invoke("add_artifact_location", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid,
-        url,
-      });
-      cancelAddLocation();
-      await reload();
-    } catch (error) {
-      console.error("Adding a location failed", error);
-      locationError = {
-        cid,
-        message:
-          error instanceof InvokeError &&
-          error.code === "ArtifactError.InvalidLocation"
-            ? "This is not a URL peers can fetch from."
-            : "Adding the location failed.",
-      };
-    } finally {
-      savingLocation = false;
-    }
-  }
-
-  async function removeLocation(cid: string, url: string) {
-    savingLocation = true;
-    locationError = undefined;
-    try {
-      await invoke("remove_artifact_location", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid,
-        url,
-      });
-      closeFocused();
-      await reload();
-    } catch (error) {
-      console.error("Removing a location failed", error);
-      locationError = { cid, message: "Removing the location failed." };
-    } finally {
-      savingLocation = false;
-    }
-  }
-
-  async function saveMetadata(artifact: Artifact, previousKey: string) {
-    const key = draftKey.trim();
-    if (key === "") {
-      metadataError = "A key is required.";
-      return;
-    }
-    if (key === SIZE_KEY) {
-      metadataError = `"${SIZE_KEY}" is maintained by the app.`;
-      return;
-    }
-
-    saving = true;
-    metadataError = undefined;
-    try {
-      // Renaming a key is a remove plus a set, since the COB has no rename.
-      if (previousKey !== "" && previousKey !== key) {
-        await invoke("remove_artifact_metadata", {
-          rid: repo.rid,
-          releaseId: release.id,
-          cid: artifact.cid,
-          key: previousKey,
-        });
-      }
-      await invoke("set_artifact_metadata", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid: artifact.cid,
-        key,
-        value: parseMetadataValue(draftValue),
-      });
-      cancelEdit();
-      await reload();
-    } catch (error) {
-      console.error("Saving artifact metadata failed", error);
-      metadataError = "Saving failed.";
-    } finally {
-      saving = false;
-    }
-  }
-
-  async function removeMetadata(artifact: Artifact, key: string) {
-    saving = true;
-    metadataError = undefined;
-    try {
-      await invoke("remove_artifact_metadata", {
-        rid: repo.rid,
-        releaseId: release.id,
-        cid: artifact.cid,
-        key,
-      });
-      cancelEdit();
-      await reload();
-    } catch (error) {
-      console.error("Removing artifact metadata failed", error);
-      metadataError = "Removing failed.";
-    } finally {
-      saving = false;
-    }
-  }
 </script>
 
 <style>
@@ -676,390 +320,14 @@
     border-radius: var(--border-radius-sm);
     background-color: var(--color-surface-canvas);
   }
+  .untrusted-warning {
+    margin-bottom: 1rem;
+  }
   .register-error {
     margin-bottom: 1rem;
     color: var(--color-feedback-error-text);
     font: var(--txt-body-s-regular);
   }
-  /* A file list reads better as rows than as a stack of bordered cards: the
-     release header is then the only card on the page. */
-  .artifact {
-    padding: 0.75rem 0.25rem;
-    border-bottom: 1px solid var(--color-border-subtle);
-  }
-  .artifact:first-child {
-    border-top: 1px solid var(--color-border-subtle);
-  }
-  .artifact-row {
-    display: flex;
-    align-items: center;
-    gap: 0.75rem;
-  }
-  .summary {
-    display: flex;
-    align-items: center;
-    gap: 0.5rem;
-    min-width: 0;
-    background: none;
-    border: 0;
-    padding: 0;
-    margin: 0;
-    color: inherit;
-    font: inherit;
-    text-align: left;
-    cursor: pointer;
-  }
-  .summary:hover .toggle,
-  .summary:focus-visible .toggle {
-    color: var(--color-text-primary);
-  }
-  /* One line that truncates rather than wraps: the chevron is the last item in
-     the row, so it keeps sitting against the text, and a long title shortens
-     the file name beside it instead of pushing the chevron onto its own line. */
-  .identity {
-    display: flex;
-    align-items: baseline;
-    gap: 0.5rem;
-    flex-wrap: nowrap;
-    min-width: 0;
-  }
-  /* The title is arbitrary-length prose, so it is the one that gives way. No
-     floor on its width: one held the chevron away from a short title, and the
-     60% cap on everything to its right already stops the title being squeezed
-     out. */
-  .name {
-    font: var(--txt-body-l-regular);
-    color: var(--color-text-primary);
-    white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
-    min-width: 0;
-    flex-shrink: 1;
-  }
-  /* Held at its natural width: an identifier shortened to a character or two
-     tells a reader nothing, so it keeps its own space and the title yields
-     instead. The cap stops a long file name squeezing out the title. */
-  /* Centred rather than baseline-aligned against the title: the chevron is an
-     icon box with no text baseline of its own, so on a baseline it hangs by
-     its bottom edge and rides visibly high above the title. */
-  .trailing {
-    display: inline-flex;
-    align-items: baseline;
-    align-self: center;
-    gap: 0.5rem;
-    flex-shrink: 0;
-    max-width: 60%;
-    min-width: 0;
-  }
-  .filename {
-    font: var(--txt-body-m-regular);
-    color: var(--color-text-tertiary);
-    white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
-    min-width: 0;
-  }
-  .artifact-actions {
-    display: flex;
-    align-items: center;
-    gap: 0.75rem;
-    margin-left: auto;
-    flex-shrink: 0;
-  }
-  .size {
-    font: var(--txt-body-m-regular);
-    color: var(--color-text-tertiary);
-    white-space: nowrap;
-    flex-shrink: 0;
-  }
-  /* Repeating the words "More info" down the whole list reads as noise, and
-     hiding the control until hover leaves no sign it exists. A chevron that
-     points down, then flips up, says accordion without either problem. */
-  /* Opened, the row is no longer a one-line summary, so nothing is clipped:
-     the title and file name wrap onto as many lines as they need. */
-  .identity.expanded {
-    flex-wrap: wrap;
-  }
-  .identity.expanded .trailing {
-    max-width: none;
-  }
-  .identity.expanded .name,
-  .identity.expanded .filename {
-    white-space: normal;
-    overflow: visible;
-    text-overflow: clip;
-    overflow-wrap: anywhere;
-    max-width: none;
-    min-width: 0;
-  }
-  .toggle {
-    display: inline-flex;
-    align-items: center;
-    align-self: center;
-    flex-shrink: 0;
-    color: var(--color-text-tertiary);
-    transition: transform 0.15s;
-  }
-  .toggle.open {
-    transform: rotate(180deg);
-  }
-  .artifact-meta {
-    display: flex;
-    align-items: center;
-    flex-wrap: wrap;
-    gap: 0.75rem;
-    margin-top: 0.375rem;
-    font: var(--txt-body-s-regular);
-  }
-  /* A bare hash that copies on click, with no icon of its own: one per row
-     down the list would be noise, and Id already explains itself on hover. */
-  .cid {
-    color: var(--color-text-tertiary);
-    font: var(--txt-code-small);
-  }
-  .trust {
-    display: inline-flex;
-    align-items: center;
-    gap: 0.25rem;
-    color: var(--color-foreground-success);
-    white-space: nowrap;
-  }
-  .seeding {
-    display: inline-flex;
-    align-items: center;
-    height: 1.75rem;
-    padding: 0 0.5rem;
-    border: none;
-    border-radius: var(--border-radius-sm);
-    background: none;
-    cursor: pointer;
-    font: var(--txt-body-m-regular);
-    color: var(--color-text-tertiary);
-    white-space: nowrap;
-  }
-  .seeding:hover:not(:disabled),
-  .seeding:focus-visible {
-    background: var(--color-surface-subtle);
-    color: var(--color-text-primary);
-  }
-  .seeding-label {
-    display: inline-grid;
-  }
-  .seeding-idle,
-  .seeding-stop {
-    grid-area: 1 / 1;
-    text-align: center;
-  }
-  .seeding-stop {
-    visibility: hidden;
-  }
-  .seeding:hover:not(:disabled) .seeding-idle,
-  .seeding:focus-visible .seeding-idle {
-    visibility: hidden;
-  }
-  .seeding:hover:not(:disabled) .seeding-stop,
-  .seeding:focus-visible .seeding-stop {
-    visibility: visible;
-  }
-  .unseed-error {
-    color: var(--color-foreground-red);
-  }
-  .contributor {
-    display: inline-flex;
-    align-items: center;
-    gap: 0.5rem;
-    color: var(--color-text-secondary);
-  }
-  /* A short fixed label, so it keeps its own width and never wraps: the title
-     beside it is the part that gives way. */
-  .redacted-badge {
-    display: inline-flex;
-    align-items: center;
-    gap: 0.25rem;
-    flex-shrink: 0;
-    white-space: nowrap;
-    font: var(--txt-body-s-regular);
-    color: var(--color-text-tertiary);
-    border: 1px solid var(--color-border-subtle);
-    border-radius: var(--border-radius-sm);
-    padding: 0 0.375rem;
-  }
-  .details {
-    display: flex;
-    flex-direction: column;
-    gap: 1rem;
-    margin-top: 0.75rem;
-  }
-  .section {
-    display: flex;
-    flex-direction: column;
-    gap: 0.5rem;
-    font: var(--txt-body-m-regular);
-  }
-  /* Held at the height of the buttons some of these rows carry, so a heading
-     does not jump when its button appears or goes away, and so every section
-     heading sits at the same height whether or not it has one. */
-  .section-title {
-    display: flex;
-    align-items: center;
-    min-height: 1.5rem;
-    gap: 0.5rem;
-    font: var(--txt-body-s-medium);
-    color: var(--color-text-secondary);
-  }
-  .section-count {
-    color: var(--color-text-tertiary);
-    font: var(--txt-body-s-regular);
-  }
-  .empty-section {
-    color: var(--color-text-tertiary);
-  }
-  .people {
-    display: flex;
-    flex-direction: column;
-    gap: 0.5rem;
-  }
-  .person {
-    display: flex;
-    align-items: center;
-    gap: 0.5rem;
-    color: var(--color-foreground-success);
-  }
-  .meta-row {
-    display: flex;
-    align-items: center;
-    gap: 0.5rem;
-    min-width: 0;
-    width: fit-content;
-    max-width: 100%;
-  }
-  .meta-key {
-    color: var(--color-text-tertiary);
-    flex-shrink: 0;
-  }
-  .meta-value {
-    word-break: break-word;
-    min-width: 0;
-  }
-  .meta-actions {
-    display: inline-flex;
-    align-items: center;
-    gap: 0.25rem;
-    opacity: 0;
-  }
-  .meta-row:hover .meta-actions,
-  .meta-row:focus-within .meta-actions {
-    opacity: 1;
-  }
-  .meta-editor {
-    display: flex;
-    align-items: center;
-    gap: 0.5rem;
-    flex-wrap: wrap;
-  }
-  /* Metadata keys and values are short; full-width inputs across the card
-     overstate how much is meant to go in them. */
-  .key-field {
-    width: 9rem;
-    flex-shrink: 0;
-  }
-  .value-field {
-    width: 16rem;
-    max-width: 100%;
-  }
-  .meta-error {
-    color: var(--color-feedback-error-text);
-    font: var(--txt-body-s-regular);
-  }
-  /* Matches the patch delete prompt, scaled down for a single entry. */
-  .confirm-remove {
-    display: flex;
-    flex-direction: column;
-    gap: 0.75rem;
-    padding: 0.75rem;
-    min-width: 15rem;
-    max-width: 22rem;
-    border: 1px solid var(--color-border-subtle);
-    border-radius: var(--border-radius-sm);
-    background-color: var(--color-surface-canvas);
-  }
-  .confirm-remove-text {
-    display: flex;
-    flex-direction: column;
-    gap: 0.5rem;
-    color: var(--color-text-primary);
-  }
-  .confirm-remove-note {
-    color: var(--color-text-secondary);
-  }
-  .confirm-remove-actions {
-    display: flex;
-    justify-content: flex-end;
-    gap: 0.5rem;
-  }
-  .confirm-remove-button {
-    display: inline-flex;
-    align-items: center;
-    gap: 0.5rem;
-    height: 2rem;
-    padding: 0 0.75rem;
-    border: 0;
-    border-radius: var(--border-radius-sm);
-    background-color: var(--color-feedback-error-fill);
-    color: var(--color-text-on-brand);
-    cursor: pointer;
-    transition: background-color 0.1s ease;
-  }
-  .confirm-remove-button:hover:not(:disabled),
-  .confirm-remove-button:focus-visible:not(:disabled) {
-    background-color: var(--color-feedback-error-fill-hover);
-  }
-  .confirm-remove-button:disabled {
-    cursor: default;
-    opacity: 0.6;
-  }
-  /* The enclosing .section already spaces a heading from its body, so these
-     carry no margin of their own: with one they sat 8px lower than the empty
-     states in the sections above them. */
-  .locations,
-  .redactions {
-    display: flex;
-    flex-direction: column;
-    gap: 0.5rem;
-    font: var(--txt-body-m-regular);
-  }
-  .location-group {
-    display: flex;
-    flex-direction: column;
-    gap: 0.25rem;
-    min-width: 0;
-  }
-  .location-node {
-    display: flex;
-    align-items: center;
-    gap: 0.5rem;
-  }
-  .location-url {
-    color: var(--color-text-secondary);
-    word-break: break-all;
-  }
-  .url-field {
-    width: 24rem;
-    max-width: 100%;
-  }
-  /* The section heading already says these are redactions, so the row carries
-     no warning icon and no alarm colour: it is a record of who did what. */
-  .redaction {
-    display: flex;
-    align-items: center;
-    flex-wrap: wrap;
-    gap: 0.5rem;
-    color: var(--color-text-secondary);
-  }
-  .reason {
-    color: var(--color-text-tertiary);
-    word-break: break-word;
-  }
   .empty-artifacts {
     display: flex;
     flex-direction: column;
@@ -1217,6 +485,12 @@
           </div>
         {/if}
 
+        {#if untrustedWarning}
+          <div class="untrusted-warning">
+            <UntrustedWarning text={untrustedWarning} />
+          </div>
+        {/if}
+
         {#if registerError}
           <div class="register-error">{registerError}</div>
         {/if}
@@ -1230,534 +504,15 @@
 
         <div class="artifact-list">
           {#each view.shown as artifact (artifact.cid)}
-            {@const size = artifactSize(artifact)}
-            {@const locations = delegatesFirst(
-              locationsByNode(artifact.locations),
-              g => g.user.did,
-              delegateIds,
-            )}
-            {@const metadata = otherMetadata(artifact)}
-            {@const locationCount = artifact.locations.length}
-            {@const redactions = delegatesFirst(
-              artifact.redactions,
-              r => r.user.did,
-              delegateIds,
-            )}
-            {@const attestations = delegatesFirst(
-              artifact.attestations,
-              n => n.did,
-              delegateIds,
-            )}
-            {@const isOpen = expanded[artifact.cid] === true}
-            {@const editable = canEditMetadata(artifact, ownDid, delegateIds)}
-            {@const artifactName = artifactTitle(artifact)}
-            {@const trust = attestationLabel(attestations)}
-            <div class="artifact">
-              <div class="artifact-row">
-                <!-- The whole title is the disclosure, with the chevron as its
-                     indicator, so the hit target matches what a reader would
-                     aim at. -->
-                <button
-                  type="button"
-                  class="summary"
-                  aria-expanded={isOpen}
-                  title={isOpen ? "Hide details" : "Show details"}
-                  onclick={() => toggleExpanded(artifact.cid)}>
-                  <span class="identity" class:expanded={isOpen}>
-                    <span class="name">{artifactName ?? artifact.name}</span>
-                    <!-- One unit, so a line break can never leave the chevron
-                         stranded on a line of its own. -->
-                    <span class="trailing">
-                      {#if artifactName}
-                        <span class="filename">{artifact.name}</span>
-                      {/if}
-                      {#if artifact.redacted}
-                        <span class="redacted-badge">
-                          {redactedByDelegate(artifact, delegateIds)
-                            ? "Redacted by delegate"
-                            : "Redacted by author"}
-                        </span>
-                      {/if}
-                      <span class="toggle" class:open={isOpen}>
-                        <Icon name="chevron-down" />
-                      </span>
-                    </span>
-                  </span>
-                </button>
-                {#if size}
-                  <span class="size">{size}</span>
-                {/if}
-                <div class="artifact-actions">
-                  {#if seededCids.has(artifact.cid)}
-                    <button
-                      class="seeding"
-                      disabled={unseeding.has(artifact.cid)}
-                      title="Your node is seeding this artifact. Click to unseed."
-                      onclick={() => stopSeeding(artifact.cid)}>
-                      {#if unseeding.has(artifact.cid)}
-                        Unseeding…
-                      {:else}
-                        <span class="seeding-label">
-                          <span class="seeding-idle">Seeding</span>
-                          <span class="seeding-stop">Unseed</span>
-                        </span>
-                      {/if}
-                    </button>
-                  {:else if !artifact.redacted}
-                    <Button
-                      variant="naked"
-                      styleHeight="1.75rem"
-                      disabled={reseeding === artifact.cid ||
-                        artifactNodeUp === false}
-                      title={artifactNodeUp === false
-                        ? "Your artifact node is not running"
-                        : "Seed your own copy so others can download it"}
-                      onclick={() => reseed(artifact)}>
-                      {reseeding === artifact.cid ? "Seeding…" : "Seed"}
-                    </Button>
-                  {/if}
-                  <ArtifactDownloadButton
-                    {artifact}
-                    {delegateIds}
-                    seeding={seededCids.has(artifact.cid)}
-                    onDownloaded={refreshSeeded}
-                    releaseId={release.id}
-                    rid={repo.rid} />
-                </div>
-              </div>
-
-              <div class="artifact-meta">
-                <span class="cid">
-                  <Id
-                    id={cidLabels.get(artifact.cid) ?? artifact.cid}
-                    clipboard={artifact.cid}
-                    label="CID"
-                    shorten={false} />
-                </span>
-                <span class="contributor">
-                  <NodeId {...authorForNodeId(artifact.author)} />
-                  {#if delegateIds.has(artifact.author.did)}
-                    <DelegateBadge />
-                  {:else if artifact.author.did === ownDid}
-                    <YouBadge />
-                  {/if}
-                </span>
-                {#if trust}
-                  <span class="trust">
-                    <Icon name="checkmark" />
-                    {trust}
-                  </span>
-                {/if}
-                {#if reseedError?.cid === artifact.cid}
-                  <span class="unseed-error">{reseedError.message}</span>
-                {/if}
-                {#if unseedFailed === artifact.cid}
-                  <span class="unseed-error">Could not unseed.</span>
-                {/if}
-              </div>
-
-              {#if isOpen}
-                <div class="details" transition:slide={{ duration: 180 }}>
-                  <div class="section">
-                    <div class="section-title">
-                      Metadata
-                      <span class="section-count">{metadata.length}</span>
-                      {#if editable && editing !== editorId(artifact.cid, "")}
-                        <Button
-                          variant="naked"
-                          styleHeight="1.5rem"
-                          disabled={saving}
-                          onclick={() =>
-                            startEdit(artifact.cid, "", undefined)}>
-                          <Icon name="plus" />Add
-                        </Button>
-                      {/if}
-                    </div>
-
-                    {#if metadata.length === 0 && editing !== editorId(artifact.cid, "")}
-                      <div class="empty-section">No metadata</div>
-                    {/if}
-
-                    {#each metadata as [key, value] (key)}
-                      {#if editing === editorId(artifact.cid, key)}
-                        <div class="meta-editor">
-                          <span class="key-field">
-                            <TextInput
-                              bind:value={draftKey}
-                              placeholder="Key"
-                              styleHeight="1.75rem"
-                              disabled={saving} />
-                          </span>
-                          <span class="value-field">
-                            <TextInput
-                              bind:value={draftValue}
-                              placeholder="Value"
-                              styleHeight="1.75rem"
-                              disabled={saving}
-                              onSubmit={() => saveMetadata(artifact, key)} />
-                          </span>
-                          <Button
-                            variant="secondary"
-                            styleHeight="1.75rem"
-                            disabled={saving}
-                            onclick={() => saveMetadata(artifact, key)}>
-                            Save
-                          </Button>
-                          <Button
-                            variant="naked"
-                            styleHeight="1.75rem"
-                            disabled={saving}
-                            onclick={cancelEdit}>
-                            Cancel
-                          </Button>
-                        </div>
-                      {:else}
-                        <div class="meta-row">
-                          <span class="meta-key">{key}</span>
-                          <span class="meta-value">
-                            {displayMetadataValue(value)}
-                          </span>
-                          {#if editable}
-                            <span class="meta-actions">
-                              <Button
-                                variant="naked"
-                                styleHeight="1.5rem"
-                                title="Edit"
-                                disabled={saving}
-                                onclick={() =>
-                                  startEdit(artifact.cid, key, value)}>
-                                <Icon name="edit" />
-                              </Button>
-                              <Popover
-                                placement="bottom-end"
-                                popoverPadding="0">
-                                {#snippet toggle(onclick)}
-                                  <Button
-                                    variant="naked"
-                                    styleHeight="1.5rem"
-                                    title="Remove"
-                                    disabled={saving}
-                                    {onclick}>
-                                    <Icon name="trash" />
-                                  </Button>
-                                {/snippet}
-                                {#snippet popover()}
-                                  <div class="confirm-remove">
-                                    <div class="confirm-remove-text">
-                                      <div class="txt-body-m-medium">
-                                        Remove "{key}"?
-                                      </div>
-                                      <div
-                                        class="confirm-remove-note txt-body-m-regular">
-                                        The entry is dropped from the release
-                                        for everyone who replicates it. You can
-                                        set it again afterwards.
-                                      </div>
-                                    </div>
-                                    <div class="confirm-remove-actions">
-                                      <Button
-                                        variant="outline"
-                                        disabled={saving}
-                                        onclick={closeFocused}>
-                                        Cancel
-                                      </Button>
-                                      <button
-                                        type="button"
-                                        class="confirm-remove-button txt-body-m-medium"
-                                        disabled={saving}
-                                        onclick={() =>
-                                          removeMetadata(artifact, key)}>
-                                        <Icon name="trash" />
-                                        {saving ? "Removing…" : "Remove"}
-                                      </button>
-                                    </div>
-                                  </div>
-                                {/snippet}
-                              </Popover>
-                            </span>
-                          {/if}
-                        </div>
-                      {/if}
-                    {/each}
-
-                    {#if editing === editorId(artifact.cid, "")}
-                      <div class="meta-editor">
-                        <span class="key-field">
-                          <TextInput
-                            bind:value={draftKey}
-                            placeholder="Key"
-                            autofocus
-                            styleHeight="1.75rem"
-                            disabled={saving} />
-                        </span>
-                        <span class="value-field">
-                          <TextInput
-                            bind:value={draftValue}
-                            placeholder="Value"
-                            styleHeight="1.75rem"
-                            disabled={saving}
-                            onSubmit={() => saveMetadata(artifact, "")} />
-                        </span>
-                        <Button
-                          variant="secondary"
-                          styleHeight="1.75rem"
-                          disabled={saving}
-                          onclick={() => saveMetadata(artifact, "")}>
-                          Save
-                        </Button>
-                        <Button
-                          variant="naked"
-                          styleHeight="1.75rem"
-                          disabled={saving}
-                          onclick={cancelEdit}>
-                          Cancel
-                        </Button>
-                      </div>
-                    {/if}
-
-                    {#if metadataError}
-                      <div class="meta-error">{metadataError}</div>
-                    {/if}
-                  </div>
-
-                  <div class="section">
-                    <div class="section-title">
-                      Attestations
-                      <span class="section-count">{attestations.length}</span>
-                      {#if canAttest(artifact, ownDid)}
-                        <Button
-                          variant="naked"
-                          styleHeight="1.5rem"
-                          disabled={attesting === artifact.cid}
-                          title="Attest that your own build has the same CID"
-                          onclick={() => attest(artifact)}>
-                          <Icon name="checkmark" />
-                          {attesting === artifact.cid ? "Attesting…" : "Attest"}
-                        </Button>
-                      {/if}
-                    </div>
-                    {#if attestError?.cid === artifact.cid}
-                      <div class="meta-error">{attestError.message}</div>
-                    {/if}
-                    {#if attestations.length === 0}
-                      <div class="empty-section">
-                        Nobody has attested to this artifact
-                      </div>
-                    {:else}
-                      <div class="people">
-                        {#each attestations as node (node.did)}
-                          <div class="person">
-                            <Icon name="checkmark" />
-                            <NodeId {...authorForNodeId(node)} />
-                            {#if delegateIds.has(node.did)}
-                              <DelegateBadge tooltip="Attested by a delegate" />
-                            {/if}
-                          </div>
-                        {/each}
-                      </div>
-                    {/if}
-                  </div>
-
-                  <div class="section">
-                    <div class="section-title">
-                      Redactions
-                      <span class="section-count">{redactions.length}</span>
-                      <!-- Offered only to the artifact's author and delegates.
-                           Anyone may redact, but only those two hide it from
-                           the release; for everyone else it would burn their
-                           own ability to attest and change nothing on screen.
-                           Hidden once this node has redacted, since a second
-                           one only rewrites the reason. -->
-                      {#if canEditMetadata(artifact, ownDid, delegateIds) && !redactions.some(r => r.user.did === ownDid)}
-                        <Button
-                          variant="naked"
-                          styleHeight="1.5rem"
-                          onclick={() => openRedact(artifact)}>
-                          <Icon name="warning" />Redact
-                        </Button>
-                      {/if}
-                    </div>
-                    {#if redactions.length === 0}
-                      <div class="empty-section">No redactions</div>
-                    {:else}
-                      <div class="redactions">
-                        {#each redactions as redaction (redaction.user.did)}
-                          <div class="redaction">
-                            <NodeId {...authorForNodeId(redaction.user)} />
-                            {#if delegateIds.has(redaction.user.did)}
-                              <DelegateBadge tooltip="Redacted by a delegate" />
-                            {/if}
-                            <span class="reason">
-                              {redaction.reason || "No reason"}
-                            </span>
-                          </div>
-                        {/each}
-                      </div>
-                    {/if}
-                  </div>
-
-                  <div class="section">
-                    <div class="section-title">
-                      Locations
-                      <span class="section-count">{locationCount}</span>
-                      {#if !artifact.redacted && addingLocation !== artifact.cid}
-                        <Button
-                          variant="naked"
-                          styleHeight="1.5rem"
-                          disabled={savingLocation}
-                          title="Add a URL others can download this artifact from"
-                          onclick={() => startAddLocation(artifact.cid)}>
-                          <Icon name="plus" />Add
-                        </Button>
-                      {/if}
-                    </div>
-                    {#if addingLocation === artifact.cid}
-                      <div class="meta-editor">
-                        <span class="url-field">
-                          <TextInput
-                            bind:value={draftUrl}
-                            placeholder="https://…"
-                            autofocus
-                            styleHeight="1.75rem"
-                            disabled={savingLocation}
-                            onDismiss={cancelAddLocation}
-                            onSubmit={() => addLocation(artifact.cid)} />
-                        </span>
-                        <Button
-                          variant="secondary"
-                          styleHeight="1.75rem"
-                          disabled={savingLocation}
-                          onclick={() => addLocation(artifact.cid)}>
-                          Save
-                        </Button>
-                        <Button
-                          variant="naked"
-                          styleHeight="1.75rem"
-                          disabled={savingLocation}
-                          onclick={cancelAddLocation}>
-                          Cancel
-                        </Button>
-                      </div>
-                    {/if}
-                    {#if locationError?.cid === artifact.cid}
-                      <div class="meta-error">{locationError.message}</div>
-                    {/if}
-                    {#if locationCount === 0}
-                      {#if addingLocation !== artifact.cid}
-                        <div class="empty-section">No locations</div>
-                      {/if}
-                    {:else}
-                      <div class="locations">
-                        {#each locations as group (group.user.did)}
-                          <div class="location-group">
-                            <div class="location-node">
-                              <NodeId {...authorForNodeId(group.user)} />
-                              {#if delegateIds.has(group.user.did)}
-                                <DelegateBadge
-                                  tooltip="Location added by a delegate" />
-                              {/if}
-                            </div>
-                            {#each group.urls as url (url)}
-                              <div class="meta-row">
-                                <span class="location-url">
-                                  <Id
-                                    id={url}
-                                    clipboard={url}
-                                    label="location URL"
-                                    shorten={false} />
-                                </span>
-                                {#if group.user.did === ownDid}
-                                  <span class="meta-actions">
-                                    <Popover
-                                      placement="bottom-end"
-                                      popoverPadding="0">
-                                      {#snippet toggle(onclick)}
-                                        <Button
-                                          variant="naked"
-                                          styleHeight="1.5rem"
-                                          title="Remove location"
-                                          disabled={savingLocation}
-                                          {onclick}>
-                                          <Icon name="trash" />
-                                        </Button>
-                                      {/snippet}
-                                      {#snippet popover()}
-                                        <!-- Withdrawing the node's own endpoint
-                                             while it still seeds would leave a
-                                             tag nobody can find, so the two go
-                                             together, as in Unseed. -->
-                                        {@const seeding =
-                                          url.startsWith("radiroh:") &&
-                                          seededCids.has(artifact.cid)}
-                                        {@const busy =
-                                          savingLocation ||
-                                          unseeding.has(artifact.cid)}
-                                        <div class="confirm-remove">
-                                          <div class="confirm-remove-text">
-                                            <div class="txt-body-m-medium">
-                                              {seeding
-                                                ? "Unseed this artifact?"
-                                                : "Remove this location?"}
-                                            </div>
-                                            <div
-                                              class="confirm-remove-note txt-body-m-regular">
-                                              {#if seeding}
-                                                This is your node's location.
-                                                Removing it also unseeds it from
-                                                your node seeding the artifact.
-                                              {:else}
-                                                Peers stop downloading the
-                                                artifact from it.
-                                              {/if}
-                                            </div>
-                                          </div>
-                                          <div class="confirm-remove-actions">
-                                            <Button
-                                              variant="outline"
-                                              disabled={busy}
-                                              onclick={closeFocused}>
-                                              Cancel
-                                            </Button>
-                                            <button
-                                              type="button"
-                                              class="confirm-remove-button txt-body-m-medium"
-                                              disabled={busy}
-                                              onclick={async () => {
-                                                if (seeding) {
-                                                  await stopSeeding(
-                                                    artifact.cid,
-                                                  );
-                                                  closeFocused();
-                                                } else {
-                                                  await removeLocation(
-                                                    artifact.cid,
-                                                    url,
-                                                  );
-                                                }
-                                              }}>
-                                              <Icon name="trash" />
-                                              {#if seeding}
-                                                {busy ? "Unseeding…" : "Unseed"}
-                                              {:else}
-                                                {busy ? "Removing…" : "Remove"}
-                                              {/if}
-                                            </button>
-                                          </div>
-                                        </div>
-                                      {/snippet}
-                                    </Popover>
-                                  </span>
-                                {/if}
-                              </div>
-                            {/each}
-                          </div>
-                        {/each}
-                      </div>
-                    {/if}
-                  </div>
-                </div>
-              {/if}
-            </div>
+            <ArtifactRow
+              {artifact}
+              rid={repo.rid}
+              releaseId={release.id}
+              {ownDid}
+              {delegateIds}
+              cidLabel={cidLabels.get(artifact.cid) ?? artifact.cid}
+              seeding={seededCids.has(artifact.cid)}
+              onChange={refresh} />
           {/each}
         </div>
       </div>
diff --git a/src/views/repo/Releases.svelte b/src/views/repo/Releases.svelte
index 4542de6ce..1ee02bfc9 100644
--- a/src/views/repo/Releases.svelte
+++ b/src/views/repo/Releases.svelte
@@ -17,6 +17,7 @@
   import ReleaseTeaser from "@app/components/ReleaseTeaser.svelte";
   import ScrollArea from "@app/components/ScrollArea.svelte";
   import Topbar from "@app/components/Topbar.svelte";
+  import UntrustedWarning from "@app/components/UntrustedWarning.svelte";
   import VirtualList from "@app/components/VirtualList.svelte";
   import CreateReleaseModal from "@app/modals/CreateRelease.svelte";
 
@@ -85,6 +86,10 @@
   .filter .global-counter-badge {
     margin-left: 0.25rem;
   }
+  .warning {
+    padding: 0.75rem 1rem;
+    border-bottom: 1px solid var(--color-border-subtle);
+  }
   .row {
     border-bottom: 1px solid var(--color-border-subtle);
   }
@@ -158,6 +163,12 @@
         </div>
       </div>
     {:else}
+      {#if scope === "untrusted"}
+        <div class="warning">
+          <UntrustedWarning
+            text="Not from delegates. Only download from authors you trust." />
+        </div>
+      {/if}
       <ScrollArea style="height: 100%; min-width: 0;">
         <VirtualList
           items={list.items}
diff --git a/tests/e2e/repo/createRelease.spec.ts b/tests/e2e/repo/createRelease.spec.ts
index 5c9bc4348..22866c10a 100644
--- a/tests/e2e/repo/createRelease.spec.ts
+++ b/tests/e2e/repo/createRelease.spec.ts
@@ -17,6 +17,8 @@ import {
   useBackend,
 } from "@tests/support/fixtures.js";
 
+const OTHER_DID = "did:key:z6MkkfM3tPXNPrPevKr3uSiQtHPuwnNhu2yUVjgd2jXVsVz5";
+
 test("the commit picker lists commits and rejects unknown SHAs", async ({
   page,
   peer,
@@ -222,9 +224,7 @@ test("a location added by someone else cannot be removed", async ({
     const release = await (await route.fetch()).json();
     for (const artifact of release.artifacts) {
       artifact.locations.push({
-        user: {
-          did: "did:key:z6MkkfM3tPXNPrPevKr3uSiQtHPuwnNhu2yUVjgd2jXVsVz5",
-        },
+        user: { did: OTHER_DID },
         url,
       });
     }
@@ -270,6 +270,83 @@ test("removing your node's location while seeding stops seeding", async ({
   expect((await unseed).postDataJSON()).toMatchObject({ releaseId, cid });
 });
 
+test("a release by a non-delegate shows a warning", async ({ page, peer }) => {
+  const rid = await fillRelease(page, peer);
+  await page.getByRole("button", { name: "Create release" }).click();
+  await expect(page).toHaveURL(new RegExp(`/repos/${rid}/releases/\\w+`));
+  await expect(page.getByRole("note")).toBeHidden();
+
+  await page.route(/\/release_by_id$/, async route => {
+    const release = await (await route.fetch()).json();
+    release.creator.did = OTHER_DID;
+    await route.fulfill({ json: release });
+  });
+  await reload(page);
+
+  await expect(
+    page.getByRole("note").getByText("Not from a delegate."),
+  ).toBeVisible();
+});
+
+test("an artifact by a non-delegate shows a warning", async ({
+  page,
+  peer,
+}) => {
+  const rid = await fillRelease(page, peer);
+  await page.getByRole("button", { name: "Create release" }).click();
+  await expect(page).toHaveURL(new RegExp(`/repos/${rid}/releases/\\w+`));
+
+  // A location makes the download button usable.
+  await page.route(/\/release_by_id$/, async route => {
+    const release = await (await route.fetch()).json();
+    for (const artifact of release.artifacts) {
+      artifact.author.did = OTHER_DID;
+      artifact.locations.push({
+        user: { did: OTHER_DID },
+        url: "https://example.com/theirs.tar",
+      });
+    }
+    await route.fulfill({ json: release });
+  });
+  await reload(page);
+
+  await expect(
+    page.getByRole("note").getByText("Not from delegates."),
+  ).toBeVisible();
+  await page.getByRole("button", { name: "icon-download Download" }).click();
+  await expect(page.getByText("Not from a delegate.")).toBeVisible();
+});
+
+test("a link by a non-delegate on a delegate's artifact shows a warning", async ({
+  page,
+  peer,
+}) => {
+  const rid = await fillRelease(page, peer);
+  await page.getByRole("button", { name: "Create release" }).click();
+  await expect(page).toHaveURL(new RegExp(`/repos/${rid}/releases/\\w+`));
+
+  await page.route(/\/release_by_id$/, async route => {
+    const release = await (await route.fetch()).json();
+    for (const artifact of release.artifacts) {
+      artifact.locations.push({
+        user: { did: OTHER_DID },
+        url: "https://example.com/theirs.tar",
+      });
+    }
+    await route.fulfill({ json: release });
+  });
+  await reload(page);
+
+  await page.getByRole("button", { name: "icon-download Download" }).click();
+  await expect(page.getByText("Not from a delegate.")).toBeHidden();
+  await page
+    .getByRole("button", { name: "icon-open-external Browser" })
+    .click();
+  await expect(
+    page.getByRole("note").getByText("Links without a delegate badge"),
+  ).toBeVisible();
+});
+
 test("metadata can be added, edited and removed", async ({ page, peer }) => {
   const rid = await fillRelease(page, peer);
   await page.getByRole("button", { name: "Create release" }).click();
diff --git a/tests/unit/releases.test.ts b/tests/unit/releases.test.ts
index 52cbc5639..47fbf397d 100644
--- a/tests/unit/releases.test.ts
+++ b/tests/unit/releases.test.ts
@@ -19,6 +19,7 @@ import {
   parseMetadataValue,
   redactedByDelegate,
   releaseListScope,
+  releaseWarning,
   webLocations,
 } from "@app/lib/releases";
 
@@ -307,3 +308,18 @@ describe("canonicalTags", () => {
     ).toBe(canonical);
   });
 });
+
+describe("releaseWarning", () => {
+  test("warns about a whole release by a non-delegate", () => {
+    expect(releaseWarning(them, delegates, "trusted")).toBe("release");
+    expect(releaseWarning(them, delegates, "untrusted")).toBe("release");
+  });
+
+  test("warns about others' artifacts on a delegate's release", () => {
+    expect(releaseWarning(delegate, delegates, "untrusted")).toBe("artifacts");
+  });
+
+  test("does not warn about a delegate's release and artifacts", () => {
+    expect(releaseWarning(delegate, delegates, "trusted")).toBeUndefined();
+  });
+});