v0.11.4

thlibo v0.11.4

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.4" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• docs(threat-model): record surface drift since the v0.1.0 snapshot by @3rg0n in #105
• fix(cordon): bound the k-NN scoring pass by CORDON_TIMEOUT by @3rg0n in #106
• docs(site): stop crediting Python for the native PDF path by @3rg0n in #107
• ci: run the internal/pdf fuzz targets nightly by @3rg0n in #108
• perf(processors): benchmark pdf-filter and cordon, with ceiling tests by @3rg0n in #109
• test(install,pdfocr): cover archive-extraction guards and render bounds by @3rg0n in #110
• release: v0.11.4 — nightly fuzzing, benchmarks, coverage floors, cordon timeout fix by @3rg0n in #111

Full Changelog: v0.11.3...v0.11.4