v0.0.7

Install: brew install agenxy/tap/dibs, or go install github.com/agenxy/dibs/cmd/dibs@v0.0.7 and the same for cmd/dibd.

Verify the artifacts (cosign 3, bundle format):

cosign verify-blob checksums.txt \
  --bundle checksums.txt.bundle \
  --certificate-identity 'https://github.com/Agenxy/dibs/.github/workflows/release.yml@refs/tags/v0.0.7' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

Full notes for this release: CHANGELOG.md

---

Changelog

• ac2e85b release v0.0.7: the wake path, session identity, and the authorisation around them (#72)
• e003fdb the icon is invalid XML, so it has never rendered
• 5d1c209 the v0.0.7 pre-release review: twenty-one rounds, and the first clean one (#71)
• c0955a7 record what can actually wake a thread, and who starts what (#70)
• f3dc559 review round nine: the wake I shipped could not have woken anything (#69)
• 83aaac0 Codex can be woken now, and Dibs was still saying it could not (#68)
• 6207f94 an approval woke nobody, because a verdict was filed as situational awareness (#66)
• f579494 the panel's reader is the human; its actor was not, and the label said neither (#61)
• 9874c06 review round seven: the page key guarded two routes that carried all the mail (#62)
• f633a3a review round six: the cookie control was theatre, and its test said so (#58)
• 17e5100 review round five: I validated a vocabulary I invented, and broke working boards
• a06ff70 review round four: the pin I added to close an escalation failed open twice
• 27f9d18 a standing role followed a name, and a name is free to take
• 8124d08 review round two: the shared loader checked names and not values
• 0e7b408 what the pre-tag review found, and the config type it cost
• 8fc7e10 act on the v0.0.6 operator evaluation, and the wake path it exposed
• 2eff041 Release follow-ups: cask branch, space-id collision, unreadable trees
• c7d0f15 Bump jdx/mise-action from 4.2.4 to 4.2.5
• f4f5fa8 Bump golang.org/x/tools from 0.48.0 to 0.49.0

v0.0.6

Install: brew install agenxy/tap/dibs, or go install github.com/agenxy/dibs/cmd/dibs@v0.0.6 and the same for cmd/dibd.

Verify the artifacts (cosign 3, bundle format):

cosign verify-blob checksums.txt \
  --bundle checksums.txt.bundle \
  --certificate-identity 'https://github.com/Agenxy/dibs/.github/workflows/release.yml@refs/tags/v0.0.6' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

Full notes for this release: CHANGELOG.md

---

Changelog

• 911b273 v0.0.6: MCP 2026 end to end, durable identity, and nine rounds of review
• a5c04d0 trim the machine-written shapes from the reader-facing docs
• 045f4fa we do not pay to be listed
• c85607f say where agents can find this, on the page they land on
• 0d21e97 the namespace is case-sensitive, and the org is Agenxy
• 4dd4f55 check the registry manifest here, not at the registry
• a67d181 the manifest lives on the branch, the version names the release
• 8565ebe publish to the registry agents actually search

v0.0.5

Install: brew install agenxy/tap/dibs, or go install github.com/agenxy/dibs/cmd/dibs@v0.0.5 and the same for cmd/dibd.

Verify the artifacts (cosign 3, bundle format):

cosign verify-blob checksums.txt \
  --bundle checksums.txt.bundle \
  --certificate-identity 'https://github.com/Agenxy/dibs/.github/workflows/release.yml@refs/tags/v0.0.5' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

Full notes for this release: CHANGELOG.md

---

Changelog

• ac4cc90 0.0.5, and a release that reaches the people it is for
• 327befd supervision should not need the secret every agent authenticates with
• fc5597f matching measures its own bar, and says which rule set it
• 5bfbca6 what an outside audit found, fixed
• 48bc6a6 a pid is evidence only on the machine that owns it
• 357cc45 a fleet can span machines, without a CA or a VPN
• 92b56e3 one Fixed heading, not three
• f54d766 declare said an agent had been opened for the work
• fe0289e a log that drops records is worse than no log
• 70dc618 wake codex agents over the connection they already hold
• 2b5fafe trace when a codex hook actually takes effect
• f27c869 codex can be woken now: the variant we were waiting for exists
• 862a3ad the setup procedure named a marketplace that does not exist
• 7e1db6f every hook was addressed to a server that does not exist
• 7f5b7b9 write down the two requirements this session imposed
• cbdf6dc an upgrade must not cost an agent its call
• c624aa2 board said the human had seen it, without being told whether they had
• e814eb3 the plugin path could not carry the push transport
• e58abd6 resource-not-found answers in the caller's revision
• 464060c a prune nobody wrote down is a prune that comes back
• 7a05951 a service that starts last month's daemon says nothing about it
• b6a3c01 the coordinator can clear the board, and go 1.26.6
• 0bcfe02 every --help called the binary agents
• 9fb9646 an argument that will not decode gets a corrective call too
• 3eaa133 the two lessons the wire-format break leaves behind
• 2280503 a renamed field does not fail, it just stops being read
• 79e702c the agent that started the daemon can claim coordinator
• adb0383 refuse an install that revokes a permission the user had to click
• 69898e2 the last of the lane vocabulary, including three shipped things it broke
• adedd9a lane is not a concept in Dibs, so take the word out
• 74a200e the declare path speaks about one tree, and does not race the loop
• 59033c6 one Fixed heading, not three
• 8af087b a dialog on screen is a person, not a hang
• 0735ad7 make a privacy grant survive the next install
• e40b75f a git that hangs is not a git that failed
• ea3d6cf matching indexes every repository the fleet works in (#7)
• d52da85 the changelog claimed releases that never existed
• e886c9d the rename reached further than the binaries
• f202675 the systemd unit was called agents.service
• 2d7e804 say what this actually is
• cc25296 a mark for the new name, and the changelog for tonight
• 4555d54 five functions nothing called
• efeda48 an agent that hits a defect is the only witness to it
• 96b233b legacy subscriptions: ordering, unsubscribe, and a map with no ceiling (#18)
• 712361a mcp-config told Codex users to connect to a server called agents
• 956449d a check the rename cannot reach
• efe329f the data directory is ~/.dibs, and an old one is still found

v0.0.1

Install: brew install agenxy/lanes/lanes, or go install github.com/agenxy/lanes/cmd/lanes@v0.0.1 and the same for cmd/lanesd.

Verify the artifacts (cosign 3, bundle format):

cosign verify-blob checksums.txt \
  --bundle checksums.txt.bundle \
  --certificate-identity 'https://github.com/Agenxy/lanes/.github/workflows/release.yml@refs/tags/v0.0.1' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

---

Changelog

• 05c2c28 repair the release identity, and the gaps a first contributor hits

v0.0.0

Superseded — do not use. Use the latest release.

This tag was moved after the Go module proxy had already cached it, so proxy.golang.org and sum.golang.org permanently disagree with what the tag now points at. go install github.com/agenxy/lanes/cmd/lanes@v0.0.0 fails with a checksum SECURITY ERROR under GOPROXY=direct, and serves an older tree through the default proxy.

A moved tag cannot be repaired — the checksum database is append-only. v0.0.0 is retracted in go.mod.

Later versions are not merely v0.0.0 plus that retraction: they also carry lanes stop, service-unit generation, a path-canonicalisation fix, and documentation corrections.