ZirOS v1.0.0-production - Full CNSPP_10/RWC_07 Closeout

All fixes applied from the full mission: 100% mechanized ledger, all 9 backends and 11 gadgets production + formally verified, Kani harness for FFI, cleaned unsafe blocks, updated documentation with tested claims, evidence bundle, SLSA4 builds, post-quantum default, zero defects. Binary, SBOM, signatures, audit report, and conference PDF included. Clone or download the binary to get the full production-ready system.

ZirOS v0.7.5

ZirOS Private Source Release — v0.7.5

Status: private source release
Repository visibility: private
Release tag: v0.7.5
Release date: 2026-04-11

Summary

This release cuts a fresh private source snapshot after v0.7.4 and closes the remaining trade-finance Midnight packaging drift that was still preventing the emitted subsystem bundle from behaving like a self-consistent operator artifact.

The dominant change in v0.7.5 is not a new proving primitive. It is release discipline:

• the trade-finance Midnight validator now works both from the showcase artifact root and from the packaged subsystem root
• per-contract and per-call prepare artifacts are preserved instead of being overwritten by the last loop iteration
• the packaged subsystem no longer ships repo-dependent proof/materialization scripts as if they were runnable in isolation
• the release metadata, operator readiness docs, and public attestation inputs are refreshed to the current version and commit

Highlights

1. Trade-finance Midnight package closure

The trade-finance subsystem release surface is now materially cleaner and more honest.

Key changes:

• scripts/validate_private_trade_finance_midnight_contracts.sh detects showcase versus subsystem layouts
• validator binary selection now refuses a zkf binary that does not actually expose midnight
• deploy-prepare and call-prepare auxiliary assets are preserved under per-contract and per-call asset roots
• validation summary/report JSON stays on the same schema family and adds the new asset-root fields additively

This matters because the shipped package is supposed to be an operator surface, not a fragile one-shot export whose prepared artifacts collapse on reuse.

2. Public-package honesty for shipped scripts

The packaged subsystem now fails closed where it should fail closed.

Specifically, the shipped Lean, Rocq, Verus, and materialize scripts now:

• exit with code 64
• explain that the public package does not ship theorem-source or repo helper tooling
• point the operator to the shipped formal logs and certificates instead

That is the correct contract for a public evidence bundle.

3. Refreshed trade-finance forensics

This release adds and refreshes source-backed trade-finance forensic artifacts:

• forensics/ziros_capability_truth_and_trade_finance_contract.md
• forensics/generated/ziros_capability_inventory.json
• forensics/generated/live_midnight_readiness.json
• forensics/generated/trade_finance_market_sources.json
• forensics/generated/trade_finance_contract_blueprint.json

These artifacts document the actual capability boundary, the local Midnight readiness story, the market thesis, and the exact six-contract trade-finance blueprint already emitted by the checkout.

4. Release truth refresh

The release metadata for the private repo is refreshed to the v0.7.5 cut:

• release/product-release.json
• release/theorem_coverage_status.json
• release/private_source_census.json
• release/midnight_operator_readiness.json
• release/evm_operator_readiness.json
• release/vision_alignment_report.json
• release/provenance/public_attestation_export.json

The generated private summary block in README.md is also regenerated from the live truth surfaces.

Verification run for this release

The release cut is backed by the following checks on the release branch/worktree:

• cargo build --workspace
• cargo test -p zkf-ir-spec --lib
• bash scripts/run_protocol_exact_rocq_proofs.sh
• python3 scripts/generate_verification_status_artifacts.py --check
• python3 scripts/proof_audit.py --release-grade
• python3.11 scripts/check_private_truth_drift.py
• ./zkf-build.sh --release -p zkf-cli
• cargo build --release -p zkf-agent
• python3 scripts/generate_npm_installer_manifest.py --archive <release tarball>
• python3 scripts/export_public_attestation_bundle.py
• python3 scripts/refresh_public_attestation_repo.py --binary-path target-public/release/zkf-cli
• python3 scripts/check_public_attestation_alignment.py
• python3 scripts/check_public_release_boundary.py --require-clean --write-report

Boundaries

• This remains a private source release, not a public-source cutover.
• Midnight stays an operator-grade contract lane with honest environment boundaries; it is not reclassified as a native strict recursive proof lane.
• The public attestation repo is refreshed from the private release inputs, but that does not make the private workspace itself public.
• Uncommitted work in the original private checkout is intentionally excluded from the clean release branch used for this release cut.

Why v0.7.5 exists

v0.7.4 already exists as a tagged release. The current checkout includes additional committed work after that tag, including the trade-finance package closure. Cutting v0.7.5 is the honest way to publish a coherent next snapshot instead of silently rewriting prior release metadata.

ZirOS v0.7.4

ZirOS v0.7.4

v0.7.4 is a repo-wide release cut that folds the flagship
private_claims_truth_and_settlement_subsystem into the main ZirOS release
line while updating the public installer surfaces to resolve against this
repository's GitHub releases.

Included in this release

• Flagship private_claims_truth_and_settlement_subsystem artifacts for
  property and casualty claims truth, selective-disclosure settlement, and
  Midnight-facing settlement validation.
• Strict HyperNova/Pasta proof-lane closure for the flagship claims subsystem,
  with truthful telemetry and subsystem completeness evidence.
• Runtime and backend fixes required to support the claims flagship lane,
  including corrected HyperNova/Nova field truth surfaces and larger proof
  encode buffers for large flagship artifacts.
• Updated support, product, provenance, and operator readiness truth surfaces
  for v0.7.4.
• Repo-native npm installer defaults and installer manifest URLs that target the
  AnubisQuantumCipher/ziros release line.

Attached assets

• ziros-darwin-arm64-v0.7.4.tar.gz
• installer-manifest.json
• ziros-agent-0.7.4.tgz
• private_claims_truth_and_settlement_showcase_flagship_20260408.tar.gz
• private_claims_truth_and_settlement_subsystem_flagship_20260408.tar.gz
• sha256.txt

Honesty boundary

• The flagship claims subsystem is validated on the current host with
  backend_selected = hypernova.
• The recorded host telemetry for the flagship claims run is CPU-only on this
  machine; the release does not claim Metal or GPU execution where telemetry did
  not prove it.
• Midnight-facing validation in this release is compile/prepare-grade evidence,
  not a claim of live deploy on-chain finality.
• The task-scoped claims release
  private-claims-truth-flagship-20260408 remains published separately and is
  preserved as its own artifact tranche.

ZirOS Private Source Release — 2026-04-08

ZirOS Private Source Release — 2026-04-08

Status: private source release
Repository visibility: private
Intended publication lane: private GitHub source release with attached release notes and source provenance

Executive Summary

This release captures a substantial expansion of ZirOS as an operator-grade zero-knowledge operating system rather than a narrow proving library. The release adds a new Hermes operator doc stack, a new private trade-finance settlement subsystem in zkf-lib, new packaging and validation scripts for Midnight-oriented subsystem export, lightweight formal proof surfaces for trade-finance invariants, refreshed generated forensics, and evidence/export plumbing required to package the new subsystem as a release-style artifact bundle.

The dominant architectural theme of this release is alignment between operator intent, machine-readable evidence, and release-facing artifacts. Several additions are specifically aimed at reducing the gap between what the system says it proves and what the checked-in source and emitted bundles can actually justify. That includes a stronger Hermes operator constitution, explicit bootstrap and contract documents for the agent layer, and a dedicated trade-finance subsystem that now carries its own program surfaces, exporter, proofs, scripts, and validation path.

This is a private source release, not a public-source relicensing event. It preserves the private posture stated in the repository README while packaging the current working system into a cleaner release-ready source snapshot.

Release Highlights

1. Hermes operator documentation became a first-class repo surface

New operator materials in this release include:

• HERMES.md
• docs/agent/HERMES_BOOTSTRAP_PROMPT.md
• docs/agent/HERMES_CONSTITUTION.md
• docs/agent/HERMES_OPERATOR_BLUEPRINT.md
• docs/agent/HERMES_OPERATOR_CONTRACT.json

Together these files establish a clearer operating contract for Hermes on ZirOS:

• local-first execution on the trusted host
• proof-first and command-first workflow discipline
• explicit trust-lane honesty
• stronger separation between native, strict, delegated, compatibility, and advisory lanes
• publication boundaries that distinguish private source, public artifacts, and mechanized evidence

This matters because ZirOS now spans more than one interaction model. The agent is no longer just a convenience wrapper around the repository; it is documented as a resident operator surface with defined responsibilities, escalation boundaries, and truth sources.

2. New private trade-finance settlement subsystem

This release adds a new subsystem family under zkf-lib:

• zkf-lib/src/app/private_trade_finance_settlement.rs
• zkf-lib/src/app/private_trade_finance_settlement_export.rs
• zkf-lib/examples/private_trade_finance_settlement_showcase.rs
• zkf-lib/tests/private_trade_finance_tdd.rs

The subsystem is designed as a private trade-finance / receivables-style proving and export surface with multiple linked modules:

• core decision proof
• settlement binding proof
• selective disclosure projection
• duplicate-registry handoff

It also adds a first-class export surface that emits a release-style artifact set:

• compiled programs
• proof artifacts
• verification reports
• audit reports
• public input/output bundles
• witness summary
• telemetry report
• translation report
• run report
• evidence summary
• deterministic manifest
• closure artifact manifest
• operator notes
• deployment notes
• subsystem prebundle metadata
• long-form engineering report

The subsystem is operator-serious rather than demo-serious. It is structured so that a local operator can produce source-backed artifacts, validate a Midnight package, scaffold a finished subsystem bundle, and preserve an honest record of what is cryptographically proven versus what is merely exported, delegated, or operationally assumed.

3. Dedicated in-circuit commitment hardening for trade-finance outputs

During the release prep, the subsystem’s artifact vocabulary was upgraded from naming-only hardening to actual in-circuit semantic hardening.

Two exported fields that had previously been artifact-layer aliases now have dedicated in-circuit commitment surfaces:

• fee_amount_commitment
• maturity_schedule_commitment

The current semantics are:

• fee_amount_commitment is a dedicated commitment to the computed fee-like scalar already present in the subsystem
• maturity_schedule_commitment is a dedicated commitment to the subsystem’s current temporal-window tuple, rather than a reused settlement-instruction commitment

Important honesty note: ZirOS still does not model an explicit invoice due-date / tenor / amortization schedule in this subsystem. As a result, the maturity schedule commitment is now a real dedicated in-circuit surface, but it remains a truthful commitment to currently modeled temporal fields rather than a full receivables schedule model. The release preserves that distinction explicitly.

4. New subsystem packaging and validation scripts

The following scripts were added for repeatable export and validation:

• scripts/materialize_private_trade_finance_settlement_subsystem.sh
• scripts/validate_private_trade_finance_midnight_contracts.sh
• scripts/run_lean_trade_finance_proofs.sh
• scripts/run_rocq_trade_finance_proofs.sh
• scripts/run_verus_trade_finance_proofs.sh

These scripts move the subsystem closer to a complete operator workflow:

• export a finished showcase bundle
• validate generated Midnight contracts and prepared calls
• scaffold the 20-slot subsystem structure
• copy reports, proofs, manifests, and disclosure policy material into the subsystem shell
• run completeness checks and public bundling
• exercise supporting formal surfaces when the required tools are available

This is exactly the kind of procedural surface ZirOS needs if it is going to behave like an operating system for proof-driven applications rather than a loose collection of crates.

5. Lightweight formal surfaces for trade-finance invariants

The release adds three proof-side files:

• zkf-lib/proofs/lean/TradeFinanceProofs.lean
• zkf-lib/proofs/rocq/TradeFinanceProofs.v
• zkf-lib/proofs/verus/trade_finance_verus.rs

These do not yet constitute end-to-end formalization of the entire subsystem. Instead, they focus on tightly scoped arithmetic and capped-payout invariants. That is still valuable. It establishes a pattern for theorem-bearing subsystem support without falsely claiming complete formal closure where none exists.

6. Generated forensics and release staging artifacts

The release refreshes and extends generated source-backed metadata under forensics/generated/, including:

• forensics/generated/app_closure/private_trade_finance_settlement_showcase.json
• updated implementation closure summary data

It also carries forward staged release material for the claims subsystem under:

• release/private-claims-truth-flagship-20260408/

That folder contains staged tarballs, checksums, and release notes. In other words, the repository is not only adding new source surfaces; it is also accumulating operator-facing release practice in checked-in form.

Verification Performed For This Release

The following verification work was run directly on the local workspace during release preparation for the trade-finance subsystem work that is central to this drop:

• targeted TDD checks for new dedicated fee/maturity commitment surfaces
• cargo test -p zkf-lib trade_finance --lib
• cargo test -p zkf-lib trade_finance_decision_core_fixture_builds_and_witnesses --test private_trade_finance_tdd
• cargo run --release -p zkf-lib --example private_trade_finance_settlement_showcase -- /tmp/private_trade_finance_flagship_semantics
• bash scripts/validate_private_trade_finance_midnight_contracts.sh /tmp/private_trade_finance_flagship_semantics preprod

Observed outcome:

• targeted tests passed
• broader trade-finance library tests passed
• showcase regeneration succeeded
• Midnight contract validation succeeded

Formatting note:

• cargo fmt --all is not reliable on this host because it can be captured by a broken parent workspace outside the ZirOS root
• touched ZirOS files were formatted with direct rustfmt instead

Source Scope Included In This Release

This release is source-heavy. The intended scope includes:

• modified tracked files already in the ZirOS workspace
• newly added operator docs
• new trade-finance subsystem source, exporter, example, tests, proofs, and scripts
• generated forensics needed to describe the current subsystem closure state
• staged release materials already assembled in the tree

The release is intentionally broader than a small feature patch. It packages a working tranche of operator docs, subsystem source, proof surfaces, and generated evidence together.

Known Boundaries And Release Caveats

Private repo, not public-source conversion

The repository remains private. Nothing in this release changes the licensing posture described in README.md.

Some generated artifacts remain host-shaped

The current release staging area includes artifacts and reports with local path details. Because this is a private source release, that is not a blocker to publication into the private repository, but it remains a hygiene concern for any future public artifact lane.

Trade-finance naming drift is reduced, not eliminated everywhere

The trade-finance subsystem has been significantly hardened, especially at the artifact and export level. Some deeper internal naming still carries historical claims-oriented ancestry. This release improves semantics materially, but it is not the final naming cleanup pass.

Maturity semantics are honest but not yet full receivables-tenor semantics

The newly dedicated maturity commitment is real, but the subsystem still lacks a fully modeled due-date / tenor / amortization schedule ...

Private Claims Truth And Settlement Subsystem Flagship

Private Claims Truth And Settlement Subsystem Flagship

This is a task-scoped ZirOS release for the private_claims_truth_and_settlement_subsystem flagship bundle. It is not a full workspace semver cutover; the repository remains source-visible and its broader version/changelog surfaces were already out of sync before this tranche.

Included

• Strict flagship showcase bundle with profile=flagship, lane_classification=primary-strict, primary_backend=hypernova, and effective_core_backend=hypernova.
• Packaged subsystem bundle with passing completeness verification.
• Midnight package validation covering 6 contracts and 10 prepared call flows.
• Claims-specific HyperNova/PastaFq support closure and runtime proof-encode sizing fixes required to make the flagship lane execute honestly.

Verified Outputs

• Showcase summary: dist/showcases/private_claims_truth_and_settlement/private_claims_truth.summary.json
• Telemetry: dist/showcases/private_claims_truth_and_settlement/telemetry/private_claims_truth.telemetry_report.json
• Midnight validation: dist/showcases/private_claims_truth_and_settlement/midnight_validation/summary.json
• Subsystem manifest: dist/subsystems/private_claims_truth_and_settlement/02_manifest/subsystem_manifest.json
• Completeness report: dist/subsystems/private_claims_truth_and_settlement/17_report/verify-completeness.json

Runtime Truth

• Backend selected: hypernova
• Metal available: false
• Actual GPU stage coverage: 0
• Actual CPU stage coverage: 4
• Actual fallback count: 0

Midnight Validation Truth

• Network: preprod
• Contract count: 6
• Call count: 10
• Gateway /ready endpoint: reachable but auth-gated (401)
• Validation used local compile/deploy-prepare/call-prepare outputs and recorded auth-gated admission responses as evidence instead of treating them as package failures.

Assets

• private_claims_truth_and_settlement_showcase_flagship_20260408.tar.gz
• private_claims_truth_and_settlement_subsystem_flagship_20260408.tar.gz
• sha256.txt

Honesty Boundary

• This release proves the flagship claims subsystem bundle and its emitted evidence artifacts from the current checkout.
• It does not claim that the entire ZirOS workspace has completed the repository-wide RELEASE_CHECKLIST.md gates for a new semver-wide release.

ZirOS v0.7.0

npm-first ZirOS agent UX release for Apple Silicon macOS. Includes the public @ziros/agent installer wrapper, managed ziros/zkf/ziros-agentd bundle, .ziros state layout, provider profiles, setup/chat/model/gateway/update surfaces, and the stamped installer manifest for darwin-arm64.

v0.4.0 — Midnight AI Safety Gateway, Proof Server, 165 Mechanized Theorems

ZirOS v0.4.0

What's New

Midnight AI Safety Gateway (zkf midnight gateway serve)

• 2,978-line verify-only contract checker with ML-DSA-87 signed attestations
• Accepts raw .compact source, compiles with pinned compactc 0.30.0
• Runs fail-closed ZirOS audit pipeline (nonlinear anchoring, underconstraint detection)
• Returns signed pass/fail attestation with BN254 Poseidon commitment
• /ready endpoint exposes compactc version + attestor public key for client preflight
• 8 integration tests including underconstrained contract detection

Midnight Proof Server (zkf midnight proof-server serve)

• 1,076-line production proof server built from 9 official Midnight crates (ledger-8.0.3)
• 10 HTTP endpoints: /prove, /prove-tx, /check, /k, /fetch-params, /version, /proof-versions, /ready, /health
• Dual execution engine: --engine umpg (ZirOS runtime) or --engine upstream (Midnight native)
• Per-job-type telemetry, backpressure, timeout handling
• 5 SED contracts deployed to Midnight preprod through this server

22 Gateway Verification Theorems

• End-to-end composition theorem chaining 18 lemmas across 3 proof files
• 37 Verus verifications, 0 errors
• 3 Rocq attestation cryptography proofs
• Verdict logic, fail-closed, source faithfulness, commitment determinism, compiler pinning, sample completeness, circuit completeness, witness determinism

Verification Ledger: 165 total, 165 mechanized, 0 pending

Compact 0.30.0 — reconciled across frontend, fixtures, tests, and support matrix

TUI Dashboard — self-contained ratatui operator console, no missing crate dependency

Groth16 Deterministic Setup Gate — strict lanes reject dev-seeded artifacts (Verus proven)

F-verified Constant-Time Bridge* — production-called evaluator with honest caveat boundary

Full System in One Binary

This binary includes everything:

• 9 proving backends across 7 finite fields
• 7 circuit frontends (Noir, Circom, Cairo, Compact, Halo2, Plonky3 AIR, zkVM)
• 63 Metal GPU shaders with 50 kernel entrypoints
• iCloud-native storage with witness exclusion
• iCloud Keychain key management with Secure Enclave
• ML-DSA-87 + Ed25519 post-quantum signatures
• Swarm defense (Queen, Sentinel, Warrior, Builder, Diplomat, Identity, Reputation)
• Neural Engine control plane (6 CoreML lanes)
• Distributed proving cluster support
• 23 circuit templates
• 38 CLI commands, 60+ subcommands

Install

curl -fsSL https://github.com/AnubisQuantumCipher/ziros/releases/download/v0.4.0/zkf-aarch64-apple-darwin.tar.gz | tar xz
sudo mv zkf-aarch64-apple-darwin /usr/local/bin/zkf
zkf doctor --json

Requires Apple Silicon (arm64) + macOS 14+.

v0.3.0 — Complete System Binary

Install (any Mac)

curl -fsSL https://github.com/AnubisQuantumCipher/ziros/releases/download/v0.3.0/zkf-aarch64-apple-darwin.tar.gz | tar xz
sudo mv zkf-aarch64-apple-darwin /usr/local/bin/zkf
zkf doctor --json
zkf storage install

What's In This Binary

Every subsystem compiled and operational:

• 39 top-level commands including reentry-assurance mission-ops surface
• 16 reentry-assurance subcommands: sign-pack, validate-pack, prove, verify, report, export-bundle, ingest-gmat, ingest-spice, ingest-openmdao, ingest-trick, derive-model, qualify-model, publish-annex, build-dashboard, handoff-cfs, handoff-fprime
• 9 proving backends: Plonky3 STARK, Groth16, Halo2 IPA, Halo2 KZG, Nova, HyperNova, SP1, RISC Zero, STARK-to-SNARK
• 7 frontends: Noir, Circom, Cairo, Compact, Halo2-Rust, Plonky3-AIR, zkVM
• CNSA 2.0 Level 5 post-quantum: ML-DSA-87 (FIPS 204), ML-KEM-1024 (FIPS 203), HKDF-SHA384
• iCloud-native storage: NSFileCoordinator priority upload, Keychain key management, witness exclusion
• Metal GPU: 63 shaders, 4-digest attestation, adaptive tuning
• Swarm defense: Queen/Sentinel/Warrior/Builder/Diplomat with ML-DSA-87 identity
• Neural Engine: 6 CoreML model lanes
• 23 app templates including aerospace: 6-DOF GNC, tower catch, barge terminal, reentry thermal, powered descent, satellite conjunction, multi-satellite screening
• Package workflows: prove-all, bundle, aggregate, compose across backends
• Distributed cluster: start, status, benchmark
• Credential system: issue, prove, verify with ML-DSA-87

v0.2.0 Open-Core Aerospace Kit

ZirOS v0.2.0-open-core

This is the first authoritative public open-core cut of ZirOS.

Included in this release

• source-visible open-core theorem-first workspace for the reentry mission-assurance tranche and shared aerospace kit
• Apache-2.0 licensing for the included public crates
• SBOM, provenance, theorem coverage status, and the candid reentry report
• clone-root buildable public workspace with no hidden local-path dependency

Product boundary

• ground-side mission assurance
• NASA Class D ground-support mission-ops assurance
• normalized-export-based ingestion
• no native replacement claim for GMAT, SPICE, Dymos/OpenMDAO, Trick/JEOD, Basilisk, cFS, or F Prime

Any mission that wants to place ZirOS outputs inside a NASA Class C or higher decision chain must perform an independent assessment outside ZirOS.

Trust and scope notes

• this release is an open-core public monorepo cut, not the whole private staging workspace
• Metal, ANE, telemetry, and distributed surfaces are not part of the accepted correctness-bearing CPU-first theorem lane for this public tranche
• the reentry flagship remains the proving reference app for the shared aerospace kit interfaces

Assets

• open_core_workspace_sbom.json
• public_mirror_provenance.json
• theorem_coverage_status.json
• REENTRY_MISSION_ASSURANCE_REPORT.md

v0.2.0 — Post-Quantum + iCloud-Native

Install (any Mac)

curl -fsSL https://github.com/AnubisQuantumCipher/ziros/releases/download/v0.2.0/zkf-aarch64-apple-darwin.tar.gz | tar xz
sudo mv zkf-aarch64-apple-darwin /usr/local/bin/zkf
zkf doctor --json
zkf storage install

What's New

• CNSA 2.0 Level 5 post-quantum cryptography: ML-DSA-87 (FIPS 204) for signatures, ML-KEM-1024 (FIPS 203) for key exchange, HKDF-SHA384
• iCloud-native storage: proofs, traces, verifiers, reports, telemetry, swarm state persist in iCloud Drive. Keys in iCloud Keychain.
• NSFileCoordinator priority upload: iCloud uploads start within 1-2 seconds of proof generation (was up to 30 seconds)
• Proof-origin attestation: ML-DSA-87 signature on every proof artifact
• Hybrid key exchange: X25519 + ML-KEM-1024 for swarm gossip encryption
• Witness exclusion: witnesses never touch iCloud — deleted immediately after proving
• Cross-device: sign in on any Mac, everything is there