Repository navigation
ZirOS v0.7.5
ZirOS Private Source Release — v0.7.5
Status: private source release
Repository visibility: private
Release tag: v0.7.5
Release date: 2026-04-11
Summary
This release cuts a fresh private source snapshot after v0.7.4 and closes the remaining trade-finance Midnight packaging drift that was still preventing the emitted subsystem bundle from behaving like a self-consistent operator artifact.
The dominant change in v0.7.5 is not a new proving primitive. It is release discipline:
- the trade-finance Midnight validator now works both from the showcase artifact root and from the packaged subsystem root
- per-contract and per-call prepare artifacts are preserved instead of being overwritten by the last loop iteration
- the packaged subsystem no longer ships repo-dependent proof/materialization scripts as if they were runnable in isolation
- the release metadata, operator readiness docs, and public attestation inputs are refreshed to the current version and commit
Highlights
1. Trade-finance Midnight package closure
The trade-finance subsystem release surface is now materially cleaner and more honest.
Key changes:
scripts/validate_private_trade_finance_midnight_contracts.shdetects showcase versus subsystem layouts- validator binary selection now refuses a
zkfbinary that does not actually exposemidnight - deploy-prepare and call-prepare auxiliary assets are preserved under per-contract and per-call asset roots
- validation summary/report JSON stays on the same schema family and adds the new asset-root fields additively
This matters because the shipped package is supposed to be an operator surface, not a fragile one-shot export whose prepared artifacts collapse on reuse.
2. Public-package honesty for shipped scripts
The packaged subsystem now fails closed where it should fail closed.
Specifically, the shipped Lean, Rocq, Verus, and materialize scripts now:
- exit with code
64 - explain that the public package does not ship theorem-source or repo helper tooling
- point the operator to the shipped formal logs and certificates instead
That is the correct contract for a public evidence bundle.
3. Refreshed trade-finance forensics
This release adds and refreshes source-backed trade-finance forensic artifacts:
forensics/ziros_capability_truth_and_trade_finance_contract.mdforensics/generated/ziros_capability_inventory.jsonforensics/generated/live_midnight_readiness.jsonforensics/generated/trade_finance_market_sources.jsonforensics/generated/trade_finance_contract_blueprint.json
These artifacts document the actual capability boundary, the local Midnight readiness story, the market thesis, and the exact six-contract trade-finance blueprint already emitted by the checkout.
4. Release truth refresh
The release metadata for the private repo is refreshed to the v0.7.5 cut:
release/product-release.jsonrelease/theorem_coverage_status.jsonrelease/private_source_census.jsonrelease/midnight_operator_readiness.jsonrelease/evm_operator_readiness.jsonrelease/vision_alignment_report.jsonrelease/provenance/public_attestation_export.json
The generated private summary block in README.md is also regenerated from the live truth surfaces.
Verification run for this release
The release cut is backed by the following checks on the release branch/worktree:
cargo build --workspacecargo test -p zkf-ir-spec --libbash scripts/run_protocol_exact_rocq_proofs.shpython3 scripts/generate_verification_status_artifacts.py --checkpython3 scripts/proof_audit.py --release-gradepython3.11 scripts/check_private_truth_drift.py./zkf-build.sh --release -p zkf-clicargo build --release -p zkf-agentpython3 scripts/generate_npm_installer_manifest.py --archive <release tarball>python3 scripts/export_public_attestation_bundle.pypython3 scripts/refresh_public_attestation_repo.py --binary-path target-public/release/zkf-clipython3 scripts/check_public_attestation_alignment.pypython3 scripts/check_public_release_boundary.py --require-clean --write-report
Boundaries
- This remains a private source release, not a public-source cutover.
- Midnight stays an operator-grade contract lane with honest environment boundaries; it is not reclassified as a native strict recursive proof lane.
- The public attestation repo is refreshed from the private release inputs, but that does not make the private workspace itself public.
- Uncommitted work in the original private checkout is intentionally excluded from the clean release branch used for this release cut.
Why v0.7.5 exists
v0.7.4 already exists as a tagged release. The current checkout includes additional committed work after that tag, including the trade-finance package closure. Cutting v0.7.5 is the honest way to publish a coherent next snapshot instead of silently rewriting prior release metadata.