Skip to content

[WITHDRAWN] Nahuali v1.0.0-beta.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 14:35
nahuali-cli-v1.0.0-beta.0
d175c6f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[!WARNING]

Withdrawn: this version number was published by an incorrect release configuration while Nahuali remains pre-1.0. Use v0.8.0-beta.0 instead. The tag and assets are preserved for provenance.

Nahuali v1.0.0-beta.0 is a prerelease of self-inspecting memory for AI agents. It makes the evidence, provenance, health, and trust decision behind each recall visible, while keeping the event history tamper-evident and operator-governed.

Highlights

  • nahuali demo now proves the product promise from one event ledger: evidence-backed recall earns CERTIFY, unsupported memory is downgraded to WARN, contradictions produce BLOCK, and self-inspection proposes review without rewriting memory.
  • The same demo signs the ledger, detects an in-place edit, and rejects a fully re-chained history when its signed receipt no longer matches.
  • New public projection APIs let applications replay a validated ledger and run the same authority-aware recall and self-inspection used by the engine.
  • Attestation and fail-closed chain validation are enabled by default. New event envelopes use version 2 with SHA-256 checksums.
  • The first-run documentation now distinguishes evidence-backed trust from external truth and explains exactly what each verdict means.

Install

Install the matching binary for macOS or Linux with the repository installer:

curl -fsSL https://raw.githubusercontent.com/Arakiss/nahuali/main/scripts/install.sh | NAHUALI_VERSION=nahuali-cli-v1.0.0-beta.0 sh

Set NAHUALI_REQUIRE_SIGSTORE=1 to require Sigstore verification during installation. The release also includes checksums and Sigstore bundles beside every platform archive.

Verify the release

From a checkout of the repository, verify the public asset set and GitHub artifact attestations:

bash scripts/check-release-assets.sh --repo Arakiss/nahuali --tag nahuali-cli-v1.0.0-beta.0
bash scripts/verify-release.sh --repo Arakiss/nahuali --tag nahuali-cli-v1.0.0-beta.0 --require-sbom --require-provenance

The verifier checks archive checksums, Sigstore bundles, GitHub build provenance, executable versions, and the release SBOM.

Component versions in this release

  • nahuali-cli 1.0.0-beta.0
  • nahuali-core 1.0.0-beta.0
  • nahuali-mcp 1.0.0-beta.0
  • nahuali-api 1.0.0-beta.0
  • nahuali-regression 1.0.0-beta.0

Beta limits

There is no hosted service in this release. Nahuali is local-first software that you run and operate yourself. Semantic search still requires Qdrant when enabled, the primary store requires SurrealDB, and trust verdicts describe the quality and governance of recorded evidence rather than certifying that a real-world statement is objectively true. Treat the beta as production-shaped but not yet covered by a stable-API guarantee.

Changelog

See the component changelogs for the full history: nahuali-cli, nahuali-core, nahuali-mcp, nahuali-api, and nahuali-regression.

Assets 15
Loading