Skip to content

[WITHDRAWN] Nahuali v1.1.0-beta.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 20:02
nahuali-cli-v1.1.0-beta.0
76056fe
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[!WARNING]

Withdrawn: this version number was published by an incorrect release configuration while Nahuali remains pre-1.0. Use v0.8.0-beta.0 instead. The tag and assets are preserved for provenance.

Nahuali v1.1.0-beta.0 is a prerelease of local agent memory that exposes the evidence and deterministic trust verdict behind each recall. This release removes the database-server requirement from the default path and publishes a reproducible trust benchmark for the product's main claim.

Highlights

  • Persistent memory now uses embedded SurrealKV by default. A clean install can record, restart, recall, and self-inspect without Docker, an account, an API key, a model, or a separate database server.
  • nahuali demo shows evidence-backed CERTIFY, unsupported WARN, contradiction-driven BLOCK, non-mutating self-inspection, hash-chain tampering detection, and rejection of a fully re-chained history through an operator-held Ed25519 checkpoint.
  • The vendor-neutral Agent Memory Trust Benchmark reports provenance, abstention, contradiction, staleness, non-mutating inspection, chain tampering, and checkpoint tampering as separate capabilities. Nahuali 1.1 passes all seven cases with no unsupported capabilities.
  • The stdio MCP server, local HTTP API, CLI, and regression runner share the same trust and tamper-evidence defaults.
  • Remote SurrealDB remains available through NAHUALI_DB_URL for deployments that need several processes to share one store.

Install

Install the matching signed archive for macOS or Linux:

curl -fsSL https://raw.githubusercontent.com/Arakiss/nahuali/main/scripts/install.sh \
  | NAHUALI_VERSION=nahuali-cli-v1.1.0-beta.0 sh
export PATH="$HOME/.nahuali/bin:$PATH"
nahuali demo

The installer always verifies SHA-256. Set NAHUALI_REQUIRE_SIGSTORE=1 to require Sigstore verification as well.

Verify the release

From a checkout of the repository:

bash scripts/check-release-assets.sh --repo Arakiss/nahuali --tag nahuali-cli-v1.1.0-beta.0
bash scripts/verify-release.sh --repo Arakiss/nahuali --tag nahuali-cli-v1.1.0-beta.0 --require-sbom --require-provenance

The verifier checks checksums, Sigstore bundles, GitHub build provenance, executable versions, the CycloneDX SBOM, and an isolated install smoke test.

The reproducible benchmark result is published at benchmarks/agent-memory-trust/results/nahuali-1.1.0-beta.0.json.

Component versions in this release

  • nahuali-cli 1.1.0-beta.0
  • nahuali-core 1.1.0-beta.0
  • nahuali-mcp 1.1.0-beta.0
  • nahuali-api 1.1.0-beta.0
  • nahuali-regression 1.1.0-beta.0

Beta limits

There is no hosted service in this release. Nahuali is local-first software that you run and operate yourself. The embedded store has one process owner; use remote SurrealDB when independent processes must share memory. The local HTTP API is unauthenticated and must not be exposed to an untrusted network. Evidence and signed history establish traceability and tamper detection, not the objective truth of remembered content. APIs and storage behavior may still change before 1.0.

The engine remains source-available under FSL-1.1-MIT. See LICENSE for the exact terms.

Changelog

See the component changelogs for the complete versioned history: nahuali-cli, nahuali-core, nahuali-mcp, nahuali-api, and nahuali-regression.

Assets 15
Loading