v0.1.0

Sith is a local-first, account-free Kubernetes fleet tool from ArdurAI.

Every archive in this release is reproducibly built from the tagged commit and is accompanied
by an SPDX SBOM, a keyless Sigstore bundle, and GitHub-hosted SLSA provenance.

Changelog

• a53d262 build(deps): adopt the Go 1.26 toolchain
• f9ae42d chore(build): establish Go module and quality tooling
• ab9f59b ci(actions): enforce the Slice 0 merge gates
• c7e2397 docs(brain): record advisory evidence boundary
• 15def82 docs(build): lock Phase-L build sequence, Slice-0 spec, and conventions
• 0398f5b docs(build): weight build sequence toward the target user's daily workflow
• 6cce2cc docs(e2): spec F2.1 source-abstract fleet model + connector contract
• 4db3bda docs(e2): spec read-federation four-lens graph, investigation brain, integration waves
• a1a9e60 docs(mcp): record local transport and auth decision
• e665439 docs(privacy): record local trust invariants
• 98eb62b docs(research): 2026 market & landscape research for Sith
• 6b81428 docs(reshape): local-first dual-mode plan + reconciled research + Notion doc
• 3b682d7 docs(roadmap): consolidate July-2026 research into combined roadmap
• 5a488ed docs(sessions): record the Slice 0 foundation
• 457fccd docs(spec): local fleet UX — cache-first render (F11.2) + per-pod table stakes (F11.5)
• 23b96be docs(ui): record the local fleet IDE
• 35e4378 feat(brain): add deterministic advisory rules
• 09d5470 feat(cache): add the local fleet store
• ef8f828 feat(cache): hydrate Tier-1 lenses in the background
• 998d26e feat(cache): stream live fleet deltas
• 3227387 feat(cli): add cache-backed fleet reads
• e452841 feat(cli): add stable YAML output
• 35f1190 feat(cli): add the Slice 0 walking skeleton
• 87053ca feat(cli): discover local kubeconfig contexts
• 303544a feat(cli): expose per-resource operations
• 0ce4b3e feat(cli): surface local fleet investigations
• 7ad0759 feat(connector): add the source-abstract contract
• bad1a1f feat(connector): implement local kubeconfig reads
• 5383365 feat(core): add typed Slice 0 foundations
• ab272d5 feat(fleet): enforce workspace-scoped cache reads
• d839144 feat(fleet): normalize advisory evidence
• decef11 feat(keychain): add fail-loud OS secret custody
• c64e8bb feat(localops): add direct Kubernetes operation engine
• 12b60f1 feat(mcp): add loopback fleet read server
• 25c14e2 feat(tui): add the cache-first fleet view
• eec935f feat(tui): discover generic resource lenses
• ec2f089 feat(tui): render generic server columns
• 25aba5f feat(ui): add the local fleet IDE
• baaac7b feat: add the local MCP read server (#61)
• 7a94339 feat: add the local advisory investigation brain (#63)
• 126f441 feat: add the signed release supply chain
• 4fe22d5 feat: add the signed release supply chain (#65)
• dd738d7 fix(ci): pass the package pattern to the lint action
• d2cfb28 release: ship the local MCP read server (#62)
• 6d104e7 release: ship the local advisory investigation brain (#64)
• 5e50168 release: v0.1.0 signed supply chain (#66)
• 2628d29 test(build): verify Makefile metadata injection
• 399b3bd test(cache): prove real fleet parity and staleness
• 7e3c594 test(connector): prove real multi-cluster fan-out
• 8203b1d test(e2e): prove MCP across two clusters
• 6c248b3 test(e2e): prove fleet-wide advisory diagnosis
• bb78b19 test(e2e): prove local operations across two clusters
• 779a0ac test(e2e): prove the web IDE across two clusters
• a23f25b test(privacy): prove local no-egress invariants

Verify checksums, signatures, and provenance before installation; see docs/RELEASE.md.

Homebrew 6 trust

Homebrew 6 requires formula-scoped trust for third-party taps:

brew tap ArdurAI/tap
brew trust --formula ArdurAI/tap/sith
brew install sith

Older Homebrew versions without tap trust can omit the trust line. Do not disable tap trust or trust the whole tap.

SPDX attestation verification

Use predicate type https://spdx.dev/Document/v2.3 when verifying an attached SBOM bundle.