RAVE v0.2.1 - Strict Policy Hardening & Loader Reliability
RAVE v0.2.1
Highlights
This patch release hardens strict-mode guarantees, improves loader reliability on Linux/WSL, and stabilizes non-GPU CI behavior while preserving existing runtime behavior for normal profiles.
What Changed
Strict policy and validation hardening
- Centralized strict profile wiring so
production_strictbehavior is consistent across command paths. - Added policy snapshot output for
upscale,benchmark, andvalidate(additive JSON fields only). - Enforced determinism policy in strict mode: required hash paths now fail clearly when unavailable.
- Enforced strict no-host-copies capability: strict mode fails fast if host-copy auditing is disabled/unavailable.
No-host-copies and pipeline boundary auditing
- Added stage-level no-host-copies sentinel checks across decode/preprocess/inference/encode boundaries.
- Added stable audit status/reason reporting in validation output.
Config guardrails
- Added shared batch-config validation and fail-fast behavior for unsupported micro-batching.
max_batch > 1is now rejected with actionable messaging until micro-batching is implemented.
Linux/WSL loader robustness
- Included
validatein Linux ORT loader re-exec gating. - Centralized re-exec gate logic with unit tests.
- Refactored ORT provider directory resolution into testable logic with improved diagnostics.
Link/load stability for non-GPU builders
- Removed hard CUDA link-time assumptions in CLI/core/cuda paths by runtime-loading CUDA driver symbols where needed.
- Added CI-safe strict validation path on non-GPU runners using mock mode.
FFmpeg state-machine hardening
- Added deterministic permutation/property tests for BSF EAGAIN/EOF/flush-drain handling.
- Fixed clippy issues in new permutation tests.
Dependency and process hygiene
- Tightened crate boundary policy (
check_deps) by removing unused allowed edges. - Added unsafe-boundary audit checklist and opt-in sanitizer workflow.
- Restored executable bits for docs/deps check scripts used in CI.
CI/Tooling updates
- Ubuntu CI now installs required FFmpeg development packages.
- Strict validate fixture runs with
audit-no-host-copiesenabled. - Added publishing helper script and release wiring for crate version
0.2.1.
Published crates (0.2.1)
- rave-core
- rave-cuda
- rave-ffmpeg
- rave-nvcodec
- rave-tensorrt
- rave-pipeline
- rave-cli
Notes
production_strictis intentionally stricter and may fail where earlier builds tolerated degraded paths.- Non-strict/default profile behavior remains unchanged.