Skip to content

SkillTape v0.2.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 06:55
· 9 commits to main since this release
v0.2.3
9f6bec5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SkillTape 0.2.3 brings the recent output checks and saved-delivery review into the packaged CLI and Console.

  • Require regular output files with repeatable verify --expect-file PATH. Missing files produce an assertion-failed Receipt and exit 3; failed verification does not publish a delivery directory. Paths are relative to the output root, bounded to 64 requirements of 1024 bytes each, and validated before Replay.
  • Open the packaged Console's Delivery workbench to discover saved bundles, inspect their actual files and hashes, and compare a baseline with a replacement. Native physical inspection currently requires POSIX; existing Windows views remain available.
  • Preserve literal Capture arguments with repeatable --arg, and handle Unix Replay/Verify cancellation with exit 5 and optional cancelled Receipts.
  • Include stable bounded exports, no-overwrite delivery publication, bounded Tape paging and retained-data limits.

Install

Download the archive for Linux x86_64, Intel Mac, Apple Silicon Mac or Windows x86_64 together with checksums.txt, then verify the archive before extracting it. Each package includes the CLI, Console API companion and Console UI. The repository installation guide provides pinned installer commands and safe update steps.

Linux Replay/Verify require Bubblewrap and available user namespaces; macOS uses /usr/bin/sandbox-exec. Windows Replay/Verify remain fail closed. File existence, physical integrity and execution success do not establish business correctness or authenticated provenance.

Source

This release is built from verified main commit 9f6bec579258baa63234139af0fae650d9efdbd2 by release run 38862770537. Archive provenance, SPDX SBOMs and SHA-256 checksums are required by the release workflow. Historical versions and their assets remain available.

Independent installation check

All nine public asset digests and eight archive/SBOM checksum entries matched
the downloaded files. Native Mac archive attestation verification passed. An
isolated Apple Silicon install from this release passed packaged Console API/UI
checks. The installed CLI accepted an existing required file, rejected a missing
file with assertion_failed/exit 3 without publishing a delivery, and rejected an
unsafe path with exit 2. These checks used local synthetic files only.

Assets 11
Loading