Skip to content

WorldBisect 1.0.0

Marketplace
Marketplace

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Aug 09:07
· 45 commits to main since this release
v1.0.0
ed30560
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

WorldBisect v1.0.0

WorldBisect is an open-source Linux diagnostic tool that compares a known-good and a known-bad workspace to identify the smallest
tested factor that explains a failure.

This is the first stable release.

Highlights

  • Deterministic comparison of good and bad workspaces
  • Analysis of environment and workspace factors
  • Bidirectional causal verification
  • Result states:
    • PROVEN
    • SUPPORTED
    • CORRELATED
    • UNPROVEN
  • Signed Ed25519 causal certificates
  • Deterministic diagnostic bundles
  • Human-readable Markdown, JSON, JUnit, and SARIF reports
  • File-backed storage with migrations
  • Audit hash chain and content-addressed blobs
  • API, daemon, dashboard, metrics, and trace output
  • Execution timeouts, quotas, job leases, and secret redaction
  • Linux AMD64 and ARM64 packages
  • Debian and systemd integration
  • SPDX SBOM and deterministic release packaging
  • Unit, integration, race, security, determinism, and end-to-end tests

GitHub Action

WorldBisect can be used in GitHub Actions to compare two explicitly selected workspaces and publish diagnostic artifacts.

The Action provides:

  • Analysis status
  • Stable analysis ID
  • Markdown and machine-readable reports
  • JUnit and SARIF output
  • Redacted diagnostic bundle
  • Configurable experiment limits and failure policies
  • SHA-256 verification of the selected immutable release archive

Security

  • Remote command execution is disabled by default.
  • Remote execution requires canonical executable paths and permitted working directories.
  • Workspace access is protected against path, symlink, hardlink, and in-place replacement attacks.
  • Secret-looking environment variables are redacted.
  • Redacted secrets are excluded from automatic causal claims.
  • Diagnostic bundles are designed to remain secret-safe.

Supported Platforms

  • Linux AMD64
  • Linux ARM64

Important Limitations

WorldBisect only makes causal claims within the explicitly captured and tested model. A PROVEN result means that the factor was
proven within the tested evidence boundary; it does not prove that no other external factor exists.

WorldBisect does not automatically repair production systems.

License

Apache-2.0

Die bestehenden Release Notes enthalten bereits die technischen Kernpunkte. Diese Version ist stärker für Marketplace-Nutzer
formuliert und erklärt zusätzlich Action, Sicherheit und Grenzen.

Assets 9
Loading