Skip to content

Colonizer v0.2.10

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Oct 10:22
Immutable release. Only release title and notes can be modified.
v0.2.10
679d7d3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Colonizer v0.2.10

Queued colonies can jump the line

Colonies waiting to start now go in order of priority, then age (#1156).

  • Each org has a Queue priority setting: High, Normal or Low.
  • On a queued colony, Move to front and Move to back put that one colony first or last. They are also in the Overview table.
  • An org's max_wait_hours lifts a colony that has waited too long to High.
  • The Nest header says which colony is next up.
  • The global, org and per-repository limits still apply.

The Nest badge counts issues, not pull requests

The frontier badge used to count open pull requests, forks and archived repositories as well, and
on one install it read 2671 (#1144). It now counts only open issues in the repositories you colonize, and it
refreshes on its own instead of freezing at page load. The tooltip reads "21 open issues in 5
repositories you colonize".

Security status

Colonizer is alpha and not ready for unattended work on sensitive repositories, real credentials
included. An external audit of v0.1.3 (commit d89ce76, 17 September 2026) found four ways a
colony could cross into the host; they are filed as draft advisories (F01–F04) and are not fixed
yet, and its four release checkpoints (G1–G4) are all uncleared. Controls added since — scoped
tokens, remote-access fencing, sensitivity-aware routing, gateway audit lines, log and secret
redaction, path policy, egress and exec policies — do not close those findings, so attended work is
what the harness is good for today. The live status is
docs/audit.md and its tracking
issue (#91); report vulnerabilities privately
through SECURITY.md.

Prebuilt Colonizer for Linux x86_64 (with KVM) and Apple Silicon Macs, built from 679d7d3.

curl -fsSL https://colonizer.dev/install.sh | sh

The installer checks the archive against SHA256SUMS. It fetches the Claude Agent SDK from the npm registry, and on a Mac the Linux build of Claude Code, from Anthropic's own channels: neither is in the release. Guide: https://colonizer.dev/docs/install

Each artifact, SHA256SUMS included, also carries a build-provenance attestation recording the commit that built it. Verify one with:

gh attestation verify colonizer-<platform>.tar.gz --repo Colonizer-dev/harness

Here is linux-x86_64 or darwin-arm64.

Apple Silicon Macs can also use Colonizer-arm64.dmg: an unsigned app, so macOS asks you to approve it once (System Settings > Privacy & Security > Open Anyway). The curl installer above is the recommended path.

79aaa97b1ed11a2b9b4a41a121456be4331ba33ba9815b255dec0e85f2211d0d  colonizer-darwin-arm64.tar.gz
a7098b4e31683418bc435fdd8f9e417a9a5d2e9f15ca9e9512065e036ad6da0a  colonizer-linux-x86_64.tar.gz
bdc46120e2d4a2709f0c24cf73d6f6d8eaba71b2055f4716c9d30945a0f2370a  Colonizer-arm64.dmg
4293bed20d991fb79164e457163a058fb362f10e480c0588e0edac4d3ffd7b4b  install.sh
Assets 8
Loading