Repository navigation
v0.1.0-beta.3
Pre-release
Verified Public Beta
Apache-2.0 licensed public CLI distribution from source b076abce83fa9d9bbae3fa64218e601478b6647a (reviewed PR #16). This licenses the CLI repository, not separate Convai services or trademarks.
- All nine merged-source CI checks and the complete native release workflow passed.
- All eight release assets were downloaded without GitHub authentication. All five archive checksums/inventories pass, and each contains exact-source LICENSE, NOTICE and THIRD_PARTY_NOTICES.txt alongside README and the executable.
- All eight downloaded assets pass provenance verification constrained to this repository, release workflow, source SHA/tag and GitHub-hosted runners. The public provenance API is also anonymously accessible.
- The source SPDX-2.3 SBOM asset is
convai-cli-sbom.spdx.json(161 packages); its workflow-local subject name isconvai-cli.spdx.json. It is not a per-binary SBOM. - Downloaded macOS ARM64 executable passes installed version/help/profile/missing-credential smoke, 42 exact direct-REST command mappings and ten negative cases against a synthetic HTTPS owner. No live account, SaaS/customer resource or database was used.
Native CI covers its macOS/Linux/Windows runner architecture; it does not prove downloaded execution on every OS/CPU. macOS notarization and Windows code signing are not configured. Live SaaS/customer authorization and on-prem SSO activation remain separate gates. No npm/Homebrew/WinGet installer or hosted rollout is introduced.
Use the version-pinned assets below; beta prereleases do not establish a stable latest installer. Preserve all legal files when redistributing. Previous beta tags/assets are unchanged; use beta.3 for the licensed public handoff.