Truss 0.0.41 — cached schema owners and Weft 0.4.48

Truss v0.0.41

Release qualification covers local macOS ARM64 with PostgreSQL 18.6.
The clean Truss wheel is
truss_toolkit-0.0.41-py3-none-any.whl, SHA-256
b47f0b3ba4b36561ccec3fb81608156a21ddeab0682adcea6a061b914c0c4cd2.

Scope and package cohort

The package requires Python >=3.11 and admits UMF 0.10.0 source. Its
optional integrations pin weft-sql==0.4.48 for compiled queries,
umf_access==0.1.0.dev4 for the experimental typed-sdk extra, and
psycopg[binary]==3.3.6 for native PostgreSQL use. The independently versioned
Weft runtime ABI, native module, backend, owner assets and source correspondence
remain separately checked.

The current macOS ARM64 qualification used PostgreSQL and libpq 18.6, UMF core
0.10.0, UMF access 0.1.0.dev4, and Weft 0.4.48 from source revision
db1e0dc5b1ec6aec0f12646421cefc314989d974. The Weft wheel SHA-256 was
def824d16bc00f9deb50c7c63bc08a728cff631eef25cf2616032b761e1c679c; the
native module SHA-256 was
36224fd006f525e26e79ad2504bee7ffd75439ce1c8367564cfeb7c826e736a4.

Changes

The optional query integration advances to Weft 0.4.48 and enrolls the matching
current query and disclosure consumer cohorts. The experimental typed SDK is
now exposed as an optional typed-sdk extra. Immutable installed query and
disclosure owner assets are verified once per process; source inputs continue
to be checked at each admission.

The clean wheel contains the 412 runtime files in the package source tree with
no missing, extra or mismatched runtime files. Its metadata includes the exact
query, typed-SDK and native optional dependency pins listed above, and all three
declared license files.

The bundled query/disclosure owner JavaScript assets and native SQL are unchanged from
v0.0.40. The three real-schema workflows and eleven stress cases are retained
from the v0.0.40 qualification and were not rerun for this draft. Their earlier
results do not constitute new v0.0.41 qualification.

Completed checks and limits

On local macOS ARM64, the focused cohort and originals controls passed 11/11.
The focused current-query and current-disclosure PostgreSQL runtime selectors
passed 9/9 against an existing PostgreSQL 18.6 cluster. No cluster lifecycle
changes were made. These are focused checks, not a full test-suite result.

Linux x86_64 Weft 0.4.48 packaging was checked for the wheel archive, RECORD,
metadata, ABI tag and notices. Its wheel SHA-256 is
8226b0cbc17b611abaaff30357aad7230e135fa713c8d3d4e05e0536a6d9a2c3, and its
native module SHA-256 is
de3289ad3d8779bd2e347c15379596495acb08381741991935b6f85c7a24b2fc. The
Python shim matches the macOS artifact. No Linux native functionality tests
were run. Windows qualification is not claimed. The three schemas and eleven
stress cases were reused from v0.0.40 evidence without rerunning them for this
release.

Source commit: da80416f8f918b84371cb9a6840db1ca84328412.