v0.4.1

emBEADings v0.4.1

A privacy, packaging, and public-repository hardening release for the v0.4 technical preview.

Upgrade

python -m pip install --upgrade \
  "https://github.com/DyrtyJax/embeadings/releases/download/v0.4.1/embeadings-0.4.1-py3-none-any.whl"
embead --version
embead doctor

What changed

• POSIX cache/state roots and run directories are now owner-only (0700).
• Derived vectors, locks, reports, and checkpoints are owner-only (0600) through atomic writes.
• The source archive contains only runtime source, schemas, and required package metadata, shrinking
  from repository-scale packaging to about 84 KB.
• Release verification now fresh-installs both wheel and source archive.
• Tagged releases validate the full suite and publish GitHub build-provenance attestations.
• GitHub Actions and build tooling are pinned to reviewed revisions.
• The README now leads with the coordination problem, a 60-second install, representative output,
  evidence boundaries, and honest fit/non-fit guidance.
• Privacy-aware bug/evaluation forms, current security guidance, and documentation/research indexes
  make external evaluation safer.
• Linear requests now report the actual emBEADings package version.

Verification

• 269 tests passed locally and across the protected Linux, macOS, Windows, Python 3.11/3.14 matrix.
• Published wheel and source archive have SHA-256 receipts in SHA256SUMS.
• Both artifacts were built and installed during CI before publication.
• Release artifacts are covered by GitHub build-provenance attestations.

Boundaries

This remains a technical preview. Semantic matches are advisory, the four-worktree release gate
covers one repository layout, the Ruff corpus is a scale surrogate rather than native-Beads recall
evidence, and the agent plugin remains a local developer preview.

See CHANGELOG.md and
PR #64.