Skip to content

Polymorph 0.4.0a3

Pre-release
Pre-release

Choose a tag to compare

View all tags
@IamAngusU IamAngusU released this 12 Sep 11:39
· 16 commits to main since this release
v0.4.0a3
6f4d256

Polymorph 0.4.0a3

A security and bounded-work pre-release focused on honest connector outcomes, practical streaming and locally verifiable release evidence.

What changed

  • Shared finite WorkBudget limits for direct CSV, HTTP JSON and Parquet operations.
  • Streaming atomic CSV rewrites instead of rebuilding the complete destination in RAM.
  • HTTP JSON depth, node, value, aggregate-byte and cross-page record limits.
  • Exact HTTP request-byte accounting, unread destination response bodies and structured PartialConnectorWriteError committed-prefix evidence.
  • Parquet row, row-group, metadata, uncompressed, nesting and decoded-batch limits.
  • Windows Job Object CPU, memory, process-count, descendant and kill-on-close enforcement.
  • Streaming audit verification, summaries and atomic JSONL export plus no-deletion admission quotas.
  • CycloneDX SBOM, source-tree digest, artifact manifest and offline verifier.
  • An eight-case multilingual adversarial ambiguity corpus.

Local evidence on the release host

  • 1,215 tests passed and 8 environment-specific tests skipped with warnings treated as errors.
  • Compile, Ruff, formatter, strict mypy, dependency checks and validate_local.py passed.
  • Three encrypted 1,000-row workflow runs and the local World Benchmark passed.
  • A 1,000,000-row CSV rewrite appended 500,000 rows at 184,939 rows/s with a measured 9,613,312-byte RSS increase over baseline.
  • The adversarial ambiguity corpus produced zero automatic and zero unsafe automatic decisions. Review-suggestion accuracy was only 25%, retained explicitly as an improvement target.
  • Wheel, sdist, Twine checks, 268-file sdist contract and a clean Python 3.11 wheel install passed.

Honest boundaries

  • Windows Job Objects provide resource and descendant containment, not filesystem or network isolation. AppContainer remains open.
  • The isolated worker still covers content inspection only. Full CSV, JSON, Excel and Parquet parsing needs a bounded framed protocol and backpressure.
  • Linux cgroup v2, coordinated relay/outbox/quarantine quotas, external audit witnessing and deployable service agents remain roadmap work.
  • The real PostgreSQL harness exists, but this host still has no local PostgreSQL/Docker prerequisite for a full external commit-fault run.
  • The SBOM and manifest are hash-verifiable but not identity-signed; Sigstore/GPG requires an operator-controlled identity or key.
  • GitHub Actions remained repository-wide disabled throughout this release.

Start with START-HERE.md or START-HERE.de.md. Verify downloads with SHA256SUMS.txt and release-manifest.json.

Assets 8
Loading