Skip to content

Polymorph 0.4.0a4 - Product Surface

Pre-release
Pre-release

Choose a tag to compare

@IamAngusU IamAngusU released this 12 Sep 12:15
· 14 commits to main since this release

Polymorph 0.4.0a4 turns the alpha into a much easier product to try and embed without weakening its trust model.

Try it without setup

Download polymorph-demo.html and open it locally. It uses synthetic data, needs no account or network, runs no model, and performs no destination write.

For the full local evidence runner, download Polymorph-Run-v1.1.0.zip.

What is new

  • Public connector registry for CSV, JSON/JSON5, Excel, Parquet, SQL databases and HTTP JSON.
  • Content-based source resolution with explicit-only destinations.
  • Opt-in third-party connectors through polymorph.connectors Python entry points.
  • Connector conformance checks without opening an endpoint.
  • Versioned payload-free product events with English and German message catalogs.
  • Callback, composite and bounded async queue event sinks.
  • Explicit move(...).prepare() then execute() embedded API.
  • Honest review_required, blocked, not_committed, committed-prefix partial and unknown outcomes.
  • Local responsive HTML demo and polymorph connectors explorer.

Verified locally on Windows

  • Compile, Ruff, repository format and strict mypy passed.
  • 1,224 tests passed and 8 platform-dependent tests skipped with warnings treated as errors.
  • Focused connector, quota, HTTP, Parquet, audit and isolation suite: 278 passed, 7 skipped.
  • validate_local.py passed three independent secure-workflow runs and gates.
  • World Benchmark and longitudinal evidence bundle passed without upload.
  • Wheel and sdist passed Twine, the sdist contains all 276 release files, and a clean venv installed and exercised the final wheel.

These are local release observations, not universal performance or security promises. The embedded convenience write path is same-process, requires a content-inspected immutable file source, and refuses secret or opaque forwarding. Use the secure agent and ciphertext-only relay path when endpoint separation matters.

GitHub Actions remain intentionally disabled. This release was built, tested and uploaded locally.