Skip to content

Engram v3.0.0 — Native installers and observability

Choose a tag to compare

View all tags
@Jxyden34 Jxyden34 released this 25 Oct 18:01
· 28 commits to main since this release
v3.0.0
6f11ae0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Engram v3.0.0 adds native setup packages with prebuilt application images, an administrator observability dashboard and improved dark scrollbars. Server health, OpenAPI, MCP, the web package and DR monitor now report 3.0.0.

Downloads

  • Windows x64: extract engram-v3.0.0-windows-amd64.zip and open EngramInstaller.exe.
  • Linux x64 / ARM64: extract the matching engram-v3.0.0-linux-ARCH.tar.gz and run EngramInstaller. Verify its checksum and signed provenance first.
  • macOS Intel / Apple Silicon: open the matching engram-v3.0.0-macos-ARCH.dmg, then Engram Installer.app.
  • Windows Store preparation: the unsigned *-store-submission.msix and *-store-identity.json are publisher preparation files. They use a preview identity until Partner Center values are configured; Microsoft signs only after Store acceptance.

Docker Desktop with Linux containers is required on Windows/macOS. Linux requires Docker Engine and Compose 2.24.4+, with glibc 2.35+ (Ubuntu 22.04+ / Debian 12+). Engram application images are included; third-party services and optional models download during setup. Python and local application compilation are not required.

New Linux hosts

curl -fsSL https://raw.githubusercontent.com/Jxyden34/Engram/v3.0.0/install.sh | sudo bash

The interactive Ubuntu/Debian bootstrap checks the released archive's SHA256 and asks before installing prerequisites. The wizard generates private configuration and independent secrets, creates an administrator and opens the login page after health verification. Existing installation folders and Docker resources are preserved.

Linux archives include .sigstore.json bundles and VERIFY-LINUX.txt. For each archive, use GitHub CLI with the matching bundle:

gh attestation verify ARCHIVE.tar.gz --bundle ARCHIVE.tar.gz.sigstore.json \
  --repo Jxyden34/Engram \
  --signer-workflow Jxyden34/Engram/.github/workflows/installers.yml \
  --source-ref refs/tags/v3.0.0 \
  --source-digest 6f11ae06bcc8e8be7846acf62442df745e9ae4c2 \
  --deny-self-hosted-runners

Existing deployments

Use the upgrade guide, not the fresh-install wizard. Back up database/object storage, retain application images and host configuration, rebuild/recreate the application services, and add the gateway's read-only /install.sh mount. No additional schema migration is needed from v2.8.0 with migrations 013–017 already applied.

Qualification

The release pipeline runs fresh x64/ARM64 Linux installations, five native compile/self-test/package jobs, Windows SDK MSIX pack/unpack validation and signed Linux provenance verification. Backend, web, mobile, Docker, isolated DR and CodeQL checks also pass; the backend suite contains 78 tests.

Direct Windows ZIPs and macOS DMGs remain unsigned desktop previews, pending platform signing and real Docker Desktop device qualification. SDK validation does not establish Store acceptance. Linux provenance proves build origin and archive integrity, not an OS trust certificate. Native mobile and Gmail retain their separate preview status. Commercial/team draft features are excluded.

See the installer guide and changelog.

Blackwall deployment: v3.0.0 is live at https://memory.hindley.tech. Public authentication, project isolation, MCP, real-Ollama retrieval/Reflect, memory lifecycle, document upload/S3 download/worker ingestion, logout and administrator observability checks passed. Production source counts/fingerprint matched after canary cleanup; protected backups and rollback images are retained.

Assets 18
Loading