Skip to content

Releases: Keter-Lab/reality-kernel

Release list

Reality Kernel 0.2.0

Reality Kernel 0.2.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 10:12
v0.2.0
64ef9f9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Reality Kernel 0.2.0 - Adoption. From nothing to an AI agent under an enforced, least-privilege profile in a few commands.

New

  • One-command install: curl -fsSL https://realitykernel.dev/install.sh | sh picks the deb or rpm, refuses a package that doesn't match SHA256SUMS, and with cosign also refuses one not signed by this release workflow.
  • rk init: a starter profile in AUDIT that fits the host. It records every connection, exec and secret-file read, and blocks nothing.
  • rk policy suggest: turns the signed audit log into an ENFORCE profile that allows exactly what the agent did. Secrets stay denied. It never applies anything by itself.
  • docs/agents.md: a runbook your coding agent can follow, with a prompt to paste.
  • TUN/TAP containment: governed agents can no longer create or attach to TUN/TAP devices, including ones their own user owns.

Fixed

  • Audit records of an rk run agent that exits quickly keep its profile name.

Full list: CHANGELOG.md. Every claim maps to tests that pass on five kernels: docs/evidence.md.

Image: ghcr.io/keter-lab/reality-kernel:0.2.0 (linux/amd64, linux/arm64), signed. Every file is signed (*.sigstore.json), with SLSA provenance and an SPDX SBOM. Verify: docs/releases.md.

Assets 21
0 Join discussion

Reality Kernel 0.1.0

Reality Kernel 0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 14:23
v0.1.0
417189b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first release of the rebuilt, open-source Reality Kernel: network, exec and file policy for AI agents, enforced in the Linux kernel with eBPF, with a signed, tamper-evident audit log of every decision.

Install: deb / rpm / tarball / Helm · image ghcr.io/keter-lab/reality-kernel:0.1.0 (linux/amd64, linux/arm64)

What's in it: see the changelog. Every capability links to the tests that prove it on Linux 5.15–6.18: evidence.

Verify before you run it: every file has a Sigstore signature (*.sigstore.json), SLSA build provenance and an SPDX SBOM, and the image is signed. The release workflow verified all of them before drafting this release. Commands: verifying a release.

Earlier versions of Reality Kernel were a hosted API with a Python SDK; that product is retired (ADR-0016).

Loading