Bridlewise v0.0.3-preview (developer preview)

Developer preview. Not production-ready. Do not use Bridlewise with sensitive, proprietary, regulated, or production codebases. Every release is a preview: the source, cockpit build, and engine bundle are attached for inspection, not for deployment. Read the repository warning and SECURITY.md before running anything.

Full Changelog: v0.0.2-preview...v0.0.3-preview

Bridlewise v0.0.2-preview (developer preview)

Bridlewise v0.0.2-preview

Developer preview. Not production-ready. Do not use Bridlewise with sensitive, proprietary, regulated, or production codebases.

The harness reports harnessReady: false. Every release is a preview, not a support commitment.

This release turns the public repository into a run record: intent → boundary → tool → effect → check → finding → decision → release. The product is a local-first coding cockpit; the repository is its flight recorder.

What changed

• Run 0001, an interactive synthetic causal record with eight beats, an evidence inspector, a typed refusal, a redaction, and a release held by the operator.
• Policy lab, an illustrative governance console where capability toggles change a modeled receipt and git_commit is permanently refused.
• The repository is a run record, an evidence ladder, a glossary, a reading map, and a candid known-issues register.
• GitHub-native checks: four required checks on main (build, secret scan, relative docs links, and CodeQL), a protected v* tag ruleset, and a docs site with command-palette search and a custom 404.
• Supply-chain receipts: SPDX SBOMs for the web and engine trees, a GitHub build-provenance attestation, and SHA256SUMS for every asset.
• Dependency and analysis cleanup: all audited trees report 0 vulnerabilities; Dependabot and the current CodeQL security-query queue report 0 open alerts. Test-only and false-positive findings are dismissed with path-specific reasons, not silently closed.

Assets

Asset	What it is
bridlewise-v0.0.2-preview-source.tar.gz	The tracked source tree at the release tag
bridlewise-v0.0.2-preview-cockpit.tar.gz	The built static cockpit
bridlewise-v0.0.2-preview-engine-bundle.js	The esbuild engine bundle
bridlewise-v0.0.2-preview-sbom-web.spdx.json	SPDX SBOM for the root package
bridlewise-v0.0.2-preview-sbom-engine.spdx.json	SPDX SBOM for the engine package
SHA256SUMS	Checksums for all assets

Verify

sha256sum -c SHA256SUMS
gh attestation verify bridlewise-v0.0.2-preview-source.tar.gz \
  --repo LLM-4-People/bridlewise

The attestation is a GitHub-hosted build-provenance record signed under GitHub's OIDC identity. It is not an OS package signature, a maintainer signature, a reproducible-build proof, or a security audit.

Read before running

• The run record
• Policy lab
• Quickstart
• Security and limits
• Known issues

The full corpus-backed development-floor suite is not reproducible from this release; the public smoke suite is. Linux is the only platform with Landlock confinement. There is no hosted demo and no support SLA.

Bridlewise v0.0.1-preview (developer preview)

Developer preview. Not production-ready. Do not use Bridlewise with sensitive, proprietary, regulated, or production codebases. Every release is a preview: the source, cockpit build, and engine bundle are attached for inspection, not for deployment. Read the repository warning and SECURITY.md before running anything.

Full Changelog: https://github.com/LLM-4-People/bridlewise/commits/v0.0.1-preview