Constellation 0.28.0 — Development preview

Constellation 0.28.0 is a development preview, continuing work toward 1.0. This release is build 40 and retains the conversation-and-canvas interface, existing permissions and validation limits.

Changes

• Compile common AITK stats, timechart and raw-table recipes from verified fields into matching SPL and native chart bindings. Preserve event-versus-measurement counts and temperature exclusions; format ordinary aggregate tables for readability.
• Keep an all-entity Overview independent of detail selections during ordinary new SPL dashboard creation. Destination searches receive the row filter, with shared searches isolated automatically. Existing/imported and advanced dashboards retain their established editing paths.
• Honor an explicit verified raw-field list in an eligible new table's query and visible columns before actual search validation. Improve compact recovery feedback for required chart counts.
• Keep Ollama's previously qualified pipeline format; wider recipe-schema trials were not reliable enough to enable there. No new UI controls, privileges, draft migration or larger recovery budget are introduced.

Verification

• Final-package non-admin qualification completed 18 two-page creation/editing flows and 72 turns across OpenAI, Ollama and managed AITK, using real CPU, reachability and freezer datasets. Draft/conversation reopen, selected edits, drilldowns and private native Studio copies passed, with peer access denied.
• All six AITK creations needed no model repair. Two Ollama freezer creations recovered within the existing three-call limit. These are bounded operated samples, not provider-wide success rates or production latency guarantees.
• Independent read-only synthetic probes checked all 72 resulting source transformations, Overview/detail scoping, missing values and temperature boundaries: 150°F retained, 150.1°F and 180°F excluded, independent Wi-Fi/event counts preserved. Fixture rows were neither ingested nor sent to inference.
• CI passed all four jobs: 394 Python tests on both 3.9 and 3.13, 105 frontend tests, production build/package and secret scanning. AppInspect 4.3.1 precert reported zero errors/failures/future failures, seven warnings and one skip.
• The exact archive installed on Enterprise 10.2.8 and 10.4.4. This cohort's complete provider journeys ran on 10.2.8 / Studio 1.23.12, one search head; the second target received installation verification only.

Remaining limits

One natural TLS connection reset affected the acknowledgement of an already-delivered AITK edit. The edit and persistence passed, but acknowledgement cleanup was not confirmed; bounded reply retention/expiry remains the backstop. Three controlled lost responses recovered without inference replay. The network/server root cause is not established.

Ollama repairs/tail latency, redundant unit-confirmation suggestions, delivery/tab-storage review, broader native/SPL2/imported scenarios, second-target provider journeys, longer deployment trials, unaided UX/accessibility and bundle size remain 1.0 gates. Actual-data previews can be bounded or partial. This is not production qualification, full native parity or Splunk Cloud certification.

Downloads and upgrading

• constellation-0.28.0.tar.gz: installable Splunk app, byte-identical to the qualified package. No macOS sidecar files, folders or extended tar metadata.
• constellation-0.28.0-handoff.zip: the same app plus the user guide and reviewed documentation, with an embedded checksum receipt.
• constellation-0.28.0-user-guide.md: standalone guide; use the handoff bundle for its related documents.
• SHA256SUMS: SHA-256 receipts for all three downloadable artifacts.

Review the installation instructions, upgrade guide, AITK setup and full validation summary. Refresh workspace tabs after updating. Draft schema remains 3. Configure credentials in Splunk; none are supplied. No first-party open-source license has been selected.

App SHA-256: 959cbebdde304728acde0fc495321ae879f69c659602d5fd4cf0511c6a51d00e.

Dependency notices · October 29, 2026

This historical installer uses the same pinned non-development dependency paths, versions and integrity records as 1.0.0. The added THIRD_PARTY_NOTICES.zip supplies upstream notices omitted by the original collector; keep it with redistributed copies. Original installer, handoff, guide and runtime tag bytes are unchanged. SHA256SUMS now also covers the supplement. The maintained release line is 1.x. See the notice sources.