OSINT Forge v0.5.0

OSINT Forge v0.5.0 advances the project from raw tool execution toward entity-aware, provenance-linked intelligence workflows—the halfway point on the committed path to v1.0.

Highlights

• Introduces versioned schema-2 plugin contracts declaring accepted and emitted entity types.
• Adds deterministic candidate-entity extraction and the new osint case entities projection while keeping observations distinct from identity conclusions.
• Adds a governed theHarvester 4.11.1 integration with restrained passive defaults and deterministic domain, email, and IP extraction.
• Upgrades normalized reporting with candidate observations and traceability-integrity status while retaining schema-1 normalizer compatibility.
• Adds a resumable, exact-commit QA harness with fail-closed gates, atomic checkpoints, archive validation, hosted-check enforcement, private evidence, and tamper-evident manifests.
• Adds the canonical v1 product contract defining the three-seed-to-profile trajectory, confidence scopes, temporal status, bounded recursion, stopping conditions, and measurable accuracy criteria.

Validation

The exact release commit 72b517d505766647696f98d1f56a53d8edd712b2 passed the complete 17-stage release harness on Debian 13.6, 97 tests, all seven hosted CI jobs, two CodeQL analyses, archive parity, upgrade and clean-install paths, all eight plugin contracts, controlled live plugin execution, security/privacy/permissions checks, interruption and resume, reporting, redaction, uninstall preservation, and exact-candidate reinstall.

Upgrade

Pull the current main branch or download the v0.5.0 source archive, then run:

sudo ./scripts/install-framework.sh
osint --version
osint forge validate
osint forge doctor

See the complete changelog for the full release history.

OSINT Forge must be used only with lawful authorization. Raw tool output and candidate entities are leads, not verified identity conclusions.