0.1.0-alpha.2 - 2026-09-01

Release Notes

Second developer preview focused on installability, a more complete Hub
interface, and repeatable releases. It adds downloadable CLI artifacts and
hostable server images while preserving Sorrel's prerelease boundaries.

Added

• Add automatic coordinated changelog preparation (#73).
• Publish hostable Sorrel server releases (#75).

Changed

• Test rendered Hub UI behavior (#55).
• Use current logo on public website (#56).
• Improve mobile navigation accessibility (#58).
• Report only implemented Hub capabilities (#60).
• Forward Hub bearer tokens from the CLI (#61).
• Overhaul public website design (#62).
• Share Hub web server implementation (#63).
• Replace deprecated Rust YAML parser (#65).
• Build Hub web from its declared UI package (#69).
• Polish CLI installation and contribution workflow (#71).
• Overhaul public documentation design (#72).
• Establish review-first Sorrel Hub product interface (#74).

Removed

• Remove confirmed dead code (#64).
• Remove unused Rust SDK dependencies (#67).
• Eliminate redundant Rust clones (#68).
• Remove agent project mirroring workaround (#70).

Fixed

• Guard module test inventory against release manifest (#57).
• Reject unsupported run log following (#59).
• Correct policy conformance architecture notes (#66).

Security

• Published server images run as non-root users, include provenance and SBOM
  attestations, and ship with a localhost-only, read-only Compose example.
• Hosting the images on an untrusted network still requires a production
  AuthAdapter and carefully scoped bootstrap grants; development auth and the
  insecure-demo override are not production-safe.

Known limitations

• This remains a prerelease. Protocol, CLI JSON, Rust APIs, and persisted
  formats may change before 1.0, and general workspace/Hub migrations are not
  available yet.
• Hub production sessions and login UI remain incomplete. WorkOS sealed
  sessions, IdP login, and a production authorization-provisioning path are not
  shipped in this release.

Install sorrel-cli 0.1.0-alpha.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/MGRAFF2006/sorrel/releases/download/v0.1.0-alpha.2/sorrel-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/MGRAFF2006/sorrel/releases/download/v0.1.0-alpha.2/sorrel-cli-installer.ps1 | iex"

Download sorrel-cli 0.1.0-alpha.2

File	Platform	Checksum
sorrel-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
sorrel-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
sorrel-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
sorrel-cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
sorrel-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Run the Sorrel server images

This release also publishes public Linux amd64/arm64 images for the Hub API and browser host. For a localhost preview, download and verify the release deployment files:

curl -LO https://github.com/MGRAFF2006/sorrel/releases/download/v0.1.0-alpha.2/sorrel-server.compose.yml
curl -LO https://github.com/MGRAFF2006/sorrel/releases/download/v0.1.0-alpha.2/sorrel-server-images.txt
curl -LO https://github.com/MGRAFF2006/sorrel/releases/download/v0.1.0-alpha.2/sorrel-server-assets.sha256
sha256sum --check sorrel-server-assets.sha256

Start the localhost-only development stack:

SORREL_VERSION=0.1.0-alpha.2 \
SORREL_HUB_ALLOW_INSECURE_DEV_AUTH=1 \
docker compose --file sorrel-server.compose.yml up --detach --wait

The insecure development-auth flag is suitable only for this localhost preview. Before exposing Sorrel to an untrusted network, configure a production AuthAdapter and network controls and leave that flag disabled. See the deployment boundary and getting-started guide for details.