Skip to content

Bello 0.7.2

Latest
Latest

Choose a tag to compare

View all tags
@Makson179 Makson179 released this 08 Oct 22:17
v0.7.2
a663b73
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Safer interrupted-run handling: eligible controller runs can continue only after protected state, consumed budgets and previous-worker cleanup have been checked. Uncertain side effects and final workspace updates are not blindly replayed.
  • Updated Pi to 1.0.4 and Claude Agent SDK to 0.2.164, paired with managed Claude CLI 2.1.293. New primary-role configurations use GPT-6 Astra; saved model choices are preserved.
  • Clearer completion after adversary review, with Windows snapshot, watcher-lifetime and drive-root fixes.
  • Managed Codex 0.161 helpers for optional Smart Execution and log distillation on Linux x64, Windows x64 and macOS arm64. These helpers are separate from the ordinary user-managed host Codex CLI.

Verification

Qualified source: 41325958fe81eb2b6c4eee59a93b69f62c0b4789, tree 339952833f74ae93758f3d145ae0dede8c4e2f32. Release integration is tracked in PR #39.

The final-source local gate passed 4,580 Python tests, 133 Node tests and 24 real offline Pi tests. All eight source CI workflows passed, covering cross-platform tests, Windows sandbox and restoration, Claude on Windows, package builds and five clean-install configurations, native Linux/Windows, native macOS, archive installation, and production HTTPS installation.

Production pins identify actual archive and manifest hashes from the managed native helper release. Both Windows HTTPS configurations qualified the same pinned Windows archive. Native qualification uses real binaries, a synthetic loopback provider and four actual CPU ModernBERT inference cases plus two protected-output bypass controls; it does not claim live-provider quality or fresh compilation for cache-hit builds.

Compatibility and safety

Automatic crash continuation is conditional. Linux and Windows require native descendant-cleanup checks. macOS fails closed after a controller crash because owned process groups cannot prove cleanup of arbitrary detached descendants. Unknown side effects, unverified launchers, active children, approvals/reviews and unsafe final-apply phases require manual inspection instead of blind replay.

The native Windows qualification does not establish arbitrary public-path read confinement. Apple Developer ID signing/notarization is not claimed.

Bounded live Pi, Claude, Codex and mixed-engine fixtures passed on earlier source 0bbe6e35, not the final release bytes. One Pi post-cancellation worker notification remains unexplained despite successful continuation; that observation is not discarded.

Assets 2
Loading