Cedra 1.0.0

Cedra 1.0.0

The first stable release of Cedra System.

Cedra prepares Debian workstations with operational knowledge, not just packages. It combines software acquisition, configuration, system integration, security policies, and repairable workstation state behind a GTK-first interface.

Highlights

• GTK GUI as the primary product experience
• Intent-driven workstation preparation
• Trust information before changes are applied
• Keyboard navigation and accessibility improvements
• Light, Dark, and Follow System themes
• Debian/APT acquisition with controlled upstream sources where required
• Repairable Desired State and idempotent maintenance
• Hardened privilege elevation, file writers, acquisition, and shell execution
• Reproducible .deb packaging

Workstation capabilities

• Git with system defaults, templates, hooks, and GitHub CLI
• OpenSSH client hardening
• KeePassXC with browser integration for Firefox, LibreWolf, and Chromium
• Firefox ESR and LibreWolf policies and desktop integration
• Visual Studio Code system policies and source-file handling
• Terminal with Alacritty, Bash completion, fzf, zoxide, eza, bat, fd, ripgrep, and tmux
• Programming fonts and monospace configuration
• Docker with Compose, service configuration, log limits, and safe maintenance
• LibreOffice document integration
• GIMP, Inkscape, Kdenlive, Calibre, digiKam, VLC, Remmina, GnuPG, Python, and ShellCheck preparation
• Additional software from controlled Debian or upstream sources

Security

Cedra 1.0.0 includes hardened path validation, symlink protection, safer privilege elevation, atomic file publishing, acquisition validation, pinned trust material, runtime configuration validation, and safer shell execution.

Verification

• 20 automated tests passing
• Reproducible package builds verified
• Installed FHS package verified
• GUI launch and primary workflows exercised
• Keyboard navigation and accessibility paths verified
• Light, Dark, and Follow System themes verified
• Multiple Knowledge capabilities tested through real Prepare and Maintain cycles
• Intentional configuration drift repaired successfully

Scope

Cedra is designed for Debian-family systems using APT. It does not require GNOME and does not manage personal documents, accounts, credentials, or arbitrary user configuration.

Some capabilities provide deep workstation preparation while others intentionally remain installation-focused. Cedra does not claim preparation where the resulting workstation state cannot be demonstrated and verified.

Full Changelog: https://github.com/ManuelGil/cedra/commits/v1.0.0