Repository navigation
v0.7.0
v0.7.0 EvidencePack and ProofGraph Beta
v0.7.0 is a HELM AI Kernel OSS release focused on EvidencePack authority, ProofGraph hash references, verifier hardening, and release-channel lockstep publication. It does not introduce Company AI OS GA, cloud production, checkout, or connector-certification claims.
Highlights
- EvidencePack verification now rejects unmanifested, unindexed, or tampered pack contents.
- ProofGraph hash references are validated as part of the evidence path.
- Reference/demo packs were resealed and conformance signatures were indexed.
- Offline verification was validated against the published
evidence-pack.tar; tampered evidence fails verification. - Release assets, SDKs, container/chart channels, Homebrew, and downstream contract fanout were published through the release workflow.
Security and release hardening included since v0.6.0
- Guardian and kernel fail-closed fixes for PDP snapshot hashing, tainted-egress override trust, threat-gate text scanning, delegation nonce burn order, budget consumption order, and in-memory effect boundary locking.
- Release and CI hardening for GHCR manifest verification, TLA tool pinning, CODEOWNERS restoration, and release wording scoped to HELM Kernel and HELM Enterprise.
Verification
- Release workflow: https://github.com/Mindburn-Labs/helm-ai-kernel/actions/runs/28779090833
- Release assets include checksums, SBOM, OpenVEX, release attestation, EvidencePack, high-risk config, MCP bundle, Homebrew formula, cosign bundles, and version status.
- Run
make version-drift-publishedfrommainto verify current published channel drift.