Skip to content

Vibe Coding Production Kit v0.9.3

Latest
Latest

Choose a tag to compare

View all tags
@Moeeryani Moeeryani released this 06 Oct 00:10
· 219 commits to main since this release
v0.9.3
dc3c6a6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

Evidence-backed control plane hardening

The candidate accumulates the completed post-v0.9.2 control-plane stages:

  • bounded Git-aware fresh review and Source-of-Truth freshness;
  • verification provenance and workspace/monorepo semantics;
  • project-sensitive security profiles;
  • deterministic prompt behavioral evaluation;
  • explicit architecture fitness functions;
  • release-candidate automation with retained exact-revision evidence;
  • deterministic local community profile/plugin loading with explicit digest pins and capability grants.

Release automation without automatic approval

Stage 9 adds vcp release-check <version>.

Preview mode checks static release contracts without running npm packaging/publish-dry-run/install/update mechanics.

Run mode may execute:

  • npm pack --json;
  • npm publish --dry-run --json;
  • local install smoke from the generated tarball;
  • a local lifecycle smoke starting from the retained previous release tag;
  • post-update framework/Doctor/idempotence checks.

It never executes:

  • npm publish;
  • tag creation, movement, deletion, or recreation;
  • GitHub release creation;
  • deployment.

A green report means the declared candidate mechanics passed. Actual publication and immutable tag creation remain HUMAN DECISION actions.

Community profiles without executable plugins

Stage 10 adds vcp plugins and an opt-in declarative plugin model.

Selected bundles are local, text-only, versioned, digest-pinned, and explicitly granted capabilities. Guidance may enter bounded context; verification commands remain proposals and are never copied into AGENTS.md or executed automatically.

This does not implement a plugin runtime, remote marketplace, or native mobile profile support.

Lifecycle

The candidate adds an explicit migration:

0.9.2 → 0.9.3

which composes with the existing historical chain.

Historical release identity

v0.9.2 remains immutable:

  • annotated tag object: 5693eec39f8ba24c77b5634534bff094b369880a;
  • release commit: 3fba0ecc963ca896f091442bc250139c67b64ce8.

Stage 9 checks this identity but never mutates it.

Release identity

  • npm: vibe-coding-production@0.9.3
  • release commit: dc3c6a6
  • previous immutable release: v0.9.2
Assets 2
Loading