Open Cloud Assistant v0.3.0

Open Cloud Assistant v0.3.0

Release date: 2026-08-11

v0.3.0 is the reliability, isolation, infrastructure-as-code, and operational
evidence release.

Highlights

OS-sandboxed self-repair

The restricted OpenCode editing stage now runs through Bubblewrap on the
validated Ubuntu ARM64 host.

The sandbox:

• replaces the normal user HOME with an isolated ephemeral sandbox HOME;
• masks the live Hermes target;
• keeps the host filesystem read-only by default;
• exposes controlled writable host-backed paths for staging and sandbox HOME;
• preserves the trusted outer validation, backup, deployment, and rollback
  lifecycle.

Ubuntu AppArmor unprivileged-user-namespace hardening remains enabled. The
Ubuntu-provided Bubblewrap profile is used instead of globally disabling that
host restriction.

Deterministic acceptance performs no provider/model calls.

OCI Terraform

A focused Terraform deployment now exists under:

infra/terraform/oci/

It defines:

• VCN;
• public subnet;
• Internet Gateway;
• route table;
• SSH CIDR restriction;
• Canonical Ubuntu 24.04 compute discovery;
• OCI compute;
• SSH public-key injection;
• cloud-init bootstrap;
• optional installer handoff.

Terraform state, real variable files, OCI credentials, and private keys remain
outside public Git.

The OCI provider lock includes Linux amd64 and arm64 checksums.

Hosted Terraform configuration validation passes on x86_64 and ARM64.

This release does not claim that CI created OCI resources.

Operational evidence

A sanitized operational evidence collector now records point-in-time runtime
facts without publishing raw logs or personal assistant data.

The first committed real-host snapshot observed:

• Ubuntu 24.04 ARM64;
• OpenCloud doctor PASS;
• Fleet registry timer active and enabled;
• Fleet verifier timer active and enabled;
• Hermes gateway active and enabled;
• user linger enabled;
• 133 hours of host uptime at the observation point;
• 10 successful scheduled-job completions observed in the current Hermes log;
• 0 failed scheduled-job completions observed in that log.

These are point-in-time observations, not an SLA, SLO, or claim of
uninterrupted availability between evidence collection points.

The collector excludes prompts, assistant responses, job payloads, Vellum
personal memory, credentials, IP addresses, session identifiers, raw Fleet
databases, and raw Hermes logs.

Release engineering

v0.3.0 also includes:

• semantic CLI version output;
• documentation consistency cleanup;
• dual-architecture CI coverage;
• deterministic Fleet fault injection;
• bounded Hermes concurrency proof;
• self-repair rollback fault injection;
• service persistence validation;
• public audit and release gates.

Validation boundaries

Validated:

• Ubuntu 24.04 ARM64 real-host operation;
• ARM64 clean-install release path from the previous validated baseline;
• hosted x86_64 source/smoke compatibility;
• hosted ARM64 source/smoke compatibility;
• deterministic reliability suite;
• real ARM64 self-repair OS-sandbox acceptance;
• Terraform configuration validation on amd64 and arm64;
• CLI operator path.

Not claimed:

• real x86_64 machine acceptance;
• Telegram public E2E acceptance;
• Discord public E2E acceptance;
• release-validated Browser/Open WebUI runtime;
• provider latency SLOs;
• continuous-availability guarantees;
• Terraform apply against every OCI tenancy or region.

Historical releases

The v0.2.0 and v0.1.0 tags remain immutable historical release points.

Open Cloud Assistant v0.2.0

Open Cloud Assistant v0.2.0

Released: 2026-08-10

Open Cloud Assistant v0.2.0 closes the core public installation,
reliability, operations, and release lifecycle.

Highlights

• Dynamic free-first model Fleet.
• Hermes bounded parallel-worker orchestration.
• Vellum personal-context and memory integration.
• Deterministic Fleet failure and recovery tests.
• Restricted self-repair with staging, validation, backup, and rollback.
• Automatic Ubuntu prerequisite bootstrap.
• Ownership-aware safe uninstall.
• Runtime-integrity doctor.
• systemd persistence and controlled recovery validation.
• GitHub Actions validation.
• Reproducible release gate.

Architecture

User or channel
|
v
Hermes
/
workers Vellum
\ /
synthesis
|
v
User

Hermes is the user-facing orchestrator.

Temporary child workers perform bounded parallel execution.

Vellum provides deterministic personal context and memory to Hermes.

Hermes and Vellum maintain separate model Fleet and fallback health state.

Reliability evidence

The repository includes deterministic tests for:

• candidate isolation and recovery;
• rate-limit failover;
• server-error failover;
• network failover and recovery;
• provider cooldown recovery;
• three concurrent Hermes executor workers;
• invalid staged repair rejection;
• trusted pre-deployment backup creation;
• rollback after simulated deployment validation failure;
• service persistence configuration;
• controlled runtime service recovery.

Synthetic worker timing measurements are test-harness measurements only.
They are not model-provider latency measurements or production SLO claims.

Quick start

git clone https://github.com/Mukeshkr-19/OpenCloudAssistant.git
cd OpenCloudAssistant
./setup.sh --install
./bin/opencloud doctor

Operations

./bin/opencloud doctor
./bin/opencloud uninstall
./bin/opencloud uninstall --yes
./bin/opencloud release check

Validation scope

Validated:

• Ubuntu 24.04 ARM64 real clean-machine installation.
• ARM64 installation idempotency.
• x86_64 hosted-CI and source compatibility.
• CLI core path.
• Fleet reliability behavior.
• Hermes bounded concurrency.
• Self-repair validation and rollback.
• Service persistence configuration.
• Controlled service recovery.
• Public security audit.
• Release gate.

Not claimed:

• Real x86_64 machine acceptance.
• End-to-end validation of every optional channel.
• Production browser support.

Browser integration remains preview.

The historical v0.1.0 prerelease tag remains unchanged.

Open Cloud Assistant v0.1.0

First public prerelease of Open Cloud Assistant.

Highlights:

• Hermes user-facing orchestration with bounded parallel workers.
• Vellum deterministic personal-context reads and explicit memory mutation workflows.
• Dynamic free-first model routing with provider fallback and health handling.
• Restricted self-repair workflow.
• CLI-first Ubuntu installation with optional messaging integrations.
• Gateway restart and shutdown chatter is suppressed from normal user conversations.

Release scope:

• Ubuntu ARM64 and CLI installation have been validated.
• Browser/Open WebUI remains preview functionality in this prerelease.
• Telegram and Discord require user-supplied credentials.
• iMessage remains optional.

Install with ./setup.sh --install and verify with opencloud doctor.