Skip to content

Open Cloud Assistant v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@Mukeshkr-19 Mukeshkr-19 released this 11 Aug 05:19
· 66 commits to main since this release
v0.3.0
7f55082

Open Cloud Assistant v0.3.0

Release date: 2026-08-11

v0.3.0 is the reliability, isolation, infrastructure-as-code, and operational
evidence release.

Highlights

OS-sandboxed self-repair

The restricted OpenCode editing stage now runs through Bubblewrap on the
validated Ubuntu ARM64 host.

The sandbox:

  • replaces the normal user HOME with an isolated ephemeral sandbox HOME;
  • masks the live Hermes target;
  • keeps the host filesystem read-only by default;
  • exposes controlled writable host-backed paths for staging and sandbox HOME;
  • preserves the trusted outer validation, backup, deployment, and rollback
    lifecycle.

Ubuntu AppArmor unprivileged-user-namespace hardening remains enabled. The
Ubuntu-provided Bubblewrap profile is used instead of globally disabling that
host restriction.

Deterministic acceptance performs no provider/model calls.

OCI Terraform

A focused Terraform deployment now exists under:

infra/terraform/oci/

It defines:

  • VCN;
  • public subnet;
  • Internet Gateway;
  • route table;
  • SSH CIDR restriction;
  • Canonical Ubuntu 24.04 compute discovery;
  • OCI compute;
  • SSH public-key injection;
  • cloud-init bootstrap;
  • optional installer handoff.

Terraform state, real variable files, OCI credentials, and private keys remain
outside public Git.

The OCI provider lock includes Linux amd64 and arm64 checksums.

Hosted Terraform configuration validation passes on x86_64 and ARM64.

This release does not claim that CI created OCI resources.

Operational evidence

A sanitized operational evidence collector now records point-in-time runtime
facts without publishing raw logs or personal assistant data.

The first committed real-host snapshot observed:

  • Ubuntu 24.04 ARM64;
  • OpenCloud doctor PASS;
  • Fleet registry timer active and enabled;
  • Fleet verifier timer active and enabled;
  • Hermes gateway active and enabled;
  • user linger enabled;
  • 133 hours of host uptime at the observation point;
  • 10 successful scheduled-job completions observed in the current Hermes log;
  • 0 failed scheduled-job completions observed in that log.

These are point-in-time observations, not an SLA, SLO, or claim of
uninterrupted availability between evidence collection points.

The collector excludes prompts, assistant responses, job payloads, Vellum
personal memory, credentials, IP addresses, session identifiers, raw Fleet
databases, and raw Hermes logs.

Release engineering

v0.3.0 also includes:

  • semantic CLI version output;
  • documentation consistency cleanup;
  • dual-architecture CI coverage;
  • deterministic Fleet fault injection;
  • bounded Hermes concurrency proof;
  • self-repair rollback fault injection;
  • service persistence validation;
  • public audit and release gates.

Validation boundaries

Validated:

  • Ubuntu 24.04 ARM64 real-host operation;
  • ARM64 clean-install release path from the previous validated baseline;
  • hosted x86_64 source/smoke compatibility;
  • hosted ARM64 source/smoke compatibility;
  • deterministic reliability suite;
  • real ARM64 self-repair OS-sandbox acceptance;
  • Terraform configuration validation on amd64 and arm64;
  • CLI operator path.

Not claimed:

  • real x86_64 machine acceptance;
  • Telegram public E2E acceptance;
  • Discord public E2E acceptance;
  • release-validated Browser/Open WebUI runtime;
  • provider latency SLOs;
  • continuous-availability guarantees;
  • Terraform apply against every OCI tenancy or region.

Historical releases

The v0.2.0 and v0.1.0 tags remain immutable historical release points.

Assets 2
Loading