v0.3.11

Aura v0.3.11

This release fixes two child-process registration defects that can make Git and other short-lived commands fail to start through Aura. It also improves Broker concurrency and records actionable failure details instead of reporting every registration failure as access denied.

Changes

• Child registration now validates the real parent process and process creation time before retiring an obsolete binding for a reused Windows PID. A new process no longer conflicts with a stale registration left by an exited child. Repeated registration for the same process still preserves immutable Profile and runtime identity checks.
• The Runtime Broker handles up to eight connected clients independently, so an idle connection no longer blocks all subsequent bootstrap requests. Reply writes have their own bounded deadline after request validation; a slow validation no longer silently consumes the entire reply window. Shutdown skips queued validation work after acquiring the registry lock.
• Failed child registration records the connect, send, read, identity, or response stage, Windows error code, elapsed time, and a bounded Broker rejection reason in Audit Mode. Native I/O errors survive cancellation and handle cleanup. Injection and binding failures still reject startup.
• Runtime bundle construction no longer hashes the primary DLL twice. Per-process integrity and loaded-module checks remain enabled.

Validation and performance

• Existing IPC checks passed: 18 library checks and seven real named-pipe authorization checks. Fresh Runtime injection also passed for an x64 root, gated x64 children, legacy CreateProcessA children, and gated x86 children. No new test cases were authored.
• Before versioning, the final patched build completed 400 consecutive Git launches with Audit Mode enabled. Forty-nine launches reused a previously observed Git shim PID. The resulting audit contained 801 process initializations and zero child-binding or injection failures.
• On the same idle development machine, 40 sequential Git launches had median durations of 85.8 ms with the original 0.3.10 build and 80.8 ms with the patched build; the uninjected control was 30.3 ms. Four concurrent workers completing 40 launches had median durations of 77.6 ms with the original build and 58.0 ms with the patched build. Sequential measurements used the Git command shim with redirected output; concurrent measurements used the actual Git executable without output redirection. These are local samples, not whole-application benchmarks or a guarantee for other machines.
• A separate hang during the measurement occurred in the uninjected control as well when PowerShell background jobs redirected Git output. That workload was excluded from the performance comparison.
• Publication requires successful Windows CI for the exact release commit, including workspace checks, detached-session checks, and the separate CPU-renderer regression suite. The canonical installer build and an independent download/checksum comparison verify the published package.

Limitations

The supplied remote audit identifies child binding as the failing stage, but the old log does not distinguish every internal rejection or timeout. The reported ChatGPT/Codex workflow and brief console-window flashes on the other machine have not been reproduced interactively. This release does not claim to resolve every possible cause of those flashes or to establish DNS leak behavior from a Host-mode audit initialization entry.

Upgrade

Install aura-setup.exe or use the updater, then restart Aura and relaunch ChatGPT/Codex and other applications through the updated version. Existing application and Profile settings are retained. Already running processes and their detached session hosts keep the old Runtime until they are relaunched.

Installer

• File: aura-setup.exe
• Size: 11629732 bytes
• SHA-256: 70a3bc42f46d3a9c4964788b50bf3dfd98a5fea009f697379a2876303460a322