Repository navigation
Delivery Status
This is a dated handoff, not a live status feed. Check the project board and linked issues for subsequent progress.
- Kiln is public under Apache 2.0, with contribution guidance, issue templates, a security policy and dependency notices.
- Public Issues, the project board and this wiki are available. Private vulnerability reporting is enabled.
- Public launch revision:
b1838717ded364f9869ff2216d02f4b0a10fca76. - The pre-publication scan covered 28 Git commits and reported no credential findings. The public revision was checked against the audited revision. This is evidence for that snapshot, not a guarantee about future commits or every possible secret format. Continuous scanning is now implemented; see #11.
Public availability is not a production-readiness claim. Kiln remains a developer preview with trusted application processes; automatic failover, replicated storage and public TLS ingress are not shipped.
The following changes are merged on main. These are scoped improvements, not a claim that the entire roadmap is complete.
| Work | Evidence | Remaining boundary |
|---|---|---|
| Continuous credential scanning and incident runbook | PR #23, scanner check; issue #11 completed | Detection has documented limits; a clean scan does not prove a credential was never exposed or used. |
| Same-revision macOS/Linux validation | PR #22, three passing jobs; issue #2 completed | Paid-provider, native UI and arbitrary distribution compatibility are separate checks. |
| Versioned binary candidates | PR #21, both package jobs passed | Issue #1 is complete; final release evidence appears below. |
| Destructive Vault restore regression | PR #24, cross-platform checks passed | Extended by PR #26 below; issue #10 completed within its documented scope. |
| Vault consumer rotation and disclosure checks | PR #26, 81 Swift tests and real SSH fixtures passed on both platforms | Offline AI fixture; external issuer acceptance/revocation and full-node recovery are not claimed. |
Additional foundation changes merged on October 11:
| Work | Evidence | Remaining boundary |
|---|---|---|
| Bounded SSH admission diagnostics | PR #29, macOS/Linux checks | Fixed reason codes and opaque connection IDs; no keys or account details in diagnostics. Real OpenSSH identity exhaustion, stalled signing and healthy concurrent login were exercised. |
| Repeated worker/supervisor recovery | PR #30, cross-platform checks | Five CI cycles per platform plus a 30-cycle macOS run; no host reboot or power-loss claim. Actual filesystem-error coverage is linked below; issue #3 is complete within the documented fixture scope. |
| AI transport metrics | PR #32, 86 tests on each platform | Administrator-only bounded counters; no prompts, credentials or raw provider errors. UI retry/reconnect acceptance remains in issues #5 and #9. |
PR #35 completes the bounded storage-failure checks. Run 38137859255 includes actual non-root EACCES on macOS and ENOSPC in a container-owned 8 MiB Linux tmpfs, followed by preserved-state and recovery checks. This does not simulate host power loss.
Packaged upgrade rehearsal PR #31 is also merged. All four package jobs passed: baseline 26.10.09.1 to candidate 26.10.11.1 and back on compatible state, followed by fresh-install checks on both platforms. The final combined revision also passed; see the published preview below.
Live Erebine validation used disposable macOS runtimes: token timing, real tool proposals and explicit approval, replay rejection, background-task persistence across SSH disconnect, and streaming terminal frames passed. The terminal run observed 13 distinct partial-answer frames and 10 waiting frames. A separate workspace run exercised mouse denial, keyboard approval, task creation and narrow-terminal navigation. These are OpenSSH/terminal-emulator checks, not proof of native clipboard behavior or every SSH client. The user's running node was not replaced.
Fresh downloaded packages passed macOS and Linux runtime-only installation in PR #27, run 38135619964. Logs confirm checksum/file verification and all six integration groups. The earlier Linux job in PR #25 returned success without test output; that result was rejected and corrected with isolated subprocess stdin and required completion markers. Coverage is macOS 15 with standard hosted Xcode and Ubuntu 24.04 userspace with separately supplied Swift runtime libraries.
Package checks extract the exact archive and exercise SSH, REST/WebSocket and recovery before scanning its final bytes for credentials. Distribution documents come from the recorded Git commit, excluding ignored local files. Packages include source/compiler metadata, checksums and dependency notices. See package instructions. CI candidates are not published production releases.
The Vault regression removes the original store and key before restoring separate backups, verifies missing/wrong-key denial and preserved grant restrictions, and checks replacement after reopening. See Vault operations and the credential incident runbook.
PR #34 adds native local Ollama alongside Erebine, versioned provider profiles, separate Vault credential grants and explicit fresh-context switching. Existing tasks retain their original provider. Both operating systems passed 98 tests in run 38138218361; actual Erebine and local Qwen3 0.6b streaming/tool checks also passed. Ollama requires an independently installed daemon and model. Literal loopback transport, redirect rejection and refusal of proxy environment settings restrict the client route; the daemon still controls whether inference stays local.
At that October 11 snapshot, OpenAI Responses, official ChatGPT sign-in and Anthropic Messages were planned in #28; subsequent implementation is recorded in the October 13 update below. No Claude subscription sign-in is claimed. Provider selection does not change Kiln's fixed tool authorization or explicit mutation approvals.
PR #33 adds deterministic delayed streaming, cancellation, retry countdown, sidebar refresh, role removal, resize and scrollback checks. Its macOS/Linux run passed. Native clipboard behavior, additional SSH clients and connection-level retry/reconnect acceptance remain in #9; renderer tests do not establish those outcomes.
Kiln 26.10.11.1 is published as a developer preview from 9a0b0b2dde1aea526c220d331798d40ee4e20ab0. Final server validation passed 103 tests on each platform and the integration checks. All four package jobs passed, including actual upgrade/rollback markers and fresh installation. Secret scanning passed for the source; the final archives were scanned before upload.
The published macOS arm64 and Linux x86_64 downloads were fetched without authentication. Both archive SHA-256 values, source revision and all 48 embedded file digests matched the validated candidates. Linux needs compatible Swift runtime libraries; macOS is not Developer-ID signed or notarized. Release notes document the tested platforms and operating limits. No existing user runtime was replaced.
The homepage card and dedicated Kiln page are merged in the separately maintained website repository. They include a runtime lifecycle illustration, pause control, responsive layout and reduced-motion support. Local validation passed 1,372 tests, seven doctests, asset builds and desktop/mobile review; the page pull request's Fleet CI also passed.
The Kiln product page is live. On October 11, the homepage card, desktop and 390-pixel mobile layouts, animation and pause control were verified in Chrome. The bundled stylesheet includes a reduced-motion fallback; the operating-system preference was not simulated. The exact deployment actor and running image digest were not independently established. Detailed rollout evidence remains in the private website repository.
The illustration describes architecture; it is not live telemetry. Website publication does not change the runtime's documented guarantees.
Kiln 26.10.11.2
ships prebuilt Apple Silicon macOS and Linux x86_64 archives from
d5721a552d77451c51d379ec23e868708e66fea7 (PR #36).
Linux now links the Swift runtime into its executables, so users do not install
Swift or a compiler. The example backend also remains runnable after installation
copies it into managed storage. Ubuntu system libraries remain required; macOS
is not yet Developer-ID signed or notarized.
Server validation passed on both platforms. All four package jobs passed, including upgrade/compatible rollback and fresh installs. The clean Linux container had no Swift compiler or external Swift runtime mount. Both archives' SHA-256 values, embedded revision and all 56 file digests were independently verified; the downloaded macOS binary also ran locally. The README and this wiki now start with binary installation instead of requiring a source build.
The live download section now presents both
platform archives, checksums, installation commands and public GitHub pipeline
status cards. Both public downloads were fetched without authentication and matched
the tested artifacts. Desktop and 390-pixel mobile rendering, expandable commands,
download URLs and all three loaded status badges were verified after deployment.
Website revision 1ee12c58e8de33e3608b5059f5637a3d20a06185 rolled out successfully
as image digest sha256:6ad914bd405bd9b5021afa783794184a0bd7ef5e529868575584c04dacbf3b00.
The website suite passed 1,374 tests and seven doctests. GitHub may cache its badges;
their linked run history is the authoritative record. This completes the scoped
installation work in #37.
PR #46 added native OpenAI, Claude, Grok and DeepSeek adapters. PR #47, source 247a040, adds official ChatGPT account authorization, isolated Grok device-account handling and Linux bubblewrap launching. Account ownership includes the SSH-key fingerprint; changing a username's key does not inherit that account's credentials.
The local suite initially passed 151 tests. The follow-up streaming fix in PR #48 passed 152 local tests, including four concurrent process handshakes. The final packaged release and hosted checks are recorded below.
Real Erebine acceptance completed a synthetic read-only tool/result round, four answer frames and cancellation after incoming content. Local Ollama passed the same journey with cached qwen3:0.6b and eight answer frames. Temporary test state was removed. OpenAI/Claude/Grok/DeepSeek API-key accounts were unavailable; ChatGPT and Grok device-account inference require user consent and remain unverified.
Linux Grok execution now has an isolation launcher requiring /usr/bin/bwrap and working user namespaces; hosts without those prerequisites fail closed. This is distinct from authenticated vendor inference acceptance. See AI providers and validation evidence.
Issue #28 remains open for normalized usage reporting, provider/account UI, capability discovery and outstanding live-account acceptance. Persistent conversations, shared operations and coordinated workers remain separate framework milestones in #40–#45.
Kiln 26.10.13.3 is published as a developer preview from 78dd62216d7d8108f01924188f16dfccb482c911, merged through PR #48. Server validation, all four package/clean-install jobs and credential scanning passed. Native Linux exercised 15 Grok isolation/streaming tests; macOS passed 152 tests. Both downloaded archives matched their checksums, source revision and all 61 embedded file digests. The downloaded macOS binary reported 26.10.13.3 and passed local SSH, REST/WebSocket, crash recovery and state restoration checks. Linux clean installation required no Swift compiler. Existing user nodes were not upgraded automatically.
Account consent and remaining paid-provider acceptance are still pending, as listed above. Earlier candidate tags 26.10.13.1 and 26.10.13.2 were not published as releases.
P.Industries · Apache 2.0 · Versioned documentation