Robotweax SRT 0.2.3
Robotweax SRT 0.2.3 is a pre-1.0 maintenance and security-hardening release.
Project version 0.2.3, shared-library ABI 0.2, compatible SRT API and
srt_getversion() 1.5.7. The 80-symbol public C export set is unchanged;
AES-GCM remains explicit and default-off.
Source baseline
This repository starts with the 0.2.3 source baseline, including the subsequent
CI build-scope and scheduling cleanups. Its initial commit is
2c88faeccda23296279e96f85930afa423c6cff0. Development history and earlier
release tags are not imported. Older release-note documents describe historical
versions; they do not imply those tags are available in this repository.
The library and protocol sources are unchanged from the validated maintenance
baseline. One CI unit-test fixture was adapted for a repository without a
parent commit. All 541 Python harness tests and the documentation check passed
locally. The initial hosted Main CI passed with 45 successful jobs and one
expected optional Live timing skip; the run is linked below.
Important qualification limits
This release is published by explicit maintainer decision without a completed
independent cryptographic review of the directional-key changes.
Intermittent Backup-group interoperability failures and host-dependent timing
outliers remain qualification limits. Passing CI does not resolve their cause
or establish independent security acceptance, hard-real-time behavior or
universal production readiness. Qualify the actual peer and failover topology
before deployment.
Changes and upgrade
- Independent initial transmit key/salt confirmation before encrypted DATA,
bounded key-refresh intervals, and closed-socket secret cleanup. - Handshake hardening and synchronized group timestamp origins and receive
TSBPD clocks across late joins and replay. - Explicit CTR/GCM demo modes, integration documentation, provenance and
packaging improvements. - Selective CI build/test scope and conservative reuse of recent full CI
evidence for scheduled runs.
Rebuild integrations against the corrected library. Initial key confirmation
can add startup latency and prolong SECURING. Update both Robotweax group
endpoints for synchronized timing; native C++ implementation layouts are not
the public C ABI. Positive HSv4 establishment and upstream GCM File/Stream
support are not claimed.
Documentation and validation
Distribution and security reports
Source archives from v0.2.3 are the intended release artifacts and include
MIT and third-party notices. No Haivision binaries are redistributed.
Report suspected vulnerabilities privately to info@robotweax.ai; see the
security policy.