Syn 0.8.1

Syn 0.8.1

Official package set. Declared node modes: agent, operator, service. Consult the signed runtime contract for exact API and platform requirements; undeclared modes remain unavailable.

Source: 4a4b8095844f7bf525e0494567d7d9a350e4d1c7
Manifest SHA-256: 414bb66cfa9e2d2ed4d8e91253a2a005f603759d4a749c5527ffe76cefd2ef7b
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset release. Consumers must supply independent trusted pins and verify all bytes before installation. No installed-node or private-mesh qualification is implied.

Syn 0.8.0: group revocation and epoch rollover

Syn 0.8.0 adds member revocation and epoch rollover for private Agent groups. The operator commits a signed change to the cohort and delivers a new epoch key to retained members. After applying the cutoff, retained Agents keep their enrolled identities and reject the retired cohort. Revoked Agents refuse startup across native keystore restarts.

See the group maintenance guide.

Release pin	Value
Source commit	74f6ef75d77ab6aa00fb49d30ec446e3a6d4ebcd
Manifest SHA-256	0ee89e2b5e27d38827e6d75ef25e7bca1ed1e0f40a5360df07404595912ec1d0
Release authority SHA-256	a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

Verify the manifest signature and asset hashes against independently retained pins before installing.

Syn 0.7.0: legacy enrollment archive

Syn 0.7.0 adds an offline archive for legacy enrollment receipts and replay records. The archive keeps the original SQLite snapshots and verifies the historical receipt signatures before writing its manifest. Operators can read the original signed envelope and look up legacy replay records by offer digest.

See the archive guide for snapshot preparation and pin retention.

Release pin	Value
Source commit	b6f28476ffb398e9fc75d41676ae906fe040c011
Manifest SHA-256	42fbe2c8d7421b0f9f39fe04db2f148c4cc26e7397bc40149759f6b9a4ea8bb2
Release authority SHA-256	a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

Verify the manifest signature and all asset hashes using independently retained pins before installing.

Syn 0.6.0: native operator recovery

Syn 0.6.0 adds native operator backup and recovery. A private 24-word phrase reproduces the operator’s pinned identity. A separately pinned encrypted checkpoint restores its protected reservations, enrollment receiver, adoption journal, and pending LAN pledges into a fresh native keystore.

Select the latest trusted checkpoint independently and fence the original operator before activating the restored copy. See the operator recovery guide.

Release pin	Value
Source commit	a064208fea5ea1e54ab4e9a796730d927991ad02
Manifest SHA-256	f91e69c3c8e3501471f575fae80f1f0e50cd8634a0baaedba162326faca904ea
Release authority SHA-256	a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The seven assets contain the runtime and client wheels, their source distributions, the hashed dependency lock, the manifest, and its detached signature. Verify the signature and package hashes using independently retained pins before installing.

Syn 0.5.0: signed LAN enrollment

Syn 0.5.0 adds signed LAN discovery and protected enrollment for native Agents. Discovery establishes the pinned operator’s identity before the Agent sends an encrypted pledge. The operator stores the pledge in a pending inbox and approves candidate reservation separately from the Agent’s chosen identity. An exact retry can recover the prior result after interruption.

Potbot’s existing sandbox keeps the Agent’s keys inside the sandbox. The host relays public discovery information and encrypted packets. See the enrollment guide.

Release pin	Value
Source commit	e0f92a8abb8839dd711a92a3f5a0ba070744e6a1
Manifest SHA-256	f1315407ffd23c1497ee613a9dea18d4c0f75f152f49e6e4b0b4c773e021674a
Release authority SHA-256	a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

Verify the manifest signature and all package hashes against independent pins before installing. The seven assets include the runtime and client wheels, their source distributions, the hashed dependency lock, the manifest and its detached signature.

Syn 0.4.0: native private pub-sub and Cog identity contracts

Syn 0.4.0 adds authenticated private pub-sub between genuinely enrolled native Agent nodes, for Potbot's identity-bound Cog admission and heartbeats.

• Canonical Syn owns native group-key custody, encryption, selected-leaf signatures, membership and replay checks. The privileged local relay carries signed ciphertext over private sockets and opens no IP listener.
• The public SDK verifies fresh replies from the selected live node. Relay acceptance, signed peer reception and permission to execute remain separate contracts.
• Potbot binds one-use grants to the current task, input, installed operation, release and native node session; existing image, lease, budget, audit and confirmed-stop requirements remain mandatory.

The first messaging profile is bounded, volatile and local to Linux x86-64/WSL2. It does not establish durable delivery, consensus, cross-host behavior or production Cog-host qualification. Upgrades/recovery and general rollout retain their separate gates. Existing identities and releases are unchanged.

Source: 6205baf95b87193133d45c749a0fe5d5b577581f
Manifest SHA-256: a406356fba844a28c04870e45299ccd83e406b5dbe8b7a55741db6d5a6cd1088
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset package set. Select independent trusted pins and verify all bytes before installation. Package publication and official installed-node acceptance are separate states.

See the private pub-sub contract and paired Potbot admission guide. The dated release record will retain published-byte and official-package qualification evidence.

Syn 0.3.1

Syn 0.3.1 fixes native Secret Service connection lifetime for persistent operator and Agent custody. Owned D-Bus sockets and selectors now close after successful and failed operations, including unlock and session-lock probes. The Agent’s 128-descriptor limit, no-prompt background behavior, identity derivation, journal anchors and wire profiles remain unchanged.

The native regression reproduced exhaustion after 62 reads before the fix. The corrected wheel completed 600 real credential operations with garbage collection disabled and four descriptors before and after; two-Agent native restart and isolation checks also passed. Protected staging repeated application/PostgreSQL, portable-client, four native operator and two Agent gates on this exact source, then independently downloaded and verified all seven signed draft assets.

Consumers must retain independent source, manifest and release-authority pins. Publication alone does not qualify an installed node. Official Python 3.12/3.13 deployment results are recorded separately in the dated patch record. Cog admission, general messaging, group rotation and recovery retain their later milestones. No hardware attestation or automatic identity replacement is introduced.

Staging and signed draft readback · Architecture and dated qualification

Source: bb5f458fab11de6de408d19f53cc21524a1f7735
Manifest SHA-256: 10da08e7b0af7d32c48a3087e873c2e448e846e2e3aac6ad56df81330267b4f1
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset official package set. Earlier released assets remain immutable.

Syn 0.3.0

Syn 0.3.0 adds the canonical Agent runtime: confidential selected-leaf adoption, the approved host-bound virtual-device profile, separate current-group key custody and fresh client-verifiable readiness.

The native acceptance lane runs an operator and two real Linux/WSL Agent processes with distinct host UIDs and encrypted native keystores. It checks retained identities through node and complete keystore-session restarts, locked-store fencing and outside process isolation. The reviewed Potbot controller is pinned by full commit.

This is software custody without TPM or physical-device attestation. Readiness does not authorize Cog execution. General messaging and Cog admission remain SYN-R05; upgrades, rotation and recovery retain their later milestones.

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset official package set. Consumers must verify the independent authority, source and manifest pins. Publication alone does not establish installed-node qualification; see the dated Agent deployment record and official-package workflow for its measured status.

Architecture and qualification: https://github.com/Synsphere/syn/blob/master/docs/development/agent-nodes.md

Source: 93623e5
Manifest SHA-256: 98aeccdbb3081c6afecf935639440bfd9e54dafd03796ee8794f566280514fbc
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

Syn 0.2.1

Syn 0.2.1

Official package set. Declared node modes: operator, service. Consult the signed runtime contract for exact API and platform requirements; undeclared modes remain unavailable.

Source: 7312d8b7318dcd35c8d50f05bb52bb74d17683c6
Manifest SHA-256: 8455cc21a8fc320d5522f88a873e9b5575aa4379d9c2e65c60cf21f9f4d28d46
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset release. Consumers must supply independent trusted pins and verify all bytes before installation. No installed-node or private-mesh qualification is implied.

Syn 0.2.0

Syn 0.2.0

Official package set. Declared node modes: operator, service. Consult the signed runtime contract for exact API and platform requirements; undeclared modes remain unavailable.

Source: 76af137dbf816122ba31bc88f808348952613f65
Manifest SHA-256: 985b40c6b7614f1a1a0e7de8acef423bcd6a0f4c0c256841ce8f6c3e2d527d84
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset release. Consumers must supply independent trusted pins and verify all bytes before installation. No installed-node or private-mesh qualification is implied.