Skip to content

v1.17.0

Latest
Latest

Choose a tag to compare

View all tags
@jaschadub jaschadub released this 01 Jul 20:54
v1.17.0
138ac4a
This commit was signed with the committer’s verified signature.
symbibot Symbi Bot
GPG key ID: 7B0BF546C173D14B
Verified
Learn about vigilant mode.

Highlights

  • AWS Bedrock provider (off-by-default bedrock feature) — Converse API, SigV4-signed.
  • .symbi agents load into the symbi-shell fleet — parsed with the real DSL grammar; sandbox-tier gate enforced.
  • Fleet-agent governed tool execution — agents run through the same Cedar-gated, approval-gated loop as the orchestrator.
  • Residual trust-boundary hardening (A-02b / A-10 / D-05) — opt-in, default-off primitives (closed-world key pinning, untrusted-ticket severity cap, anchored audit-chain verification).
  • Developer-adoption pass — fixed onboarding tutorial, cargo install symbi, CONTRIBUTING + issue/PR templates, feature-table accuracy, example/agent doc links, and CI (all-features clippy/test + MSRV job).

Notable changes

  • MSRV raised to Rust 1.89 (datafusion 51 needs 1.88, smol_str 0.3.5 needs 1.89).
  • Updated anyhow to 1.0.103 (RUSTSEC-2026-0190).

See CHANGELOG.md for the full list.

Pre-Built Binaries

Note: Pre-built binaries are tested but considered less reliable than installing via cargo install symbi or Docker (ghcr.io/thirdkeyai/symbi). If you encounter issues, please try those methods first.

Quick Install

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/thirdkeyai/symbiont/main/scripts/install.sh | bash

Homebrew (macOS):

brew tap thirdkeyai/tap
brew install symbi

Manual download:
Download the appropriate binary for your platform from the assets below. Verify checksums with checksums.txt.

Verification

Each binary is signed with Sigstore cosign. Verify with:

cosign verify-blob --certificate symbi-*.pem --signature symbi-*.sig symbi-*.tar.gz \
  --certificate-identity-regexp="https://github.com/ThirdKeyAI/Symbiont" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

SHA256 checksums are in checksums.txt (also signed).

Assets 17
Loading