OpenMayhem 0.2.185
OpenMayhem 0.2.185 adds strict signed policy controls for bounded media workflows and carries a correctly bound release identity.
What changes
- Workflow policies can enforce dimension minimums, axis multiples, total pixel caps, and overflow-safe arithmetic.
- Signed graph roles define node cardinality, allowed topology, reachability, link sources, single output paths, and cycle rejection.
- Typed input rules cover fixed values, ranges, integer and multiple constraints, enums, bounded strings, signed part selection, and distinct-part requirements.
- System and user adapters are separate roles, allowing a fixed system adapter alongside a bounded list of approved user adapters.
- Signed media metadata and presets describe model-specific controls without moving pricing or execution authority into clients.
- Gateway, provider, CLI, and catalog verification use the same derivation and reject malformed or ambiguous policies closed.
- The Rust workspace and packaged Intercom release manifest both bind to 0.2.185. Contract code and its digest are unchanged from 0.2.183.
Compatibility
- Existing workflow policies without the new fields keep their prior behavior.
- Contract version remains 23 because ledger, receipt, session, heartbeat, and usage semantics are unchanged.
- Catalog entries using these constraints require application version 0.2.185 or later.
Validation
- 29 focused workflow-policy tests and 6 CLI workflow tests pass, including bounded dimensions, topology, typed inputs, role disambiguation, and optional-part handling.
- Release identity verifies all packaged contract file hashes, all workspace packages resolve to 0.2.185, and the targeted release-version binding test passes.
- The source-build contract check passes. Other repository CI jobs remain blocked by failures reproduced on the preceding main revision before this change.