Skip to content

v0.1.0-alpha: Verified Transformation Calculus & Inverses Engine

Choose a tag to compare

@mahirhir mahirhir released this 27 Aug 13:33
· 53 commits to main since this release

Tracefold v0.1.0-alpha Initial Release

Tracefold provides formal reverse-execution guarantees, pre-commit inverse escrow, and offline-verifiable DSSE receipts for AI agent tool executions and filesystem mutations.

Highlights:

  • gx-core: Verified transformation calculus with Lyapunov convergence proofs and invariant assertions.
  • gx-witness: Ed25519 DSSE signed audit receipts with offline verification and full single-bit tamper detection.
  • gx-log: Merkle tile log append, root consistency proofs, and checkpoint verification.
  • gx-cli: Command-line tool for verifying receipts and inspecting execution histories.

Getting Started:

cargo install --git https://github.com/TraceFold/tracefold.git gx-cli

Pre-built binary (asset added 2026-09-01)

gx-v0.1.0-alpha-x86_64-unknown-linux-gnu.tar.gz — Linux x86_64, glibc. That is the only platform this release ships a binary for.

What this asset is, and is not:

  • Built from this release's tag commit e2de2a814ee630e51a3925381656b7a348961ca3 with cargo build --release --locked -p gx-cli on a fresh clone (Ubuntu 24.04, toolchain pinned by rust-toolchain.toml). Smoke-tested before upload: gx --version prints gx 0.1.0; gx limits prints the 8 documented limit clauses.
  • Not a CI artifact. The release.yml GitHub Actions pipeline has never produced a run; this binary was built and uploaded by hand from the tagged source. No DSSE receipt of the build itself is attached, so issue #7's acceptance criteria are not met by this upload — it only closes the "release has no binary at all" gap.
  • No macOS, Windows, or ARM binaries. On those platforms use cargo install --git https://github.com/TraceFold/tracefold.git gx-cli (requires a Rust toolchain).
  • Dynamically linked against glibc — it will not run on musl-only systems (Alpine).
  • Verify the download: sha256sum -c SHA256SUMS (checksum file is attached alongside; the tarball's SHA-256 is 5c0fae3f27138ba0237d3533c0607668c43c778c057f327d9796187d1e652756).

Numbers for the tagged tree, as published in its own README with date and method: test floor 2,602 probes across 454 suites plus the SDK's 36 (fresh clone, single run, 25 Aug 2026); 117 Lean theorems, 12 of them counterexamples, 0 sorry, 1 named axiom (re-counted on a fresh clone, 26 Aug 2026). What this project does not guarantee is enumerated in docs/LIMITS.md — the same 8 clauses gx limits prints, and a copy of LIMITS.md is inside the tarball.