Skip to content

Releases: WahuVN/proofdrift

Release list

ProofDrift v0.0.2 — Hardened Public Preview

ProofDrift v0.0.2 — Hardened Public Preview Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Sep 10:36
v0.0.2
c62bee7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ProofDrift v0.0.2 is the hardened public preview of the local-first change-control and evidence layer for coding agents.

Highlights

  • Synchronizes all 15 workspace packages at version 0.0.2.
  • Adds a self-contained composite GitHub Action with scan/patch exit codes and JSON report-path outputs.
  • Adds CI coverage for the action itself in addition to Linux, Windows, macOS, strict Clippy and Rust 1.89 MSRV gates.
  • Pins third-party GitHub Actions to reviewed full commit SHAs.
  • Automates tag releases with platform archives, SHA256SUMS.txt, an SPDX 2.3 JSON SBOM and GitHub build-provenance attestations.
  • Adds public changelog, roadmap, support, governance and release-maintenance documentation.

Verified release artifacts

The tag workflow completed successfully for:

  • Linux x64
  • Windows x64
  • macOS ARM64

The published SHA256SUMS.txt was verified against all four covered assets (three platform archives plus the SBOM). The SPDX SBOM parses successfully and contains 282 packages and 1,137 relationships. gh attestation verify --repo WahuVN/proofdrift succeeds for all three platform archives.

Security boundary

proofdrift run provides L1 brokered control at the direct process-dispatch boundary. This is not an OS/container sandbox. Production stdio/HTTP MCP transport and L2 isolation are still intentionally unclaimed until concrete end-to-end enforcement is available.

Verify a download

sha256sum -c SHA256SUMS.txt
gh attestation verify proofdrift-v0.0.2-linux-x64.tar.gz --repo WahuVN/proofdrift

See CHANGELOG.md, ROADMAP.md, SUPPORT.md, and RELEASING.md in the repository for maintenance and compatibility details.

Full changelog: v0.0.1...v0.0.2

Loading

ProofDrift v0.0.1 — Public Preview

ProofDrift v0.0.1 — Public Preview Pre-release
Pre-release

Choose a tag to compare

View all tags
@WahuVN WahuVN released this 10 Sep 09:41
v0.0.1
3ffb2fa

ProofDrift v0.0.1 is the first public preview of the local-first change-control and evidence layer for coding agents.

Included

  • Passive coding-agent / skill / MCP configuration discovery and deterministic admission scanning.
  • Baseline + trust diff over local artifacts and capability changes.
  • Cedar-backed policy evaluation with direct-process L1 brokered execution through proofdrift run.
  • Tamper-evident SQLite runtime receipts and .proofdrift bundle verification.
  • Patch blast-radius and test-evidence analysis.
  • Provenance adapters for Git/GitHub metadata, Hugging Face metadata, APM, Cargo, npm, pnpm and MCP.
  • Secret/egress guard primitives and standards-oriented attestation helpers.

Verification

  • Main CI: format, strict clippy, Rust 1.89 MSRV, and tests on Linux, Windows and macOS.
  • Security workflow: cargo audit, workspace tests and strict clippy passed.
  • Release workflow: locked release builds passed on Linux x64, Windows x64 and macOS ARM64.
  • Public security benchmark: 160 deterministic cases across 52 categories.

Important boundary

This preview provides L1 control at the direct process-dispatch boundary. It is not an OS/container sandbox. The MCP broker core is implemented and tested, but a production stdio/HTTP MCP transport is not yet exposed by the public CLI. Binaries are currently unsigned; verify downloads with SHA256SUMS.txt.

Loading