Skip to content

dotSYSTEMX 1.9.0-alpha.3 — distribution and delegation hardening

Pre-release
Pre-release

Choose a tag to compare

View all tags
@WayneTechLab WayneTechLab released this 12 Oct 00:52
· 19 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.9.0-alpha.3
d43eab1

dotSYSTEMX 1.9.0-alpha.3

Alpha — use at your own risk. This release hardens the public, generic .SYSTEMX template and Agent Y handoffs. It does not certify an adopted project or isolate an external CLI from its host account.

  • Distribution manifest schema 2 hashes binary and unknown files byte for byte while preserving reviewed text checkout compatibility. A 1.9 bundle missing Agent Y core files now fails installation.
  • Agent X rejects far-future closure times for completed or cancelled due items.
  • Agent Y protects ignored files during worktree cleanup, refuses PR readiness after base drift, requires private sidecars and bundles to be effectively Git-ignored, and pins the selected CLI executable identity before launch. Older unrun handoffs can be explicitly abandoned and re-prepared.
  • The external manager refuses run against an unmanaged target rather than executing target-controlled Python.
  • Public instructions clarify the private original-template provenance, Windows setup, Agent Y's host-account boundary, and a separate erratum for the frozen white-paper citation. The original paper and graphics are unchanged.

Validation: 223 tests ran on Python 3.14 and 223 on Python 3.9; each run passed with five expected case-sensitive-filesystem skips. Ten media-publishing security tests passed with the bundled PDF dependencies. The template validated as 154 portable files and 96 Markdown documents. The folder ZIP and wheel each contain those 154 files byte for byte. A disposable alpha.2-to-alpha.3 upgrade, wheel first-run/uninstall/restore cycle, and digest-pinned install from the public tag passed. The public review report records scope, evidence, and limitations.

For a pinned remote install, use the exact tag v1.9.0-alpha.3 and the independently reviewed codeload tag ZIP SHA-256 below with --archive-sha256. The asset ZIP and wheel have different hashes; see SHA256SUMS.

https://codeload.github.com/WayneTechLab/dotSYSTEMX/zip/refs/tags/v1.9.0-alpha.3
SHA-256 9776e99c6b1da3c0c0bb7754865f4c2a9489adcc96a1b0112bef9718fa1f0c87

The optional startup update check remains notice-only; choosing new defaults remains manual. Agent Y's worktree and PR checks are workflow controls, not an OS sandbox. Live provider execution, live PR writes, native Linux/Windows runtime suites, and a Codex Security deep scan were not completed in this review. See the manual, changelog, and security guidance before adoption.

Assets 7
Loading