0.8.4 - 2026-10-27

Release Notes

The stable release of the 0.8.4 line: everything in rc.1 to rc.15 (the per-rc entries below have
the detail) plus the work landed since rc.15. This is the first tag that publishes the whole
workspace to crates.io automatically and the first release built from the WeftOS GitHub org.

Added

• Cog data plane broker (ADR-122, Accepted). Each node daemon runs cogbus on a local
  socket:
  • B1: readings.
  • B2: shared-memory stream rings with reader policies.
  • B3: governed subscriptions, cross-project grants, an activity log, refusal stop and a topics
    report.
  • B4: the ingest bridge as a broker consumer with a store sink and an optional fallback port.
  • B5: a blob store addressed by BLAKE3 handle; infer.v1 can pass an image by blob handle.
  • B6: topic exposures (kind, registry, CLI) and [mesh_limits]; cog pack and expose
    refuse a cog over its declared limits, install and place warn, so already-released cogs
    still install.
  • Service calls (serve / call / reply on svc.* topics) with deadlines and per-caller
    caps; the infer.v1, event.v1 and sdr.v1 schemas.
  • Publish budgets, metered every <n> <unit> rates, idle ping/close, and subscription and
    connection caps.
  • Per-cog uid and a cogbus socket group; one owner per device, recorded in the device
    ledger; netdev device claims.
  • Containerised cogs reach the broker; VMs are declared unsupported.
  • Governed, chained cog stop.
• Cog declarations (Ventuno plan P0/P1). cog.toml gains interfaces, [[outputs]] and
  [[inputs]] with registered schemas, and placement can match on interfaces. Node facts now
  cover Qualcomm NPUs, GenieX, media, buses, MCU, SDR and power monitors, and advertise a model
  only after it is checked against the daemon's trust.
• NPU service (P4). NPU state appears in node facts from the npu-infer cog's telemetry.
• weaver workload place --arg passes cog configuration arguments.
• Chief-of-staff glance cards.
  • The glance.card tool puts a card on the e-ink panel.
  • Cards carry ids and up to two options and are answered through POST /v1/cos/answer.
  • GET /v1/cos/glance is a snapshot, and /v1/cos/glance/art.png serves the idle art.
  • Cards and art persist across restarts.
  • The e-ink panel firmware shows NPU-diffused weaving art when idle.
• Phone app. It shows the live CoS card with option buttons and a free-text reply, raises a
  needs-you notification with actions, and shows the idle art.
• Urth and the world model. A measured room region is published through ecc.spatial and
  queried with provenance; spatial-check gates run on region ingest (draft policy rows warn
  only); the BVH is rebuilt from the chain at daemon boot so published regions survive a
  restart; the W4 evaluation harness sits on the rollback gate.
• Build: WEFTOS_BUILD_COMMIT overrides the git lookup for the weaver/weft version stamp;
  the android and glasses lanes run lintDebug.
• Agents and skills: the can-expert package with the can-brain skill; urth-spatial-checks.
• Plans and research: the Ventuno Q cog plan, NPU benchmarks and soaks; the App Lab brick spike;
  the PlutoSDR Nano bench and the RX/TX cog plan, with scripts/bench/pluto/; ADR-124 node
  clock and reading time (Proposed); the sensor-node spec and module types.

Changed

• Cogs extraction B1. The Cogs product (Cog Host, cog repository tooling, catalog, cog
  sources, Weave Manager, the guide format and viewer, the ecg/tof/sound companion apps) is no
  longer in this tree. It ships from WeftOS/weftos-cogs; weaver cog, weaver update and
  weft-licence link its cog-sources, cog-repo and cog-market crates at v0.1.4 (pinned
  by commit). Removed lanes: scripts/build.sh cog-host-x86, cog-host-cross, manager,
  manager-web, scope-web, guide-web and the ecg-scope / sound-scope aliases;
  scope room still builds weft-room-scope. Cog Host binaries now come from the signed Cogs
  release. The crates.io set is unchanged (none of the removed crates was published).
• The repositories moved to the WeftOS GitHub org (WeftOS/weftos, WeftOS/weftos-cogs).
  Container images publish to ghcr.io/weftos/weftos; earlier images stay under
  ghcr.io/weave-logic-ai/weftos.
• The Homebrew tap token is minted from a GitHub App at release time.
• Container cog instances: instance ids are derived from the owner key and carry the project
  and controller, so a cog's data/ is never shared across projects; /data is a tmpfs; blob
  ownership is (project, instance).
• The agents leak check reads extra private terms from a file outside the repository.
• weftos-leaf-types is 0.1.1 on crates.io (leaf discovery and frame reader).

Fixed

• weaver kernel stop no longer hangs in shutdown, and the daemon honours SIGTERM.
• Placed native cogs survive a daemon restart, and staging over a stale directory works. The
  host keeps a cog's data/ on restore; journal entries are signed and verified on replay,
  with a controller re-check, bounded retries for transient restores, an owner marker that is
  written first and compared in full, and a set-aside that keeps the last three journals.
• Placement: an unloaded cog instance is not placed again by a stale Lost record; a node's
  facts are refreshed after a stop or unload; a refusal names the failing permit condition and
  warns on cog permits that cannot match.
• cogbus: a connection-slot leak and pre-hello caps; it compiles on Windows;
  cogbus.list and workload.list work outside a project.
• Node facts skip kernel console ports in bus.uart.
• The CoS answers an unknown card id with "no such card"; the phone app follows the landed card
  contract; the Android Kotlin bindings are generated with the Android cleaner so minSdk 29 has
  no NewApi errors.
• Release CI: the Docker digest artifact name no longer contains a slash, so the image build and
  its post-publish health smoke run; the KB and SBOM uploads wait on the Release run.
• Advisories published after rc.15: crypto-bigint is ignored with a recorded justification; the
  npm zod, body-parser and fast-uri advisories are allow-listed; undici is overridden to 7.30.1.

weft-gui-egui 0.8.4

Install weft-gui-egui 0.8.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/WeftOS/weftos/releases/download/v0.8.4/clawft-gui-egui-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/WeftOS/weftos/releases/download/v0.8.4/clawft-gui-egui-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install weave-logic-ai/tap/clawft-gui-egui

Download weft-gui-egui 0.8.4

File	Platform	Checksum
clawft-gui-egui-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
clawft-gui-egui-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
clawft-gui-egui-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
clawft-gui-egui-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
clawft-gui-egui-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
clawft-gui-egui-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
clawft-gui-egui-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo WeftOS/weftos

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

clawft-weave 0.8.4

Install clawft-weave 0.8.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/WeftOS/weftos/releases/download/v0.8.4/clawft-weave-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/WeftOS/weftos/releases/download/v0.8.4/clawft-weave-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install weave-logic-ai/tap/clawft-weave

Download clawft-weave 0.8.4

File	Platform	Checksum
clawft-weave-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
clawft-weave-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
clawft-weave-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
clawft-weave-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
clawft-weave-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
clawft-weave-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
clawft-weave-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo WeftOS/weftos

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

clawft-cli 0.8.4

Install clawft-cli 0.8.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/WeftOS/weftos/releases/download/v0.8.4/clawft-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/WeftOS/weftos/releases/download/v0.8.4/clawft-cli-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install weave-logic-ai/tap/clawft-cli

Download clawft-cli 0.8.4

File	Platform	Checksum
clawft-cli-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
clawft-cli-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
clawft-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
clawft-cli-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
clawft-cli-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
clawft-cli-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
clawft-cli-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo WeftOS/weftos

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

weftos 0.8.4

Install weftos 0.8.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/WeftOS/weftos/releases/download/v0.8.4/weftos-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/WeftOS/weftos/releases/download/v0.8.4/weftos-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install weave-logic-ai/tap/weftos

Download weftos 0.8.4

File	Platform	Checksum
weftos-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
weftos-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
weftos-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weftos-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
weftos-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
weftos-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
weftos-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo WeftOS/weftos

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>