Python runtime cache revision 1

This Python environment includes 611 official checked-hash standard-library bytecode files so each disposable run can reuse compiled imports. The interpreter is CPython 3.12.14; this environment revision is 3.12.14+cache.1.

The original HTTP service test passed in the iOS Simulator with GET/query, Unicode POST, increasing request counts, and cross-attempt stop and resource cleanup. Cache headers and source hashes are verified during packaging. See VALIDATION.json and SHA256SUMS for the evidence and artifact digests.

Corresponding source and license material: source archive, SHA256 b0dc5cc314bf131c4e3a88a5707d8962cac2f470595d9c4d718dae857a45c728. Immutable source recipe and package references are in source-provenance.json.

Rish on-demand language environments · 2026-09-15

Optional language environments for Rish: Python 3.12.14 with pip, OpenJDK 21.0.12, Go 1.25.10 with its standard-library cache, Rust/Cargo 1.91.1, Node.js 24.18.1 with npm, and Bun 1.4.0.

Install only the selected environment, reuse its cached package, or remove it when no program is running. The app verifies package and disk digests before use. These packages require the controlled Linux x86_64 kernel shipped by the matching Rish app.

All six packages have recorded real rish execution evidence. Java and Go cold compilation can take several minutes on the software guest. Programs use a workspace copy and run in the foreground; generated files are not automatically written back to the project.

SHA256SUMS, NOTICE.txt, MANIFEST.json, and the source-materials archive accompany the packages. The archive includes the pinned Alpine sources and patches, build recipes, Bun sources, the corresponding JSCOnly source tree, and dependency materials.

Rish v0.1.0 — Your pocket agent, in source

v0.1.0 is the first public source preview of Rish. It ships source, not an
app: there is no installable download here, and the only binary attached is
the corresponding source for the Linux guest. Build it yourself following the
README.

Rish puts an agent's conversation, workspace and tool execution on the phone.
You pick a model, describe a task, and watch the work happen locally: files are
read and written inside a workspace you bound, every mutation is approved by
you, and the transcript survives a restart. Coding is one use, not the only one.

What is in this preview

• Four built-in connections. DSH (DeepSeek), Claude Code, Codex and GLM
  reach their providers through native API adapters. No official CLI is
  installed or embedded; account and subscription sign-in exists only in the
  optional experimental iOS build, and its verified scope is listed in the
  preview scope.
• A real workspace. App-owned Git projects with a pinned libgit2, HTTPS and
  native SSH with strict known_hosts verification, bounded file operations,
  and change review before committing.
• An agent loop with receipts. Native journals, explicit approvals,
  cancellation and recovery boundaries. A tool call that leaves the workspace is
  refused and returned to the model as a failed result, so the round continues
  instead of the attempt dying.
• Streamed rounds. Provider responses arrive as they are produced, with
  reasoning, text and tool cards appearing while the round is still in flight.
• iOS and iPad. Android compiles the shared UI and does native API chat,
  credential storage and session persistence, but is not at iOS parity for the
  agent runtime.

What this preview does not claim

The product reports local_substrate, not a closed local_harness gate. It
does not claim general desktop software compatibility, arbitrary shell
execution, or continuous background execution. The guest CGI experiment is a
bounded native listener, not a general server, and iOS may reclaim it within
tens of seconds. Full official-CLI harness compatibility is not established.

Guest corresponding source

The app tracks a GPL-2.0 Linux kernel and an initramfs containing BusyBox and
apk-tools. rish-guest-corresponding-sources-20260914.tar is their complete
corresponding source, published to satisfy GPLv2 section 3 alongside the
written offer in
THIRD_PARTY_NOTICES.

It holds the Linux 6.18 tarball and the 6.18.35 stable patch, the Alpine
APKBUILD recipes, patch series and kernel configuration named by the pinned
package revisions, the upstream sources of BusyBox 1.37.0, musl 1.2.6,
apk-tools 3.0.6, OpenSSL 3.5.7, zlib and tree 2.3.2, the guest licence texts,
the provenance and lock material, and snapshots of the sibling runtime commits
that carry the guest recipe, overlay and agent.

All 111 delivery files were verified against the sizes and SHA-256 values in
source-lock.tsv, and the archive was re-verified after extraction. Check it
with shasum -a 256 -c SHA256SUMS.txt, then re-run
provenance/collect-source-materials.sh delivery inside the extracted tree to
verify every file independently.

Asset	Size	SHA-256
rish-guest-corresponding-sources-20260914.tar	221,548,032 bytes	157e03e2fb60416149423e4f46f625ce73a95aba3086e391bf7a157a1ca38687

Building

Native iOS dependencies need pinned toolchain versions; the
developer guide
lists them and the preparation scripts. The project ships without a signing
team: simulator builds need none, device builds need your own.

Project source is MIT. Third-party runtimes, guest components and other
dependencies keep their own licences.