Rish v0.1.0 — Your pocket agent, in source

v0.1.0 is the first public source preview of Rish. It ships source, not an
app: there is no installable download here, and the only binary attached is
the corresponding source for the Linux guest. Build it yourself following the
README.

Rish puts an agent's conversation, workspace and tool execution on the phone.
You pick a model, describe a task, and watch the work happen locally: files are
read and written inside a workspace you bound, every mutation is approved by
you, and the transcript survives a restart. Coding is one use, not the only one.

What is in this preview

• Four built-in connections. DSH (DeepSeek), Claude Code, Codex and GLM
  reach their providers through native API adapters. No official CLI is
  installed or embedded; account and subscription sign-in exists only in the
  optional experimental iOS build, and its verified scope is listed in the
  preview scope.
• A real workspace. App-owned Git projects with a pinned libgit2, HTTPS and
  native SSH with strict known_hosts verification, bounded file operations,
  and change review before committing.
• An agent loop with receipts. Native journals, explicit approvals,
  cancellation and recovery boundaries. A tool call that leaves the workspace is
  refused and returned to the model as a failed result, so the round continues
  instead of the attempt dying.
• Streamed rounds. Provider responses arrive as they are produced, with
  reasoning, text and tool cards appearing while the round is still in flight.
• iOS and iPad. Android compiles the shared UI and does native API chat,
  credential storage and session persistence, but is not at iOS parity for the
  agent runtime.

What this preview does not claim

The product reports local_substrate, not a closed local_harness gate. It
does not claim general desktop software compatibility, arbitrary shell
execution, or continuous background execution. The guest CGI experiment is a
bounded native listener, not a general server, and iOS may reclaim it within
tens of seconds. Full official-CLI harness compatibility is not established.

Guest corresponding source

The app tracks a GPL-2.0 Linux kernel and an initramfs containing BusyBox and
apk-tools. rish-guest-corresponding-sources-20260914.tar is their complete
corresponding source, published to satisfy GPLv2 section 3 alongside the
written offer in
THIRD_PARTY_NOTICES.

It holds the Linux 6.18 tarball and the 6.18.35 stable patch, the Alpine
APKBUILD recipes, patch series and kernel configuration named by the pinned
package revisions, the upstream sources of BusyBox 1.37.0, musl 1.2.6,
apk-tools 3.0.6, OpenSSL 3.5.7, zlib and tree 2.3.2, the guest licence texts,
the provenance and lock material, and snapshots of the sibling runtime commits
that carry the guest recipe, overlay and agent.

All 111 delivery files were verified against the sizes and SHA-256 values in
source-lock.tsv, and the archive was re-verified after extraction. Check it
with shasum -a 256 -c SHA256SUMS.txt, then re-run
provenance/collect-source-materials.sh delivery inside the extracted tree to
verify every file independently.

Asset	Size	SHA-256
rish-guest-corresponding-sources-20260914.tar	221,548,032 bytes	157e03e2fb60416149423e4f46f625ce73a95aba3086e391bf7a157a1ca38687

Building

Native iOS dependencies need pinned toolchain versions; the
developer guide
lists them and the preparation scripts. The project ships without a signing
team: simulator builds need none, device builds need your own.

Project source is MIT. Third-party runtimes, guest components and other
dependencies keep their own licences.