Skip to content

v0.16.0

Choose a tag to compare

View all tags
@aaronsb aaronsb released this 14 Jun 16:39
· 101 commits to main since this release
v0.16.0
This tag was signed with the committer’s verified signature.
aaronsb Aaron Bockelie
GPG key ID: BA464FC9847A832A
Verified
Learn about vigilant mode.
e4d2743

Knowledge Graph System v0.16.0

22 commits since v0.15.1. This release lands ADR-103 Stage 2 — the x86 thin
appliance and its single-box control plane — alongside the #502 security
hardening, the nomic-first local-embedding default, and the ontology-layer
restore work.

Component versions: platform 0.16.0 · CLI @aaronsb/kg-cli 0.14.0
(unchanged) · FUSE kg-fuse 0.12.1 (unchanged).

Images are published multi-arch (linux/amd64 + linux/arm64) to GHCR at
ghcr.io/aaronsb/knowledge-graph-system/kg-{api,web,operator,postgres}:0.16.0.

Added

Thin appliance — x86 (ADR-103 Stage 2)

  • appliance/ build (libguestfs virt-customize): a minimal Debian host with
    Docker + the repo at /opt/kg, emitting qcow2 + OVA. Container images are
    pulled on first boot (thin), not baked.
  • Bake/first-boot split with a no-baked-secrets invariant — per-instance
    ENCRYPTION_KEY/POSTGRES_PASSWORD/etc. are minted on first power-on via
    operator.sh init --headless, never shipped in the image.
  • Single-box control plane (three ascending-privilege layers): cloud-init
    declarative provisioning (provision.env), a console TUI (DCUI on tty1), and
    Cockpit (:9090) for host management.
  • Nomic text + vision embedding models baked into kg-api for offline first
    boot. Appliance surface branded Kappa Graph.

Embeddings

  • Local nomic-embed-text-v1.5 (768-dim, on-device, no API key) is now the
    default embedding profile. Reasoning/extraction still uses a remote LLM.

Restore (ADR-102 follow-on, #505)

  • Rehydrate the :Ontology + :DocumentMeta layers from Sources; seed the
    primordial ontology on a clean install.

Security

  • #502 — fresh production init no longer ships a weak/password
    POSTGRES_PASSWORD; infra ports (postgres, garage) bind loopback-only; a
    fail-closed startup assertion refuses placeholder secrets.

Changed (CI)

  • Appliance CI is now an integration test of the published GHCR images
    (operator.sh init --image-source=ghcr + health check) rather than an
    emulated qcow2 build — CI integrates already-built containers, it never
    builds them (#516).
  • Tag pushes no longer trigger GH container builds; added a shell-syntax lint.

Architecture

  • ADR-103 — distribution strategy: nomic-first thin appliance.
  • ADR-104 — unified provisioning, install-path convergence, first-run claim
    protocol (Draft).
Assets 2
Loading