OpenCodifier v0.6.2

OpenCodifier v0.6.2

Released 2026-11-01 from commit 74bf714cfa28 (full sha
74bf714cfa28a1c63151dc843ef11dec61b3c82d, previous tag v0.6.2).

Highlights

• Verified prebuilt installer: scripts/install-prebuilt.sh + contract tests (PR #11, e6a3624) — SHA/size/attestation/clean-source verification, atomic replace, no Rust at install time (CHANGELOG 0.6.2 "Added").
• CLI hardening: bounded image reads, lane-overwrite refusal, assert removal (f27e997); rustfmt parity with CI (69c6869).
• E2E recipe captures re-recorded against the fresh engine (rotation readout + CP early exit lineage, 33ff9c5/4d9e755) after cache-key drift (f724f94, 6764c00).
• Coverage: engine/cli test lifts keeping the in-image floor above 97.5 (3457818, 0840631; CI triage runbook 6471ad7).

Quality-gate receipts

just ci green at the release commit is the gate of record; the same gates
run line-for-line in the GitForge pipeline (.gitforge.yml, the platform of
record — a red GitHub Actions mirror is not a code-failure signal). Every
gate below needs its own receipt: a run id, or the local command output.
Receipts below cite the GitForge pipeline run of record.

Gate	Command	Status	Receipt
Format	cargo fmt --all -- --check	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Lint	cargo clippy --workspace --all-targets -- -D warnings	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Tests	cargo test --workspace	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Docs	RUSTDOCFLAGS="-D warnings" cargo doc --workspace --no-deps + cargo test --doc	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Deps	cargo deny check	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Advisories	cargo audit	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Pattern scan	aegis --format json scan --file . --baseline .aegis/baseline.json (0 new)	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
Coverage floor	cargo llvm-cov --workspace --lcov + scripts/coverage_floor.py … --floor 98.5	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record
End-to-end	just e2e (serve + MCP over the real wire)	PASS	GitForge pipeline run 2d3fa273 (2026-11-01, commit 74bf714) - all 6 lanes succeeded; platform of record

Artifacts

Built by just release-matrix (D24). Each row is backed by an attestation
beside the artifact; just release-verify re-checks every digest against the
bytes on disk.

Target	Artifact	Bytes	SHA-256	Linkage	Attestation
aarch64-apple-darwin	opencodifier	6415904	6aa400f2182886961a4adeb9677f63066052effa49eef968a3694dfec1be23eb	unknown linkage	target/aarch64-apple-darwin/release/opencodifier.attestation.json
aarch64-apple-ios	libopencodifier_ffi.a	32473120	47368b8682f44e924d4336dba019a7cbc4a5eb2490e6a4e3ecd8205c81f02cf5	unknown linkage	target/aarch64-apple-ios/release/libopencodifier_ffi.a.attestation.json
aarch64-linux-android	opencodifier	7028432	d1b16525c7cc245ffaf4a2882b0fc6f3da3a13cf986fc72e74e6373e52a807bb	dynamic (interpreter /system/bin/linker64)	target/aarch64-linux-android/release/opencodifier.attestation.json
aarch64-unknown-linux-gnu	opencodifier	5072152	ee2280669bcd60725a9f5c19e0ce688b016fcb9fe614b940a494759e05d55803	dynamic (interpreter /lib/ld-linux-aarch64.so.1)	target/aarch64-unknown-linux-gnu/release/opencodifier.attestation.json
wasm32-unknown-unknown	opencodifier-0.6.2-wasm32-unknown-unknown.tar.gz	638700	bcec2860b84abd89238b5a325d2ea9b6e3ea9cd3562e57a181975ec16f1fad63	unknown linkage	dist/v0.6.2-wasm32-unknown-unknown/opencodifier-0.6.2-wasm32-unknown-unknown.tar.gz.attestation.json
x86_64-apple-darwin	opencodifier	6950296	e42b73b7d4e4160026f7adff5dfb8c6af94807e3d4e3f46dbdf84fe7247692b2	unknown linkage	target/x86_64-apple-darwin/release/opencodifier.attestation.json
x86_64-pc-windows-gnu	opencodifier.exe	5666304	f09e210008f1997d7ef1734ee969bbd67c9dc236803480087495ed2a7748d1cd	unknown linkage	target/x86_64-pc-windows-gnu/release/opencodifier.exe.attestation.json
x86_64-unknown-linux-gnu	opencodifier	7349640	8a8ebae7aacf8e4231219cc04c83845b0d0c84b48a41b45ddd36bc8782b771ca	dynamic (interpreter /lib64/ld-linux-x86-64.so.2)	target/x86_64-unknown-linux-gnu/release/opencodifier.attestation.json
x86_64-unknown-linux-musl	opencodifier	7423744	f56e78529f9d66f6db220c2f3ed6181b94b1c65a9bb9f677a525854134ee840b	static	target/x86_64-unknown-linux-musl/release/opencodifier.attestation.json

Verification level, per artifact

The matrix states what was proven, never "supported": D24 sets the named
level each target can carry, and an artifact only claims the level it earned.
Mark one per row.

Target	Level earned	Why
x86_64-unknown-linux-gnu	run-tested + e2e	executed on this host; just e2e green (pipeline run 2d3fa273 e2e lane)
x86_64-unknown-linux-musl	static-link check + run-tested + e2e	statically linked; fresh consumer-container E2E 30/30 without Rust/Cargo (prebuilt plan Phase 3)
aarch64-unknown-linux-gnu	link + file-magic	linked clean; ELF aarch64 interpreter /lib/ld-linux-aarch64.so.1 verified
x86_64-pc-windows-gnu	link + file-magic	linked clean; PE32+ magic verified; never executed here (no Windows host)
x86_64-apple-darwin	link + file-magic	linked clean; Mach-O x86_64 magic verified; never executed here (no macOS host)
aarch64-apple-darwin	link + file-magic	linked clean; Mach-O arm64 magic verified; never executed here
aarch64-linux-android	link + file-magic	linked clean; ELF aarch64 interpreter /system/bin/linker64 verified; never executed here
aarch64-apple-ios	archive + object-magic	static library; ar archive with arm64 Mach-O first member (D24 honest artifact; no Apple SDK)
wasm32-unknown-unknown	bundle + load-test	dual-glue bundle loaded through web + nodejs initializers in Node

Known gaps to state on the release page rather than paper over: no foreign
arch is executed here (no qemu, no arm hardware), so aarch64 artifacts are
link + file-magic only; registry publication (crates.io, Homebrew, winget)
is an outward action taken only on an explicit user go.

Reproduction

From a clean checkout at 74bf714cfa28a1c63151dc843ef11dec61b3c82d, on a host with the matrix toolchains
(just release-preflight reports what is missing, naming each tool):

just release-preflight                 # toolchain readiness per target
just release-matrix                    # build + stage + attest every target
just release-verify                    # re-hash every artifact vs its attestation
just release-notes                     # this file, from the attestations
just release-set-verify                # exact tag, clean source, complete matrix, checksums
just ci                                # the gate of record, before tagging
just e2e                               # the run-tested claim, on the host target

Single-target build and its exact recorded command:

# aarch64-apple-darwin
cargo zigbuild --release --locked --target aarch64-apple-darwin -p opencodifier-cli
# aarch64-apple-ios
cargo build --release --locked --target aarch64-apple-ios -p opencodifier-ffi
# aarch64-linux-android
cargo build --release --locked --target aarch64-linux-android -p opencodifier-cli
# aarch64-unknown-linux-gnu
cargo zigbuild --release --locked --target aarch64-unknown-linux-gnu -p opencodifier-cli
# wasm32-unknown-unknown
wasm-pack build crates/opencodifier-wasm --release --target web --out-dir target/wasm-release/pkg-web --out-name opencodifier && wasm-pack build crates/opencodifier-wasm --release --target nodejs --out-dir target/wasm-release/pkg-nodejs --out-name opencodifier && tar -czf dist/v0.6.2-wasm32-unknown-unknown/opencodifier-0.6.2-wasm32-unknown-unknown.tar.gz -C target/wasm-release pkg-web pkg-nodejs
# x86_64-apple-darwin
cargo zigbuild --release --locked --target x86_64-apple-darwin -p opencodifier-cli
# x86_64-pc-windows-gnu
cargo zigbuild --release --locked --target x86_64-pc-windows-gnu -p opencodifier-cli
# x86_64-unknown-linux-gnu
cargo build --release --locked --target x86_64-unknown-linux-gnu -p opencodifier-cli
# x86_64-unknown-linux-musl
cargo build --release --locked --target x86_64-unknown-linux-musl -p opencodifier-cli

Provenance

Field	Value
Commit	74bf714cfa28a1c63151dc843ef11dec61b3c82d
Commit date (UTC)	2026-11-01T20:24:19Z
rustc	rustc 1.99.1 (58cf8f9c3 2026-10-13)
cargo	cargo 1.99.1 (5f94df478 2026-08-27)
Cargo.lock sha256	c3aaf9f6656a55a1eb9697e086f44fdbf8f77d8fff8d79269b16c3752402af7d
Workspace tree sha256	97f3426f0ac67c1471857be3a7b464e7c64e7a1a32078f76813a367aaaabddd8
Feature flags	default
Attestation schema	opencodifier.attestation/1

Model weights are never committed (D14): any model artifact this release
references travels with its own models/*.json SHA-256 manifest, and the
runtime refuses a mismatch before reading a tensor.