Skip to content

GaugeMesh 0.1.0 — Invariant Routing Developer Preview

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 02 Sep 00:46
· 8 commits to main since this release
b62f9b0

GaugeMesh 0.1.0 — Invariant Routing Developer Preview

GaugeMesh 0.1.0 is the first developer preview of a local-first router that
preserves typed identity, authority, budget, deadline, side-effect, schema, and
causal constraints across MCP capabilities and model requests.

Start without an account, provider, database, or network target:

gaugemesh demo

This release includes:

  • MCP server and client paths for revisions 2025-11-25 and 2026-07-28 over stdio
    and Streamable HTTP;
  • collision-safe tools, resources, prompts, transparent aliases, and bounded
    capability leases;
  • deterministic integer route planning with hard constraints and digest-bound
    explanations;
  • a bounded OpenAI-compatible models/chat/Responses subset and configured
    provider adapter;
  • memory and SQLite storage, bounded admission/process pooling, restart limits,
    cancellation, and cleanup;
  • loopback local mode plus a fail-closed TLS/OIDC remote resource-server mode;
  • native Linux x64/ARM64, Windows x64, and macOS ARM64/x64 archives, SHA-256
    checksums, SPDX SBOM, GitHub artifact attestations, and a non-root GHCR image.

Verification is deliberately bounded. Official MCP conformance scored 70/70 for
2025-11-25 and 117/117 for 2026-07-28. Focused mutation testing killed all 108
viable mutants; 13 generated domain-default mutants were compile-invalid. Local
60-second fuzz runs completed 1,288,807 config and 42,672,607 protocol-revision
executions without a finding. Miri ran 18 selected deterministic tests and
AddressSanitizer ran the 89-test executable suite without diagnostics.

ResiliReplay 0.7.0 exercised 13 scenarios: three required recovery cases passed,
ten unsupported recovery outcomes failed explicitly, cleanup completed, and
duplicate effects were zero. The aggregate is PARTIAL. No MCP-RES profile was
emitted, so this release makes no MCP-RES claim.

This is not production-ready software, an official MCP implementation status,
MCP certification, security certification, exactly-once execution, or a claim of
universal client/provider compatibility. Read the compatibility, adversarial,
performance, and threat-model documents before evaluating non-local use.