v0.1.1

What's Changed

• docs+cli: honesty corrections from the pre-release audit by @anivar in #10
• fix(mission): terminated grant no longer revives to Active after expiry by @anivar in #8
• fix(kernel): vendor the builtin model into the crate so it publishes to crates.io by @anivar in #13

New Contributors

• @anivar made their first contribution in #10

Full Changelog: v0.1.0...v0.1.1

decern v0.1.0

First release.

A deterministic authorization kernel for agents, people, and services — all one kind of principal, answered by the same function. Nine safety invariants are machine-checked by cvc5 over every case the model allows; every decision is recorded in a tamper-evident, hash-chained ledger anyone can verify offline.

Binaries

Prebuilt decern (prove · decide · verify) and decern-serve (fail-closed PDP) for:

• Linux x86_64 — static musl
• Linux aarch64 — static musl
• macOS Apple Silicon (aarch64)
• Windows x86_64

Unpack the archive for your platform and put both binaries on your PATH.

Intel macOS: build from source — cargo install decern-cli decern-server.

Verify a download:

shasum -a 256 -c SHA256SUMS

What "proven" means

cvc5 proves the kernel's nine invariants — not that a given policy says what you meant, and never that a deployment is secure. See the repository's "known limitations".

Apache-2.0.