v0.1.006

Dogfood fixes: F-033, F-034. Source commit: e3b2ccf.

Release commit: fae7ee9. uv run --frozen pytest -q passed on this commit before publication; named skips remain unverified. Wheel and sdist were built from this commit, and the remote branch/tag were verified.

Install from a source checkout using the quickstart. Governed commands require a configured checkout; installing the wheel alone is not a governance environment.

The attached distributions use Python version 0.1.6. SHA256SUMS covers the wheel and sdist. Full tag CI runs separately; inspect its result before relying on capabilities absent from the publishing runner.

Full Changelog: v0.1.005...v0.1.006

v0.1.005

Dogfood fixes: F-031, F-032. Source commit: e99cecf.

Release commit: 9b35392. uv run --frozen pytest -q passed on this commit before publication; named skips remain unverified. Wheel and sdist were built from this commit, and the remote branch/tag were verified.

Install from a source checkout using the quickstart. Governed commands require a configured checkout; installing the wheel alone is not a governance environment.

The attached distributions use Python version 0.1.5. SHA256SUMS covers the wheel and sdist. Full tag CI runs separately; inspect its result before relying on capabilities absent from the publishing runner.

Full Changelog: v0.1.004...v0.1.005

v0.1.004

Dogfood fixes: F-030. Source commit: 3deb744.

Release commit: 85037d1. uv run --frozen pytest -q passed on this commit before publication; named skips remain unverified. Wheel and sdist were built from this commit, and the remote branch/tag were verified.

Install from a source checkout using the quickstart. Governed commands require a configured checkout; installing the wheel alone is not a governance environment.

The attached distributions use Python version 0.1.4. SHA256SUMS covers the wheel and sdist. Full tag CI runs separately; inspect its result before relying on capabilities absent from the publishing runner.

Full Changelog: v0.1.003...v0.1.004

v0.1.003 — automatic dogfood releases

Dogfood releases now use GitHub’s built-in token and explicitly dispatch full CI on the published tag. No personal release-token secret is required.

The release commit is 82cacd1. Its frozen suite passed: 1666 passed, 129 skipped. Source CI and the dispatched tag CI also passed, including real receiver, journal, package and Six journeys.

• Release: https://github.com/anthonykewl20/ranex/actions/runs/34022370140
• Tag CI: https://github.com/anthonykewl20/ranex/actions/runs/34022632883
• Evidence: #83 (comment)

This page completes the GitHub Release metadata for the already-published tag; the tag and source commit have not moved. The attached wheel and sdist were built from a fresh clone of this exact release; the installed CLI reported ranex v0.1.003 (Python package 0.1.3).

Governed commands currently require a source checkout. Follow the repository’s installation guide; an isolated wheel install alone is not a configured governance environment. Skipped or unavailable host capabilities remain unverified.

v0.1.0 — the Ranex governance kernel

First release of the Ranex kernel: deterministic governance for AI agents that build software. Rules an agent can read are suggestions; rules compiled into code are constraints.

What this release does

• Signed evidence and blocking gates — Ed25519-signed observations against exact git trees; evaluate() is pure, absence blocks, no self-approval, and removing every model credential must not change a verdict.
• Append-only hash-chained journal (SQLite) with update/delete triggers, CAS append, and operator verification.
• Frozen suite manifests — JUnit-ID freezing with explicit expected-skip declarations; this release is sealed at 1657 test IDs / 166 declared skips.
• Digest-bound dependency provisioning — pinned resolver, wheel verification/storage, separate dependency-set approval, epoch-disciplined lock.
• Serial task pipeline — worktree dispatch, candidate judging, signed-approval merge through policy/ancestry/lineage/evidence/stale-ref checks, CAS publication with coherent-worktree recovery (including the detached mid-sync crash window).
• Strict-local confinement — cgroup-v2 delegated scopes (cpu/memory/pids), Landlock, seccomp, a digest-pinned native launcher, and host-probe-lock serialization across qualification probes and sessions (ADR-046).
• Approved-batch qualification — signed A/B/C authority chains, pool-2 concurrent provisioning, independent verification.
• Specification lifecycle — draft/advance/questions/status/approve CLI.
• Retained, redacted delegation logs (ADR-043).

Install

git clone https://github.com/anthonykewl20/ranex && cd ranex
uv sync --frozen
uv run --frozen ranex --help

Kernel-only and source-run: governed subcommands anchor to the checkout containing the CLI (ADR-009). See README §Status for the code-backed capability list and #66 for the release-gate evidence (every blocker closed with commit SHA + command output).

Verification

• Full suite on the release commit: 1623 passed, 34 skipped, exit 0.
• Standing freeze ceremony: FROZEN tests=1657 expected_skips=166 run_exit=0.
• CI green on main at edf1a9860.

Known limits (recorded on #66)

Kernel-only source-run surface; strict-local requires a delegated same-UID cgroup scope; cross-batch locking remains journal discipline; mutmut is an UNVERIFIED residual; the concurrent-CAS journal race family is documented, not fixed.