Skip to content

v0.1.0 — the Ranex governance kernel

Choose a tag to compare

View all tags
@anthonykewl20 anthonykewl20 released this 02 Sep 23:21
· 146 commits to main since this release
v0.1.0
edf1a98

First release of the Ranex kernel: deterministic governance for AI agents that build software. Rules an agent can read are suggestions; rules compiled into code are constraints.

What this release does

  • Signed evidence and blocking gates — Ed25519-signed observations against exact git trees; evaluate() is pure, absence blocks, no self-approval, and removing every model credential must not change a verdict.
  • Append-only hash-chained journal (SQLite) with update/delete triggers, CAS append, and operator verification.
  • Frozen suite manifests — JUnit-ID freezing with explicit expected-skip declarations; this release is sealed at 1657 test IDs / 166 declared skips.
  • Digest-bound dependency provisioning — pinned resolver, wheel verification/storage, separate dependency-set approval, epoch-disciplined lock.
  • Serial task pipeline — worktree dispatch, candidate judging, signed-approval merge through policy/ancestry/lineage/evidence/stale-ref checks, CAS publication with coherent-worktree recovery (including the detached mid-sync crash window).
  • Strict-local confinement — cgroup-v2 delegated scopes (cpu/memory/pids), Landlock, seccomp, a digest-pinned native launcher, and host-probe-lock serialization across qualification probes and sessions (ADR-046).
  • Approved-batch qualification — signed A/B/C authority chains, pool-2 concurrent provisioning, independent verification.
  • Specification lifecycle — draft/advance/questions/status/approve CLI.
  • Retained, redacted delegation logs (ADR-043).

Install

git clone https://github.com/anthonykewl20/ranex && cd ranex
uv sync --frozen
uv run --frozen ranex --help

Kernel-only and source-run: governed subcommands anchor to the checkout containing the CLI (ADR-009). See README §Status for the code-backed capability list and #66 for the release-gate evidence (every blocker closed with commit SHA + command output).

Verification

  • Full suite on the release commit: 1623 passed, 34 skipped, exit 0.
  • Standing freeze ceremony: FROZEN tests=1657 expected_skips=166 run_exit=0.
  • CI green on main at edf1a9860.

Known limits (recorded on #66)

Kernel-only source-run surface; strict-local requires a delegated same-UID cgroup scope; cross-batch locking remains journal discipline; mutmut is an UNVERIFIED residual; the concurrent-CAS journal race family is documented, not fixed.

Assets 2
Loading