v0.1.3 - trust and capability hardening

Zoveli v0.1.3 ΓÇö trust and capability hardening

Zoveli stays sovereign and independent. Official macOS and Windows installers are unsigned by design ΓÇö no Apple or Microsoft certificates, no recurring platform fees, and no corporate gatekeeper. Gatekeeper and SmartScreen will warn on first launch. That is expected; follow the Sovereign Install Guide for the one-time steps.

Highlights

• Trusted KB manifests ΓÇö curated knowledge is authenticated with SHA-256 manifests and fails closed.
• Public evaluation harness ΓÇö zoveli eval runs GSM8K-mini, HumanEval-mini, and trusted-claim fixtures, publishes the score, and blocks a 5% relative regression in CI.
• Capability tiers ΓÇö math operations declare model-size requirements; small local models fail high-tier work instead of guessing.
• Resilient OpenAI transport ΓÇö native OpenAI-compatible transport with retries, a circuit breaker, and a health ping.
• Verifiable updates ΓÇö host-restricted release resolution, SHA-256 verification, and installer rollback.
• Model portability ΓÇö local Ollama from 0.8B through 70B, with ZOVELI_MODEL as the global override.
• Optional Cloud Brain ΓÇö Anthropic Messages API plus OpenAI-compatible providers, pinned explicitly with ZOVELI_PROVIDER.
• Pluggable claim verifiers ΓÇö code, manifest-authenticated knowledge, and verified math, with the deciding verifier recorded.
• Core self-efficiency review ΓÇö bounded, advisory, user-approved improvements; no persistent telemetry.
• Full-history audit ΓÇö every commit in project history is checked, plus the 59-tool default surface.

Install

Download the portable runtime or an unsigned installer from the assets below.

• Windows: zoveli-0.1.3-windows-x64-setup.exe
• macOS: zoveli-0.1.3-macos-arm64-setup.dmg (Apple Silicon) and zoveli-0.1.3-macos-x64-setup.dmg (Intel).
• Portable: zoveli-0.1.3-linux-x64.tar.gz, zoveli-0.1.3-windows-x64.tar.gz, zoveli-0.1.3-macos-arm64.tar.gz, and zoveli-0.1.3-macos-x64.tar.gz, each with a .sha256 sidecar.

First launch: Sovereign Install Guide.

Verification

• Compare portable archives with their published .sha256 sidecars.
• Archives and installers carry GitHub build-provenance attestations.
• Verify with gh attestation verify <file> --repo blessandy9104-hue/zoveli-ai --signer-workflow blessandy9104-hue/zoveli-ai/.github/workflows/runtime-artifacts.yml.

Full changelog

See CHANGELOG.md.

v0.1.2 - reliable release pipeline

Patch release that fixes the release pipeline and keeps the 0.1.1 runtime packages unchanged in behavior.

Highlights

• Runtime archives now attach reliably: the publish job locates the nested release-assets/**/*.tar.gz archives and **/*.sha256 checksums, and a manual release_tag dispatch can backfill an existing release.
• Release validation runs on Linux: the release job calls node scripts/release-check.mjs --release --tag directly instead of forwarding arguments through pnpm run, which failed with unknown option "--".
• No product behavior changes since 0.1.1.

Post-release note: a follow-up commit on main bumps the development-only Vite pin to 6.4.5 for a newly disclosed advisory. Vite is not included in the runtime archives or the packaged application.

Downloads

Platform	Archive
Linux x64	zoveli-0.1.2-linux-x64.tar.gz
Windows x64	zoveli-0.1.2-windows-x64.tar.gz
macOS arm64 (Apple silicon)	zoveli-0.1.2-macos-arm64.tar.gz

Each archive has a matching .sha256 file. Build from source on other platforms.

Install

Linux x64 / macOS arm64

curl -fsSL https://raw.githubusercontent.com/blessandy9104-hue/zoveli-ai/main/install/install-zoveli-runtime.sh | bash

Windows x64 PowerShell

irm https://raw.githubusercontent.com/blessandy9104-hue/zoveli-ai/main/install/install-zoveli-runtime.ps1 | iex

The installers download the archive for your platform from this release, verify its SHA-256 checksum, and set up zoveli under your user profile.

Verification

• CI on main: lint, typecheck, unit tests (Ubuntu and Windows), integration tests, Playwright E2E, security scan, SBOM, Docker build, and Compose data-volume smoke.
• Full changelog: CHANGELOG.md

v0.1.1 - security hardening and prebuilt runtimes

Security hardening and the first prebuilt-runtime release.

Highlights

• Prebuilt runtime archives with one-line installers: Linux x64, Windows x64, and macOS arm64. Target machines need no Git, Node, pnpm, Python, or compiler toolchain.
• Security clean-up: all 29 open CodeQL alerts resolved and all 14 Dependabot alerts closed. pnpm audit --prod reports no known vulnerabilities.
• Test toolchain upgrade: Vitest 4.1.12 with V8 coverage, patched Vite 6.4.4, and a coverage gate enforced in CI.
• Nightly and Docker fixed: scheduled builds reach the tests, the Docker image builds, and the private knowledge vault is no longer copied into or mounted by the container.

Downloads

Platform	Archive
Linux x64	zoveli-0.1.1-linux-x64.tar.gz
Windows x64	zoveli-0.1.1-windows-x64.tar.gz
macOS arm64 (Apple silicon)	zoveli-0.1.1-macos-arm64.tar.gz

Each archive has a matching .sha256 file. No other combinations are published for this release; build from source on unsupported platforms.

Install

Linux x64 / macOS arm64

curl -fsSL https://raw.githubusercontent.com/blessandy9104-hue/zoveli-ai/main/install/install-zoveli-runtime.sh | bash

Windows x64 PowerShell

irm https://raw.githubusercontent.com/blessandy9104-hue/zoveli-ai/main/install/install-zoveli-runtime.ps1 | iex

The installers download the archive for your platform from this release, verify its SHA-256 checksum, and set up zoveli under your user profile.

Verification

• CI: lint, typecheck, unit tests (Ubuntu and Windows), integration tests, Playwright E2E (Chromium, Firefox, WebKit), security scan, SBOM, Docker build, and Compose data-volume smoke.
• Full changelog: CHANGELOG.md

v0.1.0 - market-ready: one-line installer, onboarding, verified Docker builds

Zoveli AI v0.1.0 - first market-ready release

Local-first personal assistant: verified math, your data stays home, 57 plugins, CLI + web UI + desktop + Docker.

Install in one line (review first)

curl -fsSL https://raw.githubusercontent.com/blessandy9104-hue/zoveli-ai/main/install/install-zoveli.sh | bash -s -- --yes

Windows: irm https://raw.githubusercontent.com/blessandy9104-hue/zoveli-ai/main/install/install-zoveli.ps1 | iex

30-second try

git clone https://github.com/blessandy9104-hue/zoveli-ai.git; cd zoveli-ai; pip install -e ./mathcore; pnpm install; pnpm run build; pnpm start
Then type: /math solve x^2 - 5x + 6 = 0

Docker

ghcr.io/blessandy9104-hue/zoveli-ai:0.1.0 (CLI) and :0.1.0-web (web UI :3080) - pushed automatically by CI on this release.

Why Zoveli vs ChatGPT/Claude

Free forever, fully offline for ~39 local tools, math verified-or-withheld with audit certificates, no vendor lock-in. See docs/why-zoveli.md.

Full changelog below (auto-generated).