Skip to content

ContextOS 0.1.0-alpha.1 — First public alpha

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Oct 11:48
· 288 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.1.0-alpha.1
472edcc

ContextOS 0.1.0-alpha.1

The first public alpha of ContextOS: shared business limits for AI agents, enforced
before mediated tools act, with signed evidence of confirmed and unresolved effects.

This release is for evaluation and early integration. APIs and storage formats may
change. Passing the synthetic conformance and regression suites does not certify a
deployment or establish that a provider's effects are safe to repeat.

What is included

  • contextosd: the governed tool gateway, protected state, admission, approvals,
    budgets, executor fencing and conservative reconciliation of unknown outcomes.
  • Shared numeric resource ceilings across independent agent runs and replicas using
    one protected store. Pending and partial effects continue to consume capacity.
  • ctx: offline validation, compilation, audit verification and release-gate tools.
  • towerd and the prebuilt Tower UI: fleet evidence, role-based governance, reviews,
    guardrails and waivers. Optional AI assistance is off in the local example.
  • An optional peer task board with leased claims and recovery. Task reports are
    advisory; they do not authorize effects or prove that work was completed safely.
  • The Python HTTP client, documentation, licenses and dependency notices, plus local
    examples for shared guarantees, refunds, agent loops, peers, metering and Tower.

Framework integrations and native Python/Node/WASM bindings are available in the
source tree. This release does not publish packages to PyPI, npm or crates.io.

Downloads

Platform Archive Checksum
Linux x86-64, GNU libc (tested on Ubuntu 24.04) Download SHA-256
Linux ARM64, GNU libc (tested on Ubuntu 24.04) Download SHA-256
macOS Apple Silicon Download SHA-256

Archives need Python 3.9+, Bash and curl; Rust and Node.js are not needed to run the
bundled examples. Linux archives target GNU libc, not Alpine/musl. Windows and Intel
macOS binaries are not provided. The macOS binaries are not Apple-notarized.

Verify and try it

Download the archive and checksum for your platform. For example, on Apple Silicon:

asset=contextos-v0.1.0-alpha.1-aarch64-apple-darwin.tar.gz
curl -fLO "https://github.com/contextosai/ContextOS/releases/download/v0.1.0-alpha.1/$asset"
curl -fLO "https://github.com/contextosai/ContextOS/releases/download/v0.1.0-alpha.1/$asset.sha256"
shasum -a 256 -c "$asset.sha256"
gh attestation verify "$asset" --repo contextosai/ContextOS \
  --signer-workflow contextosai/ContextOS/.github/workflows/release.yml \
  --source-ref refs/tags/v0.1.0-alpha.1
tar xzf "$asset"
cd contextos-v0.1.0-alpha.1-aarch64-apple-darwin
./bin/ctx --version
./examples/shared-guarantees/run.sh

The provenance check uses an authenticated GitHub CLI. The shared-guarantees demo
uses synthetic local services, requires no model key or payment account, races two
agents against one ceiling, reconciles pending exposure and verifies the audit.
Try ./examples/support-refund/run.sh and ./examples/tower/run.sh --serve next.

The release also includes per-crate CycloneDX JSON inventories of the locked Rust
workspace across all targets and features. These are source dependency inventories,
not exact per-binary SBOMs. Tower's production dependency licenses are included in
THIRD_PARTY_NOTICES.txt.

Container

The workflow builds a Linux x86-64 image at
ghcr.io/contextosai/contextosd:0.1.0-alpha.1 (also tagged v0.1.0-alpha.1), signs
its digest with keyless Sigstore signing and records GitHub build provenance.
The published release's verification evidence records the exact image digest.
Run towerd from the same image by selecting /usr/local/bin/towerd as its entrypoint.
Supply your configuration and secrets as described in the
deployment guide.

Alpha limits and support

  • Guarantees apply to configured numeric ceilings and mediated tools sharing the
    tenant's protected store. They are opt-in and do not cover tools that bypass it.
  • Unknown outcomes block capacity until reconciliation. Recovery from orphaned
    active dispatches remains conservative; do not retry an external effect blindly.
  • A resource retains at most 1,024 operation receipts. The peer board is limited to
    256 tasks and 1 MiB. Read the shared-guarantee
    and peer-coordination limits before integration.
  • The legacy ICU comparator stays pinned to preserve existing compiler hashes.
    Upgrading its collation data requires an encoding migration.
  • Alpha fixes land on main and in subsequent releases; old tags are not patched
    in place. There is no support SLA. Test backups, restore and your provider's
    reconciliation behavior before considering production use.

Use Discussions for questions
and issues for bugs.
Report vulnerabilities privately to security@contextosai.com or through
GitHub private reporting.

Code is Apache-2.0; prose is CC BY 4.0. The ContextOS name and logo remain subject to
the included trademark policy.

Verified release evidence

  • Reviewed source: 472edcc04ef1ea1b41c2c14c6af60754dc483d1c, included in protected main. All 20 required checks passed; the post-merge main run is also green.
  • Release build: all platform builds, packaged smoke tests, source inventories, signing and draft assembly passed.
  • All three downloaded archives passed SHA-256 checks and GitHub provenance verification for the exact release workflow, tag and source commit. Required binaries, UI, examples, docs and license notices are present. All 14 downloaded inventories match independently generated dependency coordinates.
  • The downloaded Apple Silicon archive passed shared-guarantees, support-refund and Tower demos with Rust and Node excluded from PATH.
  • Both container version tags resolve to the same digest and allow anonymous pulls. The digest's Sigstore signature and GitHub provenance verified for the exact workflow/tag/source. Both published services passed nonroot/read-only startup, health, runtime readiness and static UI checks.

Measured platform requirements

The native Linux contextosd binaries require glibc 2.38 or newer; the packaged ctx and towerd binaries require glibc 2.34 or newer. The complete native archive therefore needs glibc 2.38+. Linux archive tests ran on Ubuntu 24.04. These archives do not target musl/Alpine.

All three macOS binaries declare a macOS 11.0 minimum in their headers and use system libraries rather than Homebrew libraries. This is a measured deployment target, not a claim that every older macOS version was tested. They are Apple Silicon binaries and are not Apple-notarized.

Exact container digest

ghcr.io/contextosai/contextosd@sha256:3e7dd131b171ff867460ce326934da593d72d0cfa222b32c66136bf6bf63568a

Verify its signature and provenance, then pin this digest in deployment configuration:

cosign verify ghcr.io/contextosai/contextosd@sha256:3e7dd131b171ff867460ce326934da593d72d0cfa222b32c66136bf6bf63568a \
  --certificate-identity https://github.com/contextosai/ContextOS/.github/workflows/release.yml@refs/tags/v0.1.0-alpha.1 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
gh attestation verify oci://ghcr.io/contextosai/contextosd@sha256:3e7dd131b171ff867460ce326934da593d72d0cfa222b32c66136bf6bf63568a --repo contextosai/ContextOS \
  --signer-workflow contextosai/ContextOS/.github/workflows/release.yml \
  --source-ref refs/tags/v0.1.0-alpha.1 --source-digest 472edcc04ef1ea1b41c2c14c6af60754dc483d1c

Release immutability is enabled. After publication, verify the release and any downloaded asset with gh release verify v0.1.0-alpha.1 --repo contextosai/ContextOS and gh release verify-asset v0.1.0-alpha.1 <file> --repo contextosai/ContextOS.

Assets 23
Loading