Skip to content

Kranz v0.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Sep 23:18
· 51 commits to main since this release
v0.3.0
1956667
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Kranz can now run qualified Claude and Codex ACP workers inside pinned containers,
route one-call permission decisions through its operator surfaces, and require
content-pinned external checks at mission gates. Decisions remain bound to the
approved inputs, observed evidence and exact local integration tree.

Install from crates.io:

cargo install kranz --version 0.3.0 --locked

Prebuilt CLI archives for Linux, macOS and Windows are attached below.

  • Qualified ACP worker profiles pin the adapter/runtime, Linux ARM64 image,
    file-based credential channel, startup policy and egress. Existing worker
    defaults remain unchanged.
  • One-call consent binds an approval to the exact invocation and offered option.
    Expired or stale decisions cannot grant another command or persistent access.
  • External gate evaluators receive isolated evidence through bounded JSON-RPC
    over stdio. They integrate with initial/revised plan approval, milestone
    validation, final checks and local merge under the existing authority rules.
  • Audit exports retain the decision chain and unresolved artifacts explicitly.
    Exporting or replaying evidence does not replay effects.
  • Container supervision preserves nonzero exits even when Docker status is
    delayed, reaps orphan processes, bounds execution after owner death, and fails
    visibly when cleanup or completion cannot be confirmed.
  • ACP launch credentials travel through bounded stdin before protocol traffic
    instead of a retained launch file. Worker creation and sequential gate
    deadlines are bounded without expiring early approvals during later checks.
  • Evaluator snapshots exclude nested private paths and PEM private-key files,
    with exclusions recorded as coverage limits. README and registry installation
    references are checked against the release version.

The qualified worker scope is pinned Linux ARM64 Docker images on admitted
macOS/Linux ARM64 hosts. External evaluators support macOS/Linux. Live worker
receipts used scripted controllers and reviewers. ACP filesystem/terminal
services, session resume, ACP validators, external command-permission evaluators,
and Windows ACP containment remain outside this release.

CLI archives are available for Linux x86_64, macOS ARM64 and x86_64, and Windows
ARM64 and x86_64. Each archive passed provenance, architecture, version, help and
embedded-license checks on its matching native runner. Tauri remains
build-checked; it is not an additional release artifact.

Setup and evidence:

Release verification:

  • Tagged release workflow: source gates, five platform builds, SBOM and publication passed.
  • Native archive checks: all five platforms verified provenance, architecture, version, help and licenses. Published archive bytes match those tested artifacts.
  • The checksum manifest, SBOM and all five archives have verified GitHub build-provenance attestations.
  • All four crates.io packages were downloaded and matched to the prepared package hashes and clean source commit. An isolated macOS ARM64 registry installation passed CLI and embedded-dashboard checks with its source cache unavailable.

Full changelog.

Assets 9
Loading