Skip to content

AgentSQL v4.0.0 — verified offline delivery and support diagnostics

Choose a tag to compare

View all tags
@cuipengdba cuipengdba released this 24 Oct 18:48
· 97 commits to main since this release
v4.0.0
ee1f8ca
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AgentSQL v4.0.0

本版完成已授权的 v3.1.0 至 v4.0.0 十版计划，补齐隔离网络交付、跨版本升级和维护诊断。

  • agentsqlctl release verify：使用独立可信公钥，只读验证完整 15 项发行资产、三份 Ed25519 签名、SBOM、来源证明和哈希。
  • 离线运输包：私有暂存后验签打包，在目标环境重新验签并使用已有安装器离线安装。
  • agentsqlctl support-bundle：导出有大小限制的固定字段 JSON，检查配置及元数据/审计 schema；不导出 SQL、业务数据、日志、连接信息或凭据，拒绝覆盖现有文件。
  • 升级维护：正式 v3.0.2、v3.5.0、v3.9.0 的 SQLite 和分库 PostgreSQL 六条升级/成套备份恢复路径通过；控制台、中文及英文文档与六份 PDF 同步更新。

源码：ee1f8cabec124783f3d5934cb7d93c7f96ae7fba；main CI 四项关卡通过。schema 保持 SQLite 27、PostgreSQL metadata 25 / audit 7。

发行资产包含 Linux amd64/arm64 安装包、SPDX SBOM、provenance、SHA-256 清单及三份 Ed25519 签名。公钥须通过独立可信渠道核对，不能仅信任与包一起下载的公钥。

完整发布验收已通过：15 项正式下载文件及三份签名、禁网运输包与预安装、三类镜像双架构匿名拉取及运行版本、官网 26/26 检查、六份 PDF 哈希、公网 Demo 允许/拒绝/脱敏/审计，以及 latest 双架构匿名拉取。

交付指南 · 升级与回退 · 验收记录 · 发布证据

验收边界：使用合成数据；升级演练证明迁移与成套备份恢复，不是断电持久性测试。离线安装以 --no-start 验证预安装，不等于 systemd 服务验收。arm64 在 Docker/QEMU 执行，没有实体 ARM 硬件验收。本版不扩大数据库支持承诺，也不声明客户生产认证、厂商认证或固定 LTS/SLA。

English

This release completes the authorized v3.1.0–v4.0.0 ten-release plan with offline delivery, cross-version upgrades and maintenance diagnostics.

  • agentsqlctl release verify uses an independently trusted key to verify all 15 local assets, three Ed25519 signatures, SBOM identity, provenance and hashes without modifying or executing them.
  • The offline transport builder privately stages and verifies assets; recipients reverify them and use the existing offline installer.
  • agentsqlctl support-bundle exports a bounded, fixed-schema JSON report about configuration and metadata/audit schema readiness. It excludes SQL, business data, logs, connection details and credentials, and refuses to overwrite existing files.
  • All six SQLite and separated PostgreSQL upgrade/paired-restore paths from official v3.0.2, v3.5.0 and v3.9.0 packages passed. The console, Chinese/English documentation and six PDFs were updated.

Source: ee1f8cabec124783f3d5934cb7d93c7f96ae7fba; all four main CI gates passed. Schemas remain SQLite 27 and PostgreSQL metadata 25 / audit 7. Assets include Linux amd64/arm64 packages, SPDX SBOM, provenance, checksum inventory and three Ed25519 signatures. Establish public-key trust independently of the downloaded asset directory.

Completed delivery gates include all 15 official downloads and three signatures; network-disabled transport and preinstallation; anonymous pulls and runtime versions for all three dual-architecture images; 26/26 website checks; six public PDF hashes; public Demo allow/deny/masking/audit; and both latest anonymous pulls.

Delivery guide · Upgrade and restore · Acceptance · Release evidence

Acceptance boundaries: synthetic data; migration and paired-restore checks do not prove power-loss durability. Offline installation uses --no-start and does not certify systemd service operation. arm64 execution uses Docker/QEMU, not physical ARM hardware. Database support claims are unchanged; no customer production certification, vendor certification or fixed LTS/SLA is asserted.

Assets 17
Loading