Szpont Engine 0.8.0 — evidence for every reviewed step

Supervised goals now carry evidence of what the worker actually changed. Bind a repository and each fresh supervisor receives a before/after patch covering implementation and tests—even when the worker committed its changes before returning.

!goal 30m --repo /var/lib/szpont/artifacts/app Fix the parser and verify regressions.

• Capture working-tree bytes before and after each worker phase, including nonignored new files; start the next phase from a fresh baseline.
• Save the candidate, measured execution time and sealed code evidence atomically. Pause and reviewer recovery reuse the original patch instead of reading a later live diff.
• Give supervisors bounded change inventories, content hashes, patch excerpts, private evidence files and the two most recent review receipts. The review prompt explicitly calls out implementation changes and weakened test assertions.
• Keep repository selection explicit and within existing workspace/artifact access. Unbound and legacy goals report unavailable evidence. Sensitive paths, binary content, unsafe traversal and capture limits are reported as omissions.
• Preserve repository bindings and evidence through verified SQLite snapshots, with migration and recovery regression coverage.

This is observed evidence, not a guarantee of authorship or a replacement for tests. Concurrent processes can change a working copy; use isolated repositories for independent goals. See code-diff behavior and limits.

Upgrade: take a coordinated state snapshot and workspace checkpoint before upgrading. Version 0.8.0 migrates SQLite schemas 0–5 to schema 6. Older binaries cannot read schema 6; rollback requires the matching pre-upgrade state and reconciliation of later effects. Existing goals receive no implicit repository binding. See backup and restore.

Validation: 497 Node tests and 36 locked Python browser tests passed on the tagged source. Both native Linux container smoke jobs passed; the published image promotes those tested OCI bytes with provenance and SBOM attestations.

docker pull ghcr.io/dalkedev/szpont-engine:0.8.0

For reproducible deployments:

ghcr.io/dalkedev/szpont-engine@sha256:b8f43d13585fc74700f116fc6800f77dad9e2de2285aa7097cb9f4e59b7b00f1

The image supports Linux amd64 and arm64. Codex remains the default and the only packaged container runner. Host adapters for Claude Code and OpenCode retain their existing experimental status.