v0.1.1

Changelog

• d34f124: Add local enforce, fleet, pack builder, console, and host adapters (Tristan 79180812+tr9800a@users.noreply.github.com)
• 9176691: Add starter control map and framework-projected reports (Tristan 79180812+tr9800a@users.noreply.github.com)
• b3cef15: Copyright is Tristan McKinnon (tr9800a 79180812+tr9800a@users.noreply.github.com)
• ba5a22b: Cover the enforce actuator and fix mixed-batch Content-Length (Tristan 79180812+tr9800a@users.noreply.github.com)
• d18bfa9: Declare pytest in fleet so the gate can run its tests (tr9800a 79180812+tr9800a@users.noreply.github.com)
• fdb1369: Document host install paths and refuse agent authorship trailers (Tristan 79180812+tr9800a@users.noreply.github.com)
• 16c6475: Drop assistant authorship wording from published docs and the PR (Tristan 79180812+tr9800a@users.noreply.github.com)
• 5479742: Fix unreachable enforce on hosts, and gate the trees that hid it (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 1aee087: Gurdy is fully open source, and moves to deterministic-systems-lab (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 905e875: Gurdy — agent governance: intercept, decide, attest (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 582746e: Match the README's verify output to what the binary prints (tr9800a 79180812+tr9800a@users.noreply.github.com)
• eefa7ca: Merge pull request #1 from GurdyAI/docs/repo-is-public (Tristan 79180812+tr9800a@users.noreply.github.com)
• 1211721: Merge pull request #1 from deterministic-systems-lab/feat/oss-fleet-enforce-policy-adapters (Tristan 79180812+tr9800a@users.noreply.github.com)
• b594d23: Merge pull request #2 from GurdyAI/docs/homebrew-tap-ready (Tristan 79180812+tr9800a@users.noreply.github.com)
• 3385b08: Merge pull request #2 from deterministic-systems-lab/feat/framework-control-map (Tristan 79180812+tr9800a@users.noreply.github.com)
• 99afc18: Merge pull request #3 from GurdyAI/fix/verify-reproducible-draft (Tristan 79180812+tr9800a@users.noreply.github.com)
• dc4db4c: Merge pull request #3 from deterministic-systems-lab/fix/adapter-enforce-and-ci-gates (Tristan 79180812+tr9800a@users.noreply.github.com)
• a559d37: Merge pull request #4 from GurdyAI/fix/verify-reproducible-perms (Tristan 79180812+tr9800a@users.noreply.github.com)
• 4a235fa: Merge pull request #4 from deterministic-systems-lab/docs/verify-output-drift (Tristan 79180812+tr9800a@users.noreply.github.com)
• f0dce93: Merge pull request #5 from GurdyAI/docs/npm-dist-tag-correction (Tristan 79180812+tr9800a@users.noreply.github.com)
• 7ee3bb2: Merge pull request #5 from deterministic-systems-lab/docs/pypi-pending-publisher-url (Tristan 79180812+tr9800a@users.noreply.github.com)
• 9362bf3: Merge pull request #6 from GurdyAI/docs/no-ai-attribution (Tristan 79180812+tr9800a@users.noreply.github.com)
• 680d89b: Merge pull request #7 from GurdyAI/perf/d12-automint-lock (Tristan 79180812+tr9800a@users.noreply.github.com)
• 5709b08: Merge pull request #8 from GurdyAI/perf/d6-bound-ledger-parts (Tristan 79180812+tr9800a@users.noreply.github.com)
• 8153a78: Merge pull request #9 from GurdyAI/feat/tis-keyring-rotation (Tristan 79180812+tr9800a@users.noreply.github.com)
• 156b0b2: Point the PyPI comment at the pending-publisher URL (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 2624995: docs: D9's floor was a ratchet behind ci.yml (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 3b8317f: docs: correct the npm placeholder dist-tag claim — the protection never existed (tr9800a 79180812+tr9800a@users.noreply.github.com)
• cf26889: docs: no AI attribution in anything published from this repo (tr9800a 79180812+tr9800a@users.noreply.github.com)
• a9c4153: docs: the repo is public, and three statements stopped being true (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 9e910ff: docs: the tap exists and the last long-lived credential is in place (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 61a7598: feat(tis): deployment keyring — 2-key overlap, kid-selected verify, JWKS (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 027c85c: fix(ci): a verifier must not hold write access to what it verifies (tr9800a 79180812+tr9800a@users.noreply.github.com)
• eda5145: fix(ci): the reproducibility gate could not reach a draft release (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 6bdc380: perf(ledger): D6 — bound the partition map, not just the file descriptors (tr9800a 79180812+tr9800a@users.noreply.github.com)
• 6b0f5b0: perf(proxy): D12 — stop re-verifying a token we minted ourselves (tr9800a 79180812+tr9800a@users.noreply.github.com)
• dd0c842: test(tis): cover the keyring paths the ratchet caught (tr9800a 79180812+tr9800a@users.noreply.github.com)

Verifying this release

Every artifact is signed with cosign keyless
signing — no private key exists to steal, and each signature is recorded in
the public Rekor transparency log.

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/deterministic-systems-lab/gurdy/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt
sha256sum -c checksums.txt --ignore-missing

Or rebuild it yourself. gurdy-verify is the tool you would use to check
evidence you do not trust, so you should not have to trust our build of it
either. See docs/reproducible-builds.md
— the binaries are byte-for-byte reproducible from this tag.