Skip to content

Releases: devsolux/oandafly

Release list

Oandafly 1.0.0

Oandafly 1.0.0 Latest
Latest

Choose a tag to compare

View all tags
@devsolux devsolux released this 16 Oct 15:36
v1.0.0
27a62a6

First public release of Oandafly: a desktop-first workspace that runs the full MaleCNS connectome as a sparse neural rate model and passes its long/short preference to an independent, exact-decimal risk and execution layer for OANDA v20.

Experimental source release, not a trading-qualified product. Shared as-is under the MIT License with no warranty. Read the engineering status before using it with any broker account.

Assets

File Contents
oandafly-1.0.0-source.zip Deterministic complete source archive with the embedded per-file PACKAGE_MANIFEST.json
oandafly-1.0.0.tar.gz Python sdist
oandafly-1.0.0-py3-none-any.whl Python wheel (Python 3.13)
SHA256SUMS-python SHA-256 checksums of the three files above
*.sigstore.json Sigstore keyless signature bundle for every file

Assets are built, verified and signed by release.yml on GitHub-hosted runners.

Verify a download

sha256sum --check SHA256SUMS-python
cosign verify-blob --bundle oandafly-1.0.0-source.zip.sigstore.json \
  --certificate-identity https://github.com/devsolux/oandafly/.github/workflows/release.yml@refs/tags/v1.0.0 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  oandafly-1.0.0-source.zip

What works

  • Native Tk desktop workspace on macOS 26+ (Apple silicon), Windows 11 (AMD64) and Linux (AMD64); opening it never starts or arms a worker.
  • Headless worker (oandafly run) on Linux with libseccomp-contained inference; PRACTICE, SHADOW and LIVE modes behind five independently signed Ed25519 approvals.
  • Exact-decimal whole-account risk, a durable one-shot outbox, native-truth reconciliation and fail-closed protective recovery.
  • CI: the locked Linux qualification gate passes the full suite (709 tests, no skips) against a digest-verified private SQLite 3.51.3.

Not included / known limits

  • No MaleCNS dataset, trained weights, credentials, signed approvals or ready-to-trade configuration.
  • No native practice soak or live qualification; no order has been placed against a real account.
  • The trading worker is Linux-only; macOS and Windows are desktop-only.
  • Native desktop archives are not attached: the macOS containment helper and macOS 26.0 baseline acceptance remain open release blockers, and native builds need registered self-hosted runners.

Highlights

  • Proven-unsent entries and recovery actions are recorded as NOT_SENT instead of UNKNOWN and retried safely; anything possibly sent stays fenced.
  • Entries are fenced when the trading grant changes scope; RESUME, promotion and deployment-path handling hardened, with worker lifecycle tests.
  • Workflows on the latest actions pinned to commit SHAs, with Sigstore cosign keyless signing for release assets.

See the changelog for details.

Assets 10
Loading