Skip to content

Agent Wiki 0.8.14

Choose a tag to compare

View all tags
@chrisbyboston chrisbyboston released this 29 Sep 18:19
· 22 commits to main since this release
v0.8.14
This tag was signed with the committer’s verified signature.
chrisbyboston Chris Reynolds
SSH Key Fingerprint: 1Np/3VtW8SH6zILX+qft4EhOs5KnErjy0+RFr2zXrfQ
Verified
Learn about vigilant mode.
d85bff1

Agent Wiki 0.8.14 refreshes the locked NixOS 26.05 runtime to the September 28 revision, including Node 24.21.0, curl 8.22.0, OpenSSL 3.6.4 and PCRE2 10.48. Application data formats remain compatible. Existing installations still require an explicit stopped-writer upgrade, a consistent recovery copy, and deployment-specific acceptance checks.

This release includes the changes prepared in 0.8.13: a packaged loopback liveness command and support for the independently released Wiki service module 0.1.1, including optional private Cloud Map discovery and existing-service naming. The held 0.8.13 application release is superseded by this release.

Signed source tag: v0.8.14, commit d85bff140336e954957f8d4be832d58a0f70ddea.

The runnable asset is the qualified Linux x86-64 OCI archive. It does not require Nix on the container host. Its signed manifest binds the source, archive and image configuration. Verify the signing key through an independently trusted channel; its fingerprint is SHA256:1Np/3VtW8SH6zILX+qft4EhOs5KnErjy0+RFr2zXrfQ. JSON signatures use the SSH namespace agent-wiki-release.

  • Archive SHA-256: 0cc9f029a0125d1c231c293c5d4c88e9a3ff520e0f9c882c8beefc4106137117.
  • Image configuration SHA-256: 2bf094634ff985c07425bdc0eac7d2e5dbdb0769dcf9bc2c29b268945c161bc2.
  • Exact final source passed Linux and Apple Silicon macOS checks: 204 application tests and 72 browser tests per platform, package smoke checks, and zero production npm audit findings.
  • Native installed-package upgrade checks passed on both platforms. The published OCI passed adoption, identity/session continuity, backup/restore, external evidence, private liveness and runtime-hardening checks. See the signed qualification receipt for scope and measured results.

The attached runtime scan and signed applicability review are not a clean component scan. The review found no known reachable HIGH or CRITICAL issue in the inspected supported Wiki workflows. It records remaining component findings and a reachable LOW OpenSSL certificate-processing issue, CVE-2026-35189. ECR basic scanning does not support this Nix image; its lack of findings is not a security pass.

Native Nix host closures are not published: producer checks passed, but clean-consumer installation has not been qualified for this release. Synthetic checks do not certify customer deployments, independent disaster recovery, host reboot, Windows/WSL or SSH Git publication. Retain the previous recovery artifact until customer acceptance succeeds.

See upgrading, portable packages, and the changelog.

Assets 11
Loading