Releases: emotionscientific/verlet-kernel
Release list
v0.3.0
What's Changed
- EMO-505: document the standalone rpc credential path by @hellosunnyfield in #44
- EMO-506: render rpc client errors without internal naming by @hellosunnyfield in #45
- EMO-509: local Linux verify lane via Docker with a warm cache by @hellosunnyfield in #46
- EMO-511: bump bashkit 0.9.0 to 0.14.3 by @hellosunnyfield in #47
- EMO-510: complete cargo-lane-test fixture for verify lint inputs by @hellosunnyfield in #48
- EMO-512: raise debug test-thread stack so the scenario sweep reports instead of dying by @hellosunnyfield in #49
- EMO-515: free hosted-runner disk before big debug test builds by @hellosunnyfield in #50
- EMO-515: trim CI debuginfo to line tables so the build fits every runner by @hellosunnyfield in #52
- EMO-513: settle fork ingress claims across ambiguous store append faults by @hellosunnyfield in #51
- EMO-514: receipt-and-continue for planned faults on harness-issued scenario ops by @hellosunnyfield in #53
- EMO-520: rename Cooldis kernel to Verlet by @hellosunnyfield in #57
- EMO-523: fix CI rename regressions by @hellosunnyfield in #58
- EMO-524: observe delayed scenario provider cuts by @hellosunnyfield in #59
- release: v0.3.0 by @hellosunnyfield in #60
- release: fix mangled tap-dispatch workflow name by @hellosunnyfield in #61
Full Changelog: v0.2.0...v0.3.0
Contributors
Assets 12
v0.2.0
Highlights
The control plane now has an identity plane. Every RPC connection resolves to a principal before any method is dispatched, on both the Unix socket and the loopback WebSocket: bearer credentials for operators and adapters, a console subprotocol carrier, and same-uid peer mapping so local CLI use keeps working with no migration. Every method carries an authority class (host, interactive, or ingress) checked at the dispatcher, with unknown methods failing closed. Sessions, refusals, and host-level effects are witnessed as durable records written before the effect happens. A new cooldis identity CLI covers bootstrap, declare, mint, list, and revoke; tokens are printed exactly once and only digests are stored. The design and its shipped state are documented in ADR 0008, and docs/app-server.md now walks an operator from an empty machine to an authenticated managed deployment.
Adapters target a pinned envelope contract. ADR 0007 lands the typed delivery envelope: external provenance, principal and tenant resolution, and byte-stable dedupe identity, with admission refusing unwitnessed input. Telegram webhook authentication fails closed.
Recovery and explainability. Tool invocations carry effect classes and fingerprints that govern crash recovery. Manifests keep immutable authored and resolved version snapshots, standing grants expire, and cooldis debug bind explains a thread's effective configuration from its receipts, online or straight from the journal.
Breaking changes. Clients connecting to the TCP WebSocket without a credential now receive 401 Unauthorized (local Unix-socket use with the same uid is unaffected). The Codex CLI runtime adapter has been removed.
Full change list below.
What's Changed
- EMO-462: give burst-test shutdown bounds CI headroom by @hellosunnyfield in #14
- CI: add Workspace tests soak lane on the self-hosted mac mini by @hellosunnyfield in #15
- CI: bound the persistent cargo target on the macmini runner by @hellosunnyfield in #16
- EMO-466: remove codex CLI runtime adapter by @hellosunnyfield in #17
- EMO-479: threat-model registry with append-only lint guard by @hellosunnyfield in #18
- EMO-478: admission-coverage ratchet over all turn-entry surfaces by @hellosunnyfield in #20
- EMO-472: fail-closed Telegram webhook authentication by @hellosunnyfield in #19
- EMO-453: expiry on manifest grants closes the standing-grant gap by @hellosunnyfield in #21
- EMO-450: immutable authored + resolved manifest version snapshots by @hellosunnyfield in #22
- EMO-451: bind explain projects the effective envelope from receipts by @hellosunnyfield in #23
- EMO-448: effect classes and fingerprints govern tool invocation recovery by @hellosunnyfield in #24
- EMO-492: batch dependency bumps (hmac 0.13, regex 1.13, ratatui 0.30.2, artifact actions v7/v8) by @hellosunnyfield in #25
- Bump regex from 1.13.0 to 1.13.1 by @dependabot[bot] in #12
- EMO-467: rename provider_runtime to agent_loop: it is the one runtime by @hellosunnyfield in #26
- EMO-490: route hook and local verify builds through the managed cargo lane by @hellosunnyfield in #27
- EMO-493: make the product-term guard merge-aware by @hellosunnyfield in #28
- EMO-471: adapter envelope contract v0 by @hellosunnyfield in #29
- README: present the kernel as a product by @hellosunnyfield in #33
- ADR 0008: identity plane v0 (accepted) by @hellosunnyfield in #34
- EMO-473: identity plane skeleton (types, authority trait, config shape) by @hellosunnyfield in #35
- EMO-496: identity records, SQLite authority, and the identity CLI by @hellosunnyfield in #36
- EMO-499: daemon identity config wiring, mode and tenant from config by @hellosunnyfield in #37
- EMO-497: boundary authentication with bearer tokens and peer uid mapping by @hellosunnyfield in #38
- EMO-498: dispatcher authorization at the choke point by @hellosunnyfield in #39
- EMO-500: identity plane docs, threat-model update, TM-ID lint by @hellosunnyfield in #40
- chore: ignore local .wt worktree container by @hellosunnyfield in #41
- EMO-504: de-flake test timeout bounds, add test-timeout lint by @hellosunnyfield in #42
- release: bump cooldis to 0.2.0 by @hellosunnyfield in #43
Full Changelog: v0.1.0...v0.2.0
Contributors
Assets 12
v0.1.0
Full Changelog: v0.1.0-rc.7...v0.1.0
v0.1.0-rc.7
Upgrade note: an unsettled rc.6 fork claim in flight at upgrade fails closed at recovery with an explicit operator-action error; settled legacy claims are unaffected.
Full Changelog: v0.1.0-rc.6...v0.1.0-rc.7
v0.1.0-rc.6
v0.1.0-rc.5
What's Changed
- Bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #3
- Bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #1
- Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2
New Contributors
- @dependabot[bot] made their first contribution in #3
Full Changelog: v0.1.0-rc.4...v0.1.0-rc.5
Contributors
Assets 12
v0.1.0-rc.4
What's Changed
- M0: events/0.2 witnessing, clock, durable egress, Wasm couplings, skills, admission by @lenhsherr in #4
- M1: system prompt end-to-end + daemon route agent binding (KT-31, KT-32) by @lenhsherr in #5
- KT-33: witness Telegram reactions as ingress with observe_only default by @lenhsherr in #6
- KT-28: message_react tool with witnessed io.egress.requested by @lenhsherr in #7
- KT-35: evict reaction machinery from kernel surface by @lenhsherr in #8
New Contributors
- @lenhsherr made their first contribution in #4
Full Changelog: v0.1.0-rc.3...v0.1.0-rc.4