Skip to content

korvid v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Aug 00:12
· 6 commits to main since this release
v0.3.0
b33738b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

korvid v0.3.0

v0.3.0 makes destructive-operation previews materially more informative while
preserving korvid's approval and fail-closed audit boundaries.

Highlights

Graph-derived blast radius

Write confirmations can now include bounded dependency and dependent context
from korvid's resource graph. The preview keeps incomplete-evidence warnings
visible instead of presenting partial graph data as certainty.

Scale-down impact previews

Deployment, StatefulSet and ReplicaSet scale-down requests show bounded
controller and routing context before approval. The preview does not predict
which exact Pod Kubernetes will remove.

Pod resize impact previews

In-place pod resize requests summarize the affected containers and resource
changes alongside relevant graph context before approval.

Node maintenance impact previews

Cordon confirmations explain the node's local scheduling effect. Drain adds a
Pod eviction plan and, where available, bounded workload graph context and
disruption considerations.

MCP follow demonstration

The README now includes a short recording of GitHub Copilot CLI using korvid's
read-only MCP tools while the TUI follows from pods to logs and Helm releases.

Install or upgrade

Install the full feature set:

uv tool install 'korvid[all]==0.3.0'

Reinstall or expand extras explicitly:

pipx install --force 'korvid[all]==0.3.0'

Base TUI only:

uv tool install 'korvid==0.3.0'

Compatibility

  • Python 3.11, 3.12 and 3.13 are supported.
  • No intentional breaking configuration or provider/plugin API changes.
  • Existing local configuration, audit records and retained state remain in
    their documented locations.

Safety posture

  • Cluster reads and diagnostics remain read-only.
  • Every cluster write still requires an operator approval keystroke.
  • Every executed write still uses fail-closed audit logging: if the audit entry
    cannot be recorded, the mutation is blocked.
  • External MCP clients receive read and UI-drive tools; optional write
    proposals still require review and approval in the TUI.

Verify

The GitHub Release publishes the wheel, source distribution, checksums, SBOM,
offline bundles and provenance attestations produced from the tagged commit:

set -eu
gh release download v0.3.0 --dir dist/v0.3.0
gh attestation verify dist/v0.3.0/korvid-0.3.0-py3-none-any.whl \
  --repo hellices/korvid
gh attestation verify dist/v0.3.0/SHA256SUMS --repo hellices/korvid
(cd dist/v0.3.0 && shasum --algorithm 256 --check SHA256SUMS)

Known limits

  • Impact previews are bounded and can report incomplete evidence when RBAC or
    unavailable resource kinds prevent a complete graph.
  • Performance qualification and remaining scale limits are documented in
    docs/performance.md.
  • MCP log results are not credential-pattern masked by korvid; the connected
    external client owns its model and data boundary.
Assets 14
Loading