EdgeProc 0.4.1 is a corrective release for applications that persist FaissVectorIndex state. Upgrade before the next index save/load cycle; 0.4.0 is superseded for this use case.
Highlights:
- FAISS index and metadata now commit as one generation-addressed, crash-atomic snapshot.
- Bounded cross-process locking, stale-writer compare-and-swap, stable lock-free read-only loads, descriptor-pinned verification, and bounded recovery retention.
- CAS garbage collection and bundle publishing fail closed around symlinked shards, leaves, source files, and origin directories.
- Re-publishing repairs corrupt reused chunks before advancing
latest. - CLI I/O failures retain truthful public error classification.
- Source distributions carry the support files needed to run their own full contract.
- Trusted publishing builds and validates without OIDC; the credentialed job only re-verifies the immutable artifact handoff and invokes the official PyPI publisher.
Verification:
- Source/tag:
25d381f04ad60a02550ef7367c58e163eafacb74/v0.4.1 - Independent final review: Grade A; no P0/P1/P2 findings
- 477 tests; 98.40% branch coverage; 24/24 adversarial mutations caught
- Exact-main hosted gate, full-history secret scan, and locked dependency audit green
- PyPI publish: GitHub OIDC Trusted Publishing via
.github/workflows/publish.yml - PEP 740 publish attestations verified for both distributions
- Wheel SHA-256:
b88011fe72cdfc4b5a8a2e425f962cb0756a30565ca6eedb2e21e0efeea97183 - Sdist SHA-256:
8880050aa806833db45b3e3f18b65442fd626a7f92364d2e3b014ace3a460884 - Clean PyPI install and the seven-stage signed-bundle/offline-device demo pass
Install:
pip install 'edge-proc[localvec,bundles]==0.4.1'See CHANGELOG.md for the complete compatibility and migration notes.