Skip to content

Rust engine v0.1.33

Latest
Latest

Choose a tag to compare

View all tags
@markus-barta markus-barta released this 22 Aug 04:16
· 12 commits to main since this release
rust-engine-v0.1.33
f83a5b6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Rust engine v0.1.33 delivers JANUS-441: the dependency-side PAIMOS v1 external-stage reporter, fixed to the certified Paimos v5.11.0 contract.

janusd-paimos-delivery

  • Reads one root-owned, owner-only intent plus separate API-key and raw handoff-secret files; no caller-selected action, callback, command, credential lifecycle, or owner-stage authority is exposed.
  • Emits only janus_evidence with role dependency, validates the complete expected remote binding before mutation, and cannot complete the canonical owner deployment/verification stage.
  • Journals exact request bytes before sending, binds replay to canonical configuration and the frozen contract tuple, and replays the same body/idempotency key after ambiguous failures.
  • Enforces singleton canonical media types, absent content encoding, strict JSON, exact receipt epoch/state, and 201 ⇔ duplicate=false / 200 ⇔ duplicate=true semantics.
  • Is included in the Nix package and covered by release-assurance, native amd64/arm64 smoke and vulnerability scans, contract-pin checks, and adversarial replay/credential tests.

Frozen interoperability contract

  • Paimos release: v5.11.0
  • Certified commit: e5f4c86
  • Fixture-set digest: 0318f4025902c9d5dd790384950cc9daebb16e02e79a4a90ce7dddc673e68bed
  • Dependency fixture digest: 52a647abd52e229fcdef8461eeb9f7d31f07632501ad33f594cdfbc155c23d4b
  • Media and schema-major values are pinned and checked during release admission.

Feature PR: #90

Release PR: #91

Ticket: JANUS-441

Assets 11
Loading