interpose v3.10.0

Install

curl -fsSL https://github.com/interposed/interpose-releases/releases/download/v3.10.0/install.sh | sh

Or pin to this version explicitly:

curl -fsSL https://github.com/interposed/interpose-releases/releases/download/v3.10.0/install.sh | sh -s -- --version v3.10.0

Verify

Every artifact is signed with Sigstore cosign (keyless — no key to trust,
the signature is bound to this repo's release workflow and logged in Rekor).
Each <file> ships a <file>.sig and <file>.pem. To verify a download:

cosign verify-blob \
  --certificate interpose-v3.10.0-linux-amd64.tar.gz.pem \
  --signature   interpose-v3.10.0-linux-amd64.tar.gz.sig \
  --certificate-identity-regexp "^https://github.com/interposed/interpose/.github/workflows/release.yml@" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  interpose-v3.10.0-linux-amd64.tar.gz

---

v3.10.0

• Agents capability matrix: off-capable session-start / memory / update ops,
  broker-only session keys, and the reusable presence-gate baseline
  (deriveKEKFresh always-prompt vs cached).
• Memory harness: broker-resolved pool config, keyless-admin provider
  brokering, sealed agent-binding enforced on recall, OKF curation +
  plaintext export + session provenance, admin pool export over Noise.
• Vault: provider keys pinned to the provider-keys collection (fixes the
  "no vault item stocked" broker failure); new orgs work first try.
• Fleet update: peer-assisted (swarm) primitive, resumable offset-addressed
  transfer, rollback over Noise + binary-sha in machine info.
• Network/DNS: follow CNAME chains so allowed CDN hosts' IPs get trusted;
  trust fresh resolver IPs; never contain the box's own resolver; deny
  propagation fix.
• CLI: interpose policy list; opt-in shell command history.
• Security: grpc v1.83.2 (GO-2026-6443, GO-2026-6348).