Plebian-OS 0.1.7

Plebian-OS 0.1.7

Prepared 2026-08-02.

Plebian-OS 0.1.7 is the first coordinated stack release since 0.1.2. It
combines Plebian-OS, Pleb, Kilix, and Kilix 95 over a pinned Debian installer,
package snapshot, terminal engine, Go toolchain, optional desktop closure, and
offline voice closure.

Publication status

No 0.1.7 artifact is published yet, and every local candidate built so far is
superseded. The earlier local candidate ISO and local candidate tags predate the
final Kilix Voice fixes; every later one predates the Pleb and Kilix refs
recorded below, which moved to carry the Media Player's headless backend and the
Music front end that drives it. None may be distributed or used as release
provenance.

Publication requires a new strict ISO built from this exact closure, a new
checksummed source archive and build-info, and the full BIOS, UEFI, installed-VM,
catalog, voice, provenance, and reboot acceptance procedure in
RELEASING.md. Only that newly accepted artifact may supply
the final ISO and artifact hashes. Until then, this file is source-release
metadata, not an artifact acceptance record.

Install and upgrade policy

0.1.7 is a fresh-install baseline. Install it fresh from any version older
than 0.1.7; in particular, 0.1.2 to 0.1.7 is intentionally not a supported
in-place upgrade. Versions 0.1.3 through 0.1.5 were not coordinated releases,
and 0.1.6 was an unpublished candidate.

Every later coordinated release must support an in-place upgrade from the
immediately previous published release while preserving user files,
application and game state, provider/desktop state, shared settings, operator
session choices, and custom wallpaper/layout. A skip over a published release
is supported only when that exact path is named and accepted. See
UPGRADING.md and the machine-readable
upgrade-policy.json.

Highlights

• Adds Kilix Cap, Kilix TUI, and Kilix Land as optional, immutable
  Kilix-pinned desktop providers without expanding the four-repository release
  core.
• Ships Tmux Manager and its unified CLI, the Kilix Temps dashboard, persistent
  PTY-backed panes, and bounded private session transcripts with two-tier zstd
  archival.
• Gives the Media Player a headless mode, so the Music terminal utility drives
  the same decoder over a versioned control socket instead of shipping a second
  playback implementation. Firstboot builds the pinned player rather than
  leaving the first person to open it waiting on a compile, and kilix amp
  builds it on demand anywhere it is still missing.
• Provisions the complete checksum-verified Kilix Voice closure: read-aloud,
  click-to-talk offline dictation, the pinned Vosk library/model, provenance and
  license material, device-free synthesis/recognition acceptance, and
  VirtualBox audio input/output support. The microphone remains closed until an
  explicit dictation action.
• Ships the Chawan text browser, built from source on first use by
  kilix chawan. The URL dispatcher prefers an installed Chrome, Chromium or
  Firefox and falls back to Chawan, so a machine with no graphical browser
  still opens links; Kilix 95 offers it beside Firefox and Chromium.
• Gives Kilix and Kilix 95 one shared settings contract for appearance,
  logging, thermal, audio, network, battery, pane memory, and games.
• Keeps installed graphical applications, including Chromium, inside Kilix
  tabs and panes by routing ordinary commands through kilix run; Openbox
  remains underneath as a safety net and explicit native-window opt-out.
• Starts the visibly identifiable main Kilix instance with Kilix 95 as page 1,
  clickable page/pane chrome present, and hard-kiosk respawn disabled.
• Clean-builds and verifies every selected optional game/app during release
  acceptance, rejects empty or non-runnable catalog entries, and verifies all
  four installed version commands.
• Hardens USB target selection around escaped swap paths, whole-stack update
  rollback across new submodules and Openbox state, installed version markers,
  source provenance, and preservation of operator-owned settings.

Exact coordinated source closure

Component	Immutable release ref
Plebian-OS	v0.1.7 (the final release commit; its resolved commit is recorded in build provenance)
Pleb	925a9dee66e8238d0d8da140e12e49fdd17d42fc
Kilix	b40ac8ba0826b598687492c2d050e32eaec48a8d
Kilix engine submodule	5d127b452544d8e3db32094434fd1e1e68803fbd
Kilix 95	502ac23487e67db4c088702830db1b8d09f2b490
Kilix Voice	f05b64a7b2bc25fa9a7e2c3ae1e0b848f04a23f6

The authoritative build input closure is 0.1.7.env. Kilix 95's
hosted release workflow is pinned to the same Kilix commit shown above. Cap,
TUI, Land, Tmux Manager, Temps, and their dependencies inherit their immutable
revisions through the pinned Kilix commit.

Immutable external inputs

• Debian 13.5.0 amd64 netinst:
  95838884f5ea6c82421dfe6baaa5a639dbbe6756c1e380f9fe7a7cb0c1949d2a
• Debian package snapshot: 20260727T000000Z
• Kitty fallback 0.47.4:
  bc230142b2bd27f2a4bf1b1b67575f3d397a4ea2cc83f4ac2b912c306a939693
• Go 1.26.5 amd64:
  5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053
• Go 1.26.5 arm64:
  fe4789e92b1f33358680864bbe8704289e7bb5fc207d80623c308935bd696d49
• Vosk 0.3.45 x86_64 wheel:
  25e025093c4399d7278f543568ed8cc5460ac3a4bf48c23673ace1e25d26619f
• Vosk small US-English 0.15 model:
  30f26242c4eb449f948e42cb302dd7a686cb29a3423a8367f99ff41780942498

The manifest records the stable source URLs and the verification rationale for
each input. The release image deliberately retains Debian 13.5.0 because 13.6.0
did not yet have an immutable Debian archive URL when this closure was prepared.

Provenance boundary

The exact resolved Plebian-OS commit, artifact hashes, generated package/source
manifests, and acceptance result do not exist until the replacement artifact is
built. They must be recorded from that build and attached with the ISO; they
must never be copied from the superseded candidate.

The published 0.1.2 artifacts have a separate forensic correction in
0.1.2-provenance.md. Its public tags were not moved and
its original assets were not replaced.

Kilix/Pleb/Plebian-OS video series (media)

Media assets for the README and plebian-os.com. Not a software release — no code, tags, or dependency pins change here.

• kilix-pleb-plebian-os-complete.mp4 — the full ten-part series "Kilix, Pleb, and Plebian-OS: A Desktop Built Inside a Terminal" (1920x1080, 31m22s, chaptered)
• 01-machine-whose-desktop-is-kilix.mp4 — "The Machine Whose Desktop Is Kilix", part one (2m51s)
• 09-libraries-and-apps.mp4 — "Shared Libraries and the Application Ecosystem", part nine (3m32s)
• 10-plebian-os-lifecycle.mp4 — "Plebian-OS: Installation, Updates, and the Complete System", part ten (2m48s)
• series.json — the ordered-output series manifest

sha256:

• complete: 6b677eb185d4f36d31886ba5fc1010900a547004346f1abf57347a2f3b0a1e09
• part one: 75eefa8e831e766f1a286283cb79b5f0864c39edec825bc9eac3236356b62f06
• part nine: 7576bce31ecf15e301d9ed4ea39f4c427bc895a03013e74b59d329926c545d8d
• part ten: 8be9eecc8e3880eb49f22d12afad011d97eb0b98de80e13585db715a601813b4
• series.json: 7c6621a761f9a88db12ae2a8d096cba1bff2dcb6e62bb155c6f6f33892cd7461

Parts two–eight are published the same way on the repos they cover: kilix (two, four), pleb (three), kilix-95 (five), kilix-cap (six), kilix-tui-utils (seven), kilix-land-desktop (eight).

Plebian-OS 0.1.2

Plebian-OS 0.1.2

Plebian-OS 0.1.2 is a coordinated release of Plebian-OS, Pleb, Kilix,
and Kilix 95, based on Debian 13.5 installer media and a pinned Debian
snapshot.

Highlights

• Complete Plebian-OS identity across BIOS, UEFI, the graphical installer,
  LightDM, and the desktop, including the angular-P geek logo and wallpaper.
• Coordinated source checkouts under ~/.local/gpu_terminal/sources and
  private persisted data under ~/.local/gpu_terminal.
• A complete Kilix native dependency closure, Pleb recovery guide, serialized
  transactional updates, coherent Kilix generations, and bounded rollback
  state.
• Kilix and Kilix-95 fixes for session logging, clickable terminal chrome,
  fresh firstboot builds, and unique streamed graphics frames.

Validation performed before publication

• Fresh 4 GiB / 20 GiB end-to-end installation using the exact coordinated
  artifact closure, followed by provenance, storage, provider, update,
  recovery, application-soak, reboot, and log checks.
• All 947 ISO media checks plus stock-content, signed-binary, deterministic
  installer-overlay, and hybrid BIOS/UEFI/MBR/GPT/APM inspection.
• BIOS and UEFI installer-menu checks with publishable-media autoboot disabled.
• Injected same-source promotion failure with restoration of the prior
  generation, stamps, repositories, OS layer, and persistence sentinels.

Correct coordinated artifact commits

• Plebian-OS: 96016f0eee8b652f13c377fa84c842bed98b0f8c
• Pleb: 20c5cff3655cf95efb96dc7a7e855257dc6ccc2e
• Kilix: 0cf52e81e481a45b103548373f52ee5c73e0e8eb
• Kilix 95: 8ac7aa65e3df4d08cc31e020ee0517b9087c6d4c

Artifact hashes

• ISO: cedd3f933171f4ce5166f88a8cc35a08e2c12a207101b3f72a92be743844e1a4
• Build info: 7788ba540745f028976ba22a04620a2a5d6b71d35ca3f0182048e7d7dd38dd73
• Source archive: 59ed4e44e0a96ccd0dec143bfe6cdc1a3941ee3d5f6655f1f763ab7775b290c4

Provenance correction

The attached artifacts have always contained the four exact commits above.
The public v0.1.2 tags were later recreated on different commits, and the
previous release-note commit list followed those tag targets. The public tags
will not be moved. Audit and reproduce the attached ISO from its hashes,
embedded/attached build-info, checksummed source archive, and the exact commit
IDs above.

The full forensic record is attached to this release as
plebian-os-0.1.2-provenance.md,
SHA-256
959797398d3f4031dae067322407ac4f959467956f586f46dce039ac3f946b5d.

Upgrade status

0.1.2 predates the supported in-place upgrade baseline. Install 0.1.7 fresh
when it is published; 0.1.2 to 0.1.7 is intentionally not a supported
migration.

Plebian-OS 0.1.1

Plebian-OS 0.1.1 is the first publishable coordinated release of Plebian-OS, Pleb, Kilix, and Kilix 95. It supersedes the incomplete v0.1.0 candidate without moving or reusing that tag.

Highlights:

• Secure, atomic image creation with randomized generated credentials, SSH safeguards, and expanded protected-disk detection.
• Reproducible release closure using the archived Debian 13.5 netinst, a pinned Debian snapshot, exact component and toolchain commits, verified downloads, and installed provenance.
• Transactional provisioning and stack updates with locking, clean-checkout enforcement, rollback, and explicit session restart behavior.
• Memory-bounded Kilix fork builds and a complete verified native dependency closure; 4 GiB is the release-tested build baseline.
• Hardened external desktop-provider/API contracts and broad behavioral, integration, lint, BIOS, and UEFI coverage.

Validated before publication:

• Exact-manifest installer and firstboot acceptance at 4 GiB, including a successful pinned in-guest update with no OOM evidence.
• Provider, status/doctor, kiosk off/on, hard-respawn, and LightDM restart paths.
• The strict release ISO booted to its installer menu under both legacy BIOS and UEFI.

Coordinated commits:

• Plebian-OS: 8006631abc098f88041415f1be8025faf053cb58
• Pleb: 6978e285f83bac708cd238d5d59da8581bc5ee33
• Kilix: 422a0545f14834df392bb832eb47f4eea7eee7b7
• Kilix 95: 5f05f14de30960dcb8877db6d5cf611065b67194

ISO SHA-256: f624abaaaccaa4ceca1dca451b108ac36bcbfc67cd3695b5a0f889d9e2bf5a0c