Plebian-OS 0.1.7

Plebian-OS 0.1.7

Prepared 2026-08-02.

Plebian-OS 0.1.7 is the first coordinated stack release since 0.1.2. It
combines Plebian-OS, Pleb, Kilix, and Kilix 95 over a pinned Debian installer,
package snapshot, terminal engine, Go toolchain, optional desktop closure, and
offline voice closure.

Publication status

No 0.1.7 artifact is published yet, and every local candidate built so far is
superseded. The earlier local candidate ISO and local candidate tags predate the
final Kilix Voice fixes; every later one predates the Pleb and Kilix refs
recorded below, which moved to carry the Media Player's headless backend and the
Music front end that drives it. None may be distributed or used as release
provenance.

Publication requires a new strict ISO built from this exact closure, a new
checksummed source archive and build-info, and the full BIOS, UEFI, installed-VM,
catalog, voice, provenance, and reboot acceptance procedure in
RELEASING.md. Only that newly accepted artifact may supply
the final ISO and artifact hashes. Until then, this file is source-release
metadata, not an artifact acceptance record.

Install and upgrade policy

0.1.7 is a fresh-install baseline. Install it fresh from any version older
than 0.1.7; in particular, 0.1.2 to 0.1.7 is intentionally not a supported
in-place upgrade. Versions 0.1.3 through 0.1.5 were not coordinated releases,
and 0.1.6 was an unpublished candidate.

Every later coordinated release must support an in-place upgrade from the
immediately previous published release while preserving user files,
application and game state, provider/desktop state, shared settings, operator
session choices, and custom wallpaper/layout. A skip over a published release
is supported only when that exact path is named and accepted. See
UPGRADING.md and the machine-readable
upgrade-policy.json.

Highlights

• Adds Kilix Cap, Kilix TUI, and Kilix Land as optional, immutable
  Kilix-pinned desktop providers without expanding the four-repository release
  core.
• Ships Tmux Manager and its unified CLI, the Kilix Temps dashboard, persistent
  PTY-backed panes, and bounded private session transcripts with two-tier zstd
  archival.
• Gives the Media Player a headless mode, so the Music terminal utility drives
  the same decoder over a versioned control socket instead of shipping a second
  playback implementation. Firstboot builds the pinned player rather than
  leaving the first person to open it waiting on a compile, and kilix amp
  builds it on demand anywhere it is still missing.
• Provisions the complete checksum-verified Kilix Voice closure: read-aloud,
  click-to-talk offline dictation, the pinned Vosk library/model, provenance and
  license material, device-free synthesis/recognition acceptance, and
  VirtualBox audio input/output support. The microphone remains closed until an
  explicit dictation action.
• Ships the Chawan text browser, built from source on first use by
  kilix chawan. The URL dispatcher prefers an installed Chrome, Chromium or
  Firefox and falls back to Chawan, so a machine with no graphical browser
  still opens links; Kilix 95 offers it beside Firefox and Chromium.
• Gives Kilix and Kilix 95 one shared settings contract for appearance,
  logging, thermal, audio, network, battery, pane memory, and games.
• Keeps installed graphical applications, including Chromium, inside Kilix
  tabs and panes by routing ordinary commands through kilix run; Openbox
  remains underneath as a safety net and explicit native-window opt-out.
• Starts the visibly identifiable main Kilix instance with Kilix 95 as page 1,
  clickable page/pane chrome present, and hard-kiosk respawn disabled.
• Clean-builds and verifies every selected optional game/app during release
  acceptance, rejects empty or non-runnable catalog entries, and verifies all
  four installed version commands.
• Hardens USB target selection around escaped swap paths, whole-stack update
  rollback across new submodules and Openbox state, installed version markers,
  source provenance, and preservation of operator-owned settings.

Exact coordinated source closure

Component	Immutable release ref
Plebian-OS	v0.1.7 (the final release commit; its resolved commit is recorded in build provenance)
Pleb	925a9dee66e8238d0d8da140e12e49fdd17d42fc
Kilix	b40ac8ba0826b598687492c2d050e32eaec48a8d
Kilix engine submodule	5d127b452544d8e3db32094434fd1e1e68803fbd
Kilix 95	502ac23487e67db4c088702830db1b8d09f2b490
Kilix Voice	f05b64a7b2bc25fa9a7e2c3ae1e0b848f04a23f6

The authoritative build input closure is 0.1.7.env. Kilix 95's
hosted release workflow is pinned to the same Kilix commit shown above. Cap,
TUI, Land, Tmux Manager, Temps, and their dependencies inherit their immutable
revisions through the pinned Kilix commit.

Immutable external inputs

• Debian 13.5.0 amd64 netinst:
  95838884f5ea6c82421dfe6baaa5a639dbbe6756c1e380f9fe7a7cb0c1949d2a
• Debian package snapshot: 20260727T000000Z
• Kitty fallback 0.47.4:
  bc230142b2bd27f2a4bf1b1b67575f3d397a4ea2cc83f4ac2b912c306a939693
• Go 1.26.5 amd64:
  5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053
• Go 1.26.5 arm64:
  fe4789e92b1f33358680864bbe8704289e7bb5fc207d80623c308935bd696d49
• Vosk 0.3.45 x86_64 wheel:
  25e025093c4399d7278f543568ed8cc5460ac3a4bf48c23673ace1e25d26619f
• Vosk small US-English 0.15 model:
  30f26242c4eb449f948e42cb302dd7a686cb29a3423a8367f99ff41780942498

The manifest records the stable source URLs and the verification rationale for
each input. The release image deliberately retains Debian 13.5.0 because 13.6.0
did not yet have an immutable Debian archive URL when this closure was prepared.

Provenance boundary

The exact resolved Plebian-OS commit, artifact hashes, generated package/source
manifests, and acceptance result do not exist until the replacement artifact is
built. They must be recorded from that build and attached with the ISO; they
must never be copied from the superseded candidate.

The published 0.1.2 artifacts have a separate forensic correction in
0.1.2-provenance.md. Its public tags were not moved and
its original assets were not replaced.