Skip to content

v2026.8.12

Choose a tag to compare

View all tags
@jmagly jmagly released this 17 Aug 15:22
· 131 commits to main since this release
v2026.8.12
This tag was signed with the committer’s verified signature.
jmagly Joseph Magly
GPG key ID: 839584D0E25E5126
Verified
Learn about vigilant mode.
1fe1517
This commit was signed with the committer’s verified signature.
jmagly Joseph Magly
GPG key ID: 454C68C4A2174CE9
Verified
Learn about vigilant mode.

AIWG 2026.8.12 - Verifiable artifacts and research labs

Release date: 2026-08-17
Channel: stable

AIWG 2026.8.12 extends verification from individual packages to the full path
an artifact travels: marketplace exchange, provider transformation, web-backed
release delivery, and local consumption. It also ships six reproducible research
and red-team addons, strengthens self-hosted Gitea configuration, and makes the
Fortemi conformance path more portable across release runners.

What changed

  • Artifact verification now has stable outcomes, trust-root and trust-state
    contracts, attestation emission, a public API, CLI handling, schemas, and
    adversarial conformance coverage.
  • Marketplace v2 bundles can carry portable evidence, provider deployments can
    authenticate transformation receipts against source inventories, and signed
    web-release descriptors bridge provenance across release surfaces.
  • Five research experiment addons cover century-readiness review, long-context
    retrieval benchmarking, natural-language evaluation, orchestration topology
    comparison, and premortem-v2 analysis.
  • A synthetic monitorability red-team addon exercises unlabeled and
    monitor-constrained scenarios with reproducible fixtures and evidence.
  • Project setup can designate Gitea explicitly for ambiguous self-hosted
    remotes, while legacy force-push policy values are normalized during repair.
  • Doctor uses Git's effective ignore rules, including negations and local or
    global excludes, instead of relying only on textual .gitignore inspection.
  • Fortemi shard conformance verifies host capabilities, provisions pinned Rust,
    and fetches receipt references atomically on the selected Gitea runner.

Verification

  • Public artifact-trust schemas and every stable verifier outcome are covered by
    unit, integration, lightweight-CLI, and schema-lint tests.
  • Provider transformation receipt tests cover source inventory authentication,
    expected first-use state, deployment verification, and web-mode packaging.
  • Research addon fixtures and recorded evidence are exercised by integration
    tests, including monitorability threshold transitions.
  • Release validation checks synchronized package/plugin versions, TypeScript,
    production builds, generated documentation, metadata, the full CI suite, and
    Fortemi discovery parity.

Package matrix

aiwg@2026.8.12
@aiwg/cli@2026.8.12
@aiwg/cockpit@2026.8.12

Upgrade

Install all AIWG packages at version 2026.8.12. After upgrading, refresh AIWG
for each provider you use so provider outputs can be checked against the new
transformation receipt and artifact-trust contracts.

Rollback

Roll all three npm packages back together to 2026.8.11, then redeploy the
project's provider assets and regenerate its context files.

Assets 10
Loading