v0.2.0

Kapsel 0.2.0 is a developer beta for one bounded operation: kubernetes.set_deployment_image.

It lets a request-only caller ask for one owner-authorized Kubernetes Deployment image change
without holding Kubernetes credentials. Kapsel records durable state before mutation, recovers from
process loss without a blind second mutation, and returns an inspectable SUCCEEDED, FAILED, or
explicit UNKNOWN receiver result.

It adds:

• one production lifecycle path shared by ordinary operation and crash recovery
• bounded v0.2.x compatibility for the evaluator CLI, fixed stdio MCP adapter, grant v1 bytes,
  retained receipt v2 inspection, archive layout, and journal upgrade
• exact v0.1.1 journal backup, migration, rollback, retained-receipt, and bounded downgrade
  procedures
• hostile-input, process-loss, simulation, fuzz, live-kind, resource, dependency, privacy, and
  security qualification
• reproducible x86-64 GNU/Linux archive with a deterministic SPDX 2.3 SBOM
• Sigstore-authenticated digest manifest produced by the appointed GitHub Actions workflow

Download exactly:

• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.sha256
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.spdx.json
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.SHA256SUMS
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.SHA256SUMS.sigstore.json

The sole supported target is x86_64-unknown-linux-gnu, validated in pinned Debian 12 environments.
Follow the evaluator guide to authenticate the signed manifest with Cosign v3.1.2, verify every digest,
safely extract the archive, and run the disposable-kind demonstration.

Exact source revision: 5fe0407cd5ebd78f386905e33f79e0f712a57835

Archive SHA-256: 82db38b05772b1b6a4ef9a9312baf9633f0ce652ddfe8052ed7df86d1fd1d969

Authenticated candidate evidence:
GitHub Actions run 30410695345

This is a developer beta, not production-ready software. It supports one Kubernetes operation and no
second platform. It does not accept shell, kubectl, manifests, arbitrary patches, mutable tags,
wildcards, credentials, trust, paths, or lifecycle controls from the caller.

Kapsel does not claim exactly-once effects, Kubernetes truth, causation, complete capture,
compliance, builder integrity, dependency safety, vulnerability absence, or production fitness.
UNKNOWN is intentional when bounded observation cannot establish success or failure. Receipt
inspection reports INSPECTED, never VERIFIED.

Public Rust exports, crates.io, docs.rs, cargo install, the sandbox, another transport, another
capability, and another target remain unsupported.

v0.1.1

Kapsel 0.1.1 is a bounded self-serve usability patch for the sole kubernetes.set_deployment_image experiment.

It adds:

• a one-command real-kind front door from the extracted archive: ./share/kapsel/demo-kind-crash-recovery.sh;
• packaged self-location without internal-layout environment variables;
• actionable prerequisite and ownership-safe cleanup diagnostics;
• elapsed phases and a lifecycle evidence summary covering both process terminations, restart-only reconciliation, exactly one harness apply, the receiver disposition, frozen receipt, offline inspection, and the explicit UNKNOWN boundary; and
• a copyable generic stdio MCP configuration with one complete fixed-tool request.

Download only:

• kapsel-0.1.1-x86_64-unknown-linux-gnu.tar.gz
• kapsel-0.1.1-x86_64-unknown-linux-gnu.tar.gz.sha256

The sole supported target is x86_64-unknown-linux-gnu, validated in Debian 12. Verify the adjacent SHA-256 before bounded extraction. The checksum detects changed bytes but does not authenticate the publisher.

The CLI, configuration, Rust API, MCP adapter, receipt format, and artifact layout remain prototype-scoped experiment interfaces without compatibility promises. This release does not claim production readiness, exactly-once Kubernetes effects, Kubernetes truth, causation, complete capture, compliance, another capability, or another platform. Inspection reports INSPECTED, never VERIFIED; incomplete or ambiguous bounded receiver observation remains UNKNOWN.

No crates.io artifact is published.

v0.1.0

Kapsel 0.1.0 is the stable x86-64 GNU/Linux artifact for one bounded kubernetes.set_deployment_image experiment. “Stable” identifies this named, non-prerelease artifact; it does not promise production support or interface compatibility.

Included

• local grant-provisioning, operation, restart, and offline-inspection commands
• one fixed-schema stdio MCP tool with operator authority supplied separately
• a disposable-kind crash-recovery demonstration covering healthy and failed rollouts
• exact source metadata, license and binary digests, and an adjacent SHA-256 checksum

See the evaluator guide, build guide, and technical scope.

Download and verify

Download both attached files, then run:

sha256sum -c kapsel-0.1.0-x86_64-unknown-linux-gnu.tar.gz.sha256

The checksum detects changed archive bytes but does not authenticate the publisher. The release was built from revision 3d99ba7d8d46c79109b0a510cc20468fe22d5e5c; metadata records source_dirty: false.

Scope and limits

The sole supported target is x86_64-unknown-linux-gnu. The CLI, configuration, MCP adapter, receipt format, Rust API, and artifact layout remain experiment interfaces without compatibility promises. Receipts and reports disclose operational metadata and should be treated as sensitive.

This release does not claim production readiness, exactly-once Kubernetes effects, Kubernetes truth, causation, complete capture, compliance, another capability, or another platform.

Exact-revision default, artifact-smoke, reproducibility, strict-assembly, upload, live-kind, source-demo, and downloaded-artifact-demo gates passed. Hosted evidence: GitHub Actions run 29598671876.