v0.2.0

Kapsel 0.2.0 is a developer beta for one bounded operation: kubernetes.set_deployment_image.

It lets a request-only caller ask for one owner-authorized Kubernetes Deployment image change
without holding Kubernetes credentials. Kapsel records durable state before mutation, recovers from
process loss without a blind second mutation, and returns an inspectable SUCCEEDED, FAILED, or
explicit UNKNOWN receiver result.

It adds:

• one production lifecycle path shared by ordinary operation and crash recovery
• bounded v0.2.x compatibility for the evaluator CLI, fixed stdio MCP adapter, grant v1 bytes,
  retained receipt v2 inspection, archive layout, and journal upgrade
• exact v0.1.1 journal backup, migration, rollback, retained-receipt, and bounded downgrade
  procedures
• hostile-input, process-loss, simulation, fuzz, live-kind, resource, dependency, privacy, and
  security qualification
• reproducible x86-64 GNU/Linux archive with a deterministic SPDX 2.3 SBOM
• Sigstore-authenticated digest manifest produced by the appointed GitHub Actions workflow

Download exactly:

• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.sha256
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.spdx.json
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.SHA256SUMS
• kapsel-0.2.0-x86_64-unknown-linux-gnu.tar.gz.SHA256SUMS.sigstore.json

The sole supported target is x86_64-unknown-linux-gnu, validated in pinned Debian 12 environments.
Follow the evaluator guide to authenticate the signed manifest with Cosign v3.1.2, verify every digest,
safely extract the archive, and run the disposable-kind demonstration.

Exact source revision: 5fe0407cd5ebd78f386905e33f79e0f712a57835

Archive SHA-256: 82db38b05772b1b6a4ef9a9312baf9633f0ce652ddfe8052ed7df86d1fd1d969

Authenticated candidate evidence:
GitHub Actions run 30410695345

This is a developer beta, not production-ready software. It supports one Kubernetes operation and no
second platform. It does not accept shell, kubectl, manifests, arbitrary patches, mutable tags,
wildcards, credentials, trust, paths, or lifecycle controls from the caller.

Kapsel does not claim exactly-once effects, Kubernetes truth, causation, complete capture,
compliance, builder integrity, dependency safety, vulnerability absence, or production fitness.
UNKNOWN is intentional when bounded observation cannot establish success or failure. Receipt
inspection reports INSPECTED, never VERIFIED.

Public Rust exports, crates.io, docs.rs, cargo install, the sandbox, another transport, another
capability, and another target remain unsupported.