v0.1.0 — the fail-closed release

Hybrid v0.1.0 — the first release. Just add a .hy file. It's still Go — Hybrid is what Go can safely do.

Hybrid is a safety-checked superset of Go: keep your Go codebase, add .hy files where you want compiler-enforced ownership and cross-task-sharing rules, and build one ordinary binary with one command. The checker (Rust) verifies and transpiles to plain readable Go — no runtime, no VM, no FFI in the output.

What this release guarantees (and what it doesn't)

The Tier-0 checker is fail-closed at critical boundaries (rule FC, O4.9):

• every value crossing a task/channel boundary is classified; only proven-safe values pass (primitives, channels, immutable, owned move, fresh literals with sendable parts)
• mutable shared state — and anything the checker cannot resolve — is rejected (HYB-E3001/E3002/E3005) with diagnostics that name the value and teach the fix
• nothing silently passes; the managed escape hatch is explicit, linted, greppable, counted by --report-managed
• boundary statements inside closures are checked; Go-API escapes are honestly out of scope (documented, not hidden)

Sharp contract: everything the checker accepts was proven; everything it can't prove is named. Full rules: SPEC-LANGUAGE.md §9. Not guaranteed yet: production hardening (sanitizers/fuzzing are queued on the fleet), the full Rust-crate surface (curated set only), 1.0 stability.

Verified by the standard suites (not cherry-picked)

• cargo test --workspace 210/0 (13 suites, incl. the --deny-managed policy-gate tests) · checker corpus 20/20 (pre-registered adversarial programs; verdicts pinned) · differential loop 9/9 + 11/11 FULL AGREEMENT (accepted programs build+run; rejected are rejected) · examples 10/10 byte-exact · go vet/build/test clean on all five runtime packages · clippy 0 findings
• G2 bench on the live bridge: fast path 3.37 ns ≤ 5 ns budget (vs 46.8 ns cgo — 16.5×)
• Gates: G0 ✅ G1 ✅ G2 ✅ G3 ✅ (claim-by-claim re-verification in gates/G3.md)

Install — one command, NO Rust toolchain. Four platforms, prebuilt.

curl -fsSL https://raw.githubusercontent.com/limitlessprojects/Go-Hybrid/main/install.sh | sh

asset	status
hybrid-v0.1.0-linux-amd64.tar.gz	full — checker + emitter + the Rust bridge (fleet-smoked rustless)
hybrid-v0.1.0-darwin-arm64.tar.gz	full — Apple Silicon (macos-14 runner, fleet-smoked rustless)
hybrid-v0.1.0-windows-amd64.tar.gz	full — the bridge builds under mingw (x86_64-pc-windows-gnu); fleet-smoked rustless
hybrid-v0.1.0-linux-arm64.tar.gz	full — checker + emitter + the bridge (the aarch64 trampoline port, row 16, landed 2026-10-14: the Go runtime suite passes under qemu and the tarball smoke builds+runs a serde_json bridge crossing)

Every tarball ships the prebuilt bridge staticlib (where the bridge exists) — Go 1.26.9 + a C linker are the only requirements; a Rust toolchain is never needed. Each asset was smoke-tested from the ACTUAL tarball with cargo removed from PATH before upload (tools/package_release.sh refuses to ship anything else), and every download is sha256-verifiable.

CI users: a pinned-toolchain Docker image with everything prebuilt — docker run --rm -v "$PWD:/work" -w /work ghcr.io/limitlessprojects/go-hybrid:v0.1.0 hyb build program.hy -o out (smoke-tested before push; see .github/workflows/docker-publish.yml).

Manual path: extract the tarball, export HYB_RUNTIME_DIR="$PWD/hybrid-v0.1.0/runtime" + export PATH="$PWD/hybrid-v0.1.0:$PATH", hyb build program.hy -o app. From source: make examples.

curl -fsSL https://raw.githubusercontent.com/limitlessprojects/Go-Hybrid/main/install.sh | sh

The tarball ships a prebuilt bridge staticlib — you need Go 1.26.9 (already your toolchain) and a C linker; a Rust toolchain is never required (the bridge sources are included for contributors only). The installer sha256-verifies the download, installs to ~/.hybrid, and puts a hyb launcher on your PATH.

CI users: a pinned-toolchain Docker image with everything prebuilt — docker run --rm -v "$PWD:/work" -w /work ghcr.io/limitlessprojects/go-hybrid:v0.1.0 hyb build program.hy -o out (smoke-tested before push; see .github/workflows/docker-publish.yml).

Manual path: extract the tarball, export HYB_RUNTIME_DIR="$PWD/hybrid-v0.1.0/runtime" + export PATH="$PWD/hybrid-v0.1.0:$PATH", hyb build program.hy -o app. From source: make examples.

💰 The bounty is live

A $500 pool now backs the soundness protocol above, split across the
top 10 most meaningful contributions each cycle: $75 / $60 / $50 on the
podium, $45 each for places 4 to 10. Severity tiers (Critical / High /
Medium / Low), open to humans and AI, and one hard rule: pay only after
reproduction — a real accepted-but-unsound corpus regression, exact commit
and minimal .hy repro. Fix PRs must pass our GitHub Actions before final
review. Valid reports earn a place in the Hall of Fame.
Full rules: BOUNTY.md.

What's next

The line-by-line claims table (sync.Pool / atomic.Pointer / context.Context / finalizers / unsafe / cgo / channel-close — with "no claim" where true) · per-callee budgets · platform matrix (vote) · the go.mod integration design question · your feedback. The feedback thread is open — short, blunt answers shape the roadmap; good advice gets merged with credit. And if this interests you, starring the repo genuinely helps — no pressure; useful criticism is worth more than stars 🙏