v0.4.4

Full Changelog: v0.4.3...v0.4.4

v0.4.3

What's Changed

• security: pin release Actions to SHA, commit Cargo.lock, add SECURITY.md by @lrafasouza in #1

New Contributors

• @lrafasouza made their first contribution in #1

Full Changelog: v0.4.2...v0.4.3

v0.4.2

pegana-replay v0.4.2 — embeds methodology 0.5.0 (intrinsic-sanity, ADR-0030). Re-derives 0.5.0 receipts. For historical 0.4.0 receipts, pin cargo install pegana-replay@0.4.1 (still published — every past receipt stays byte-exact verifiable). Verify: pegana-replay --alert-id <UUID>.

---

Full Changelog: v0.4.1...v0.4.2

v0.4.1

Full Changelog: v0.4.0...v0.4.1

v0.4.0

Full Changelog: v0.2.0...v0.4.0

v0.2.0

First CI-built, multi-target, Sigstore-attested release of the public verifier — and the first to track methodology v0.2.0.

Why v0.2.0 (and not a v0.1.x)

The CLI's verify-identity is the methodology version it embeds. Pegana's methodology advanced to 0.2.0 on 2026-06-01 (Schmitt-trigger magnitude deadband + LST premium carve-out — see ADR-0021 and METHODOLOGY.md). Production now emits methodology-0.2.0 receipts, so the published CLI version is bumped in lockstep. A receipt whose methodology_version differs from the running binary exits 3 (VERSION_MISMATCH) with an install hint — install the version matching the alert you're verifying.

Install

curl -fsSL https://releases.pegana.xyz/pegana-replay-installer.sh | sh
pegana-replay --alert-id <UUID>

What's in this release

Pre-built, Sigstore-attested binaries for:

• x86_64-unknown-linux-gnu
• aarch64-apple-darwin (Apple Silicon)

Intel Mac and Windows build from source (cargo install --git … --tag v0.2.0 pegana-replay-cli).

Each archive ships a .sha256 the installer verifies before extracting. Verify provenance:

gh attestation verify ~/.pegana/bin/pegana-replay --repo lrafasouza/pegana-replay

Verifying older (0.1.0-era) alerts

Alerts emitted 2026-05-29 → 06-01 carry methodology_version 0.1.0. Use v0.1.0 to replay those — v0.2.0 will exit 3 on them by design.

Full Changelog: v0.1.0...v0.2.0

v0.1.0 — Pegana Trust Layer alpha

Important

Superseded by v0.2.0.
Pegana's methodology advanced to 0.2.0 on 2026-06-01 (Schmitt-trigger
deadband + LST premium carve-out, ADR-0021). This v0.1.0 binary embeds
methodology 0.1.0 and is kept for one reason: it correctly verifies
receipts emitted while methodology 0.1.0 was live (alerts from 2026-05-29 to
2026-06-01). For any current alert, install v0.2.0 — the verifier exits
3 (VERSION_MISMATCH) when a receipt's methodology version doesn't match the
binary's. This release is macOS Apple Silicon only; v0.2.0 adds a
Sigstore-attested Linux x86_64 binary built in CI.

---

First tagged release of the public verifier toolchain.

What's included

This release ships a pre-built pegana-replay binary for macOS Apple Silicon (aarch64-apple-darwin), built locally and uploaded manually. Additional platforms (Linux x86_64) ship in the next iteration once the cargo-dist build matrix is back online.

Install

curl -fsSL https://releases.pegana.xyz/pegana-replay-installer.sh | sh

For other platforms today, build from source:

cargo install --git https://github.com/lrafasouza/pegana-replay \
  --branch main pegana-replay-cli

Verify any alert

pegana-replay --alert-id <UUID>
pegana-replay --alert-id <UUID> --verify-onchain

Integrity

Each archive is paired with a SHA-256 checksum the installer verifies before extracting the binary. Sigstore provenance attestation will be added in a future release once the GitHub Actions build pipeline is re-enabled — this v0.1.0 binary was compiled on a developer machine and is not yet provenance-attested.

Source

Path	What it is
crates/methodology/	Pure functions: spread, EWMA, hysteresis, transition
crates/pegana-replay-cli/	The CLI binary
crates/common-verify/	Config types + AlertEvidence schema
assets.toml	Canonical asset list (27 active symbols)
docs/adr/	15 ADRs documenting every methodology choice

See README and pegana.xyz/methodology.