Skip to content

Task-Spec 3.9.0 — TaskMesh

Choose a tag to compare

View all tags
@luanmorenommaciel luanmorenommaciel released this 17 Aug 00:46
· 86 commits to main since this release
v3.9.0
5da1377
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

TaskSpec 3.9.0 adds TaskMesh, the optional portable execution control plane for already-authorized atomic tasks. TaskSpec stays the canonical authority and acceptance layer; TaskMesh schedules, leases, isolates, and recovers the work.

Highlights

  • Deterministic graph-aware routing, leasing, fencing, recovery, and integration branches
  • Native Codex, Claude Code, and Grok Build adapters, plus optional OMP RPC execution
  • Supervised worktree execution and fail-closed autonomous Docker/Podman isolation
  • Durable cross-cockpit observation through the local daemon and an MCP facade
  • Checksummed optional --with-mesh installation for macOS and Linux
  • Retained 97/100 quality baseline, hosted macOS/Linux gates, live isolation proof, authenticated private installs, SPDX SBOM, and signed DSSE/in-toto provenance

Install

The repository and this release are private. You need an account with access and an authenticated gh client.

release_dir="$(mktemp -d)"
gh release download v3.9.0 --repo luanmorenommaciel/task-spec \
  --pattern 'task-spec-3.9.0.tar.gz*' --pattern 'taskspec-meshd-*' \
  --dir "$release_dir"
(cd "$release_dir" && shasum -a 256 -c task-spec-3.9.0.tar.gz.sha256)
tar -xzf "$release_dir/task-spec-3.9.0.tar.gz" -C "$release_dir"
bash "$release_dir/task-spec-3.9.0/install.sh" --global --copy --with-mesh

Then prove the lifecycle in a disposable repository:

taskspec doctor
taskspec demo        # ends with DEMO=READY
taskspec mesh doctor

Omit --with-mesh for a core-only install.

Assets

Asset Purpose
task-spec-3.9.0.tar.gz and .sha256 Source archive and its checksum
taskspec-meshd-{darwin,linux}-{amd64,arm64} and .sha256 TaskMesh daemon helpers; the CLI requires an exact version match
task-spec-3.9.0-checksums.txt, taskmesh-checksums.txt Checksum manifests
task-spec-3.9.0.spdx.json SPDX software bill of materials
task-spec-3.9.0.provenance.dsse.json, taskmesh-binaries.provenance.dsse.json Signed DSSE/in-toto provenance
task-spec-3.9.0-release-provenance.pub.pem Public key for provenance verification
task-spec-3.9.0-release-evidence.json, -quality-scorecard.json, -mesh-release-evidence.json, -reviewer-report.json, -evidence.tar.gz Retained release evidence behind the claims above
taskmesh-binaries.json Helper build manifest

Trust boundary

TaskMesh cannot widen task authority, rewrite dependencies, or merge the target branch. mesh finish prints a human integration route and never merges or pushes. A passing supervised eval waits for supervisor acceptance.

What comes next

main carries the 3.10.0 integrated-toolkit candidate: native decomposition, signed execution recipes, and managed repair rounds. It is not published while harness qualification and the comparative pilot are incomplete.

Full changelog: CHANGELOG.md · v3.8.1...v3.9.0

Assets 24
Loading