Skip to content

p11scope v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@mingulov mingulov released this 08 Oct 17:01
v0.3.0
7925307

p11scope v0.3.0

Per-edge entry counts end to end (DR-02 closed), load-instance continuity
with sharded discovery, a 2 MiB lifecycle ring with fill telemetry, the
stale-quiet label fix, and E16 execution-surface qualification checks.

Commands

  • p11scope — safe-only static observer (p11scope-0.3.0-x86_64-linux-musl.tar.gz,
    static-pie, --no-default-features). Reports p11scope 0.3.0.
  • p11scope-discover — provider discovery helper, separately labeled builds:
    glibc (...-linux-gnu.tar.gz) and musl (...-linux-musl.tar.gz, dynamically
    linked — needs libgcc on musl hosts, e.g. apk add libgcc). Reports
    p11scope-discover 0.3.0.

Known limitations

  • --system system-wide tracing remains preview: unhinted --system
    skips static, vendor-only and direct-export shapes without a record; E16
    measures this as a coverage gap rather than claiming coverage.
  • Kernel matrix: optimal path (uprobe-multi, probe-proven pid filter) on
    6.8+; 5.15 falls back to per-offset links with slower detach (~18 ms/link)
    and can read retirement: "unsettled" at scale; cgroup v1 out of scope (v2
    only); kernels below 5.15 unsupported.
  • This release ships WITHOUT Stage 3 (audit surface) per the 2026-10-08
    release split — it lands in v0.4.0 with kernel-side identity and the
    remaining measurement set. See docs/known-limitations.md (v0.3.0 header)
    and the changelog for the full list.

Detailed history: CHANGELOG.md
(## [0.3.0] - 2026-10-08).

Provenance

  • Tag commit: 792530713348f3a74e9100140226a51aea65a666 (tag v0.3.0,
    annotated eb422755a7c7948ffefe400b953521621b54c9b2).
  • Hosted CI (push): https://github.com/mingulov/p11scope/actions/runs/37767242506 —
    SUCCESS, all jobs (one infrastructure re-run after a same-branch
    concurrency cancellation; no code change).
  • Hosted release preview:
    https://github.com/mingulov/p11scope/actions/runs/37794799233 — SUCCESS,
    all jobs including the hosted release build (release-preview-public-assets
    artifact + container SBOM refs). Two hosted-only timing flakes tripped
    during preview runs (discover fd-reuse assertion, oracle-fixture 10 s
    timeout); both pass on the same commit locally, on push CI, and on rerun.
  • Toolchains: rustc 1.98.1 (48a229cea), BPF rustc nightly-2026-05-20
    (e50aa6fba), bpf-linker 0.10.4, clang 18.1.8, cargo-about 0.9.2,
    musl 1.2.5 (a9a118bb...fc7c75e4).
  • Local build receipt: status 0, checker/terminal 0, head == tag commit,
    facts.log sha256 c528cd1e0f670db33c66b6054823253fc3f5f195ab92a951bd37f625e8fe0dfc;
    $HOME-string check clean. Receipt binaries: observer 87b6a404...,
    discover/glibc 6715fa67..., discover-musl 0966d720....
  • Final qualification: privileged campaign 85/85 PASS, 0 fail, 13
    static-skipped, on kernel 7.0.0-38-generic x86-64 (dev host lane,
    bpftool v7.7.0), binary
    p11scope-32a9babceafc2e3e sha256
    f4f067d3d9085b99209e9e0c11db77bab6b5081c58befc3adefed7ecb9250c55;
    local suite 47/47 binaries green on the tag commit.
  • Source export is schema-v1 (networked-source-export-v1): committed
    source + the two pinned Aya archives; remaining locked dependencies still
    need network or a cargo cache. A recipient build from this archive
    (prepare-dependencies.py --offline + release musl build) passed.

Historical (candidate-only, superseded): freeze CI failure on f55639b
(version-bump fallout, fixed in c8ae7dd); qual campaigns on 4afe483
(68/12) and 1003b5e (78/80) that characterized the Stage A
test-helper integration gap fixed by 1003b5e/1af5a30; full-green
85/85 on 1af5a30 before the INSTANCE_COUNT rename (7925307).

Asset hashes (SHA256SUMS)

feec65b9d66dd8dd1fb625715024fc1c91bab1ac342522e89e27d87a9cf9fb4f  RELEASE.json
ce62130f9430c233665f4baeee80cf687619b97d32ae4f1a62c7aa9534933c58  p11scope-0.3.0-source.tar.gz
95878d8cd0d2323217b22937dc75ac3b973068a965fc673a50a58226e43e3907  p11scope-0.3.0-x86_64-linux-musl.tar.gz
a66866862db2326c406edf433c8d5e3e897e9f88741aaf6c93fadf209aeca1cf  p11scope-discover-0.3.0-x86_64-linux-gnu.tar.gz
afd0404016772c596c026a19a7ccb282b6a5423a55c93827b1db17383a770d2a  p11scope-discover-0.3.0-x86_64-linux-musl.tar.gz
Assets 8
Loading