AgentSplice v0.2.2-alpha (experimental alpha)

An experimental alpha. No compatibility claim is made for any client, model, or runtime; support claims require a dated conformance report (docs/CONFORMANCE.md).

What's new. A package for Macs with Apple silicon on macOS 15 or later, agentsplice-0.2.2-alpha-osx-arm64.tar.gz, built and smoke-tested by CI on macOS 15 (ADR 0029). The gateway is unchanged from 0.2.1-alpha, so upgrading needs nothing but the new package or image. Since 0.2.1-alpha the repository also has two more dated trace reports: OpenCode through AgentSplice to llama.cpp's llama-server and to Ollama, each with the shipped lmstudio provider (docs/reports/).

Windows. agentsplice-0.2.2-alpha-win-x64.zip runs on 64-bit Windows 10 or 11 without Docker or a .NET installation. The package is not code signed. See docs/INSTALLATION.md.

Linux. agentsplice-0.2.2-alpha-linux-x64.tar.gz runs on x64 distributions based on glibc 2.34 or later, such as Ubuntu 22.04, Debian 12, or RHEL 9, with OpenSSL 1.1.1 or later, without Docker or a .NET installation. The package is not signed. See docs/INSTALLATION.md.

macOS. agentsplice-0.2.2-alpha-osx-arm64.tar.gz runs on Macs with Apple silicon and macOS 15 or later, without Docker or a .NET installation. Its executable is signed ad hoc, as Apple silicon requires of anything it runs, which names nobody, and it is not notarized: downloaded with a browser, it carries the quarantine mark, and macOS refuses to open it until xattr -dr com.apple.quarantine clears the mark from the extracted folder, once the archive has matched its line in SHA256SUMS. See docs/INSTALLATION.md.

Checking a download. SHA256SUMS lists every asset's SHA-256 digest; check the one you downloaded against its line before extracting it, as docs/INSTALLATION.md shows. GitHub shows each asset's digest too.

Docker. Publishing this release pushes the image to ghcr.io/murillojndem/agent-splice:0.2.2-alpha, for linux/amd64, and adds its digest to these notes. agentsplice-0.2.2-alpha-image-linux-amd64.tar.gz is the same image, for a machine without registry access: check it against SHA256SUMS, then docker load --input it. See docs/INSTALLATION.md.

.NET. The packages carry .NET 10, which Microsoft supports until November 14, 2028, and the image is built on it. Neither an operating system's updates nor .NET installers patch a package: upgrading AgentSplice is how it receives .NET security fixes.

Known limitations.

• Only GET /v1/models and POST /v1/chat/completions are served, and LM Studio is the only runtime provider. The image is linux/amd64 only; the packages are win-x64, linux-x64, and osx-arm64.
• /v1 takes no credential. Any program on the machine can run completions through the gateway, and a gateway bound beyond loopback serves whoever reaches it; startup says so as event 1205. The administrative token protects /api/v1 only.
• The packages configure no administrative token, so every account on the machine can read the stored trace metadata through /api/v1 until one is set (docs/INSTALLATION.md).
• A client that reaches the gateway by a name other than localhost, 127.0.0.1, or [::1] gets 400 until that name is in AllowedHosts.
• Nothing is signed with a developer identity, and nothing is notarized. SHA256SUMS proves a download is intact, not who built it, and Smart App Control can block the Windows package with no way to allow it.
• A failing OTLP export is not reported in the gateway's log (docs/OBSERVABILITY.md).
• The dashboard keeps the administrative token in memory for one tab.

What changed is in CHANGELOG.md at this tag.

Image digest. ghcr.io/murillojndem/agent-splice@sha256:58c39805aa8f1a3e6b7925fdef2e6ea39e448aacd558d887f165e619180ea37d