Vanguarstew now operates an autonomous, fail-closed maintenance pipeline within its published authority boundaries.
What is live
- Autonomous review, labeling, merging, and closing for eligible incoming contributions.
- New
agent/contributions execute in digest-pinned, non-root, read-only, no-network isolation. - Model credentials remain outside candidate-controlled code.
- Baseline and candidate benchmark artifacts are checked before scoring.
- A fixed validator recomputes the final conservative decision inside a Polaris Intel TDX workload with
egress=none. - The result is accepted only after exact receipt-binding verification.
- Any isolation, evidence, billing, transport, Polaris, or receipt failure fails closed without a score-backed action.
- Benchmark and contribution-integrity changes remain manually controlled by design.
Trust boundary
This release provides execution-integrity evidence for the receipt-bound decision. Hosted model inference does not run inside the TEE, and the current verification level is polaris-verified, not independently hardware-verified. It does not claim workload confidentiality or GPU provenance.
Full reports and receipts remain private; public review output follows the repository's aggregate disclosure policy.
Delivered since v0.7.0
- Polaris receipt client and fail-closed verification.
- Deterministic replay and mounted-input binding.
- Receipt-bound benchmark decision recomputation.
- Isolated candidate execution and credential-safe model brokering.
- Public benchmark-change admission controls.
- Restrictive-environment fixes and successful end-to-end activation validation.
The release target passed the complete CI workflow on Python 3.10, 3.11, and 3.12.
Full history: v0.7.0...v0.8.0.