Ember 2026.8.10
- Prepared the first source release.
- Added a one-command Docker Compose workflow with resumable model download.
- Pinned the default model revision and added expected-size, free-space, and
SHA-256 checks before startup. - Added host/container preflight diagnostics, Compose health reporting, and
read-only plus generation smoke tests. - Added OCI image metadata and operations/upstream-release guidance.
- Split the container into a full-toolchain
devtarget and a minimal
dependency-closurereleasetarget used by Compose. - Added licensing, vendor provenance, security, support, and contribution policy.
- Synced the latest agent-progress work: repeated-call diagnostics, a
result-based progress lease, empty/degenerate-turn telemetry, and detection
of tool markup delivered as visible text. - Added opt-in stateless automatic loop recovery and Compose environment
controls for progress reporting and recovery thresholds. - Hardened request parsing against embedded NULs, duplicate or mistyped fields,
unsupported HTTP transfer framing, and excess headers. - Made strict tool-schema number equality exact beyond IEEE-754's integer range
and replaced direct POSIX interpretation of ECMA-262 regex patterns with a
translated, fail-closed subset. - Removed one-off development probes and made static analysis, exact-commit
tests, and gfx1151 certification blocking image-release gates. - Added a history-free, policy-gated three-way promotion workflow for bringing
reviewed implementation changes over fromember-devwithout overwriting
release-owned files. - Promoted the gfx1151 HIP GEMM batch sweep and recorded the successful
two-session hardware acceptance result. - Changed the default Compose path to pull an immutable GHCR image while
retaining an explicit local source-build override. - Added project and third-party license notices to the runtime image and made
the vulnerability-reporting fallback actionable. - Added GitHub-hosted CPU and large-disk container workflows, direct GHCR
publishing, and a manual environment-gated gfx1151 certification workflow. - Fixed the ROCm 7.14 runtime image assembly to package both the gfx1151
rocBLAS KPACK and its architecture-specific Tensile metadata/code-object
tree from the pinned toolchain. - Normalized loader-reported
/libpaths into merged/usrlocations so the
collected runtime can be copied into the Ubuntu 24.04 release stage. - Hardened gfx1151 certification to verify the immutable model pair,
separately require exercised DSpark and disk-cache paths, use locked memory,
and verify live speculative decoding outside resident batching. - Repointed first-run acquisition to the current published quant and DSpark
drafter, made both artifacts mandatory and digest-locked, and removed support
for substituting unverified model files.
Container image
ghcr.io/otheru-ai/ember:2026.8.10
Digest sha256:ac3be24624021320ccf9eaa1c42a15435031d746b1b567f06404079469ba1838,
built from f16b4ae28fb071851007c509b9b7beef79c5e6a3.
A CycloneDX SBOM for the image is attached to this release. This image was
published manually because the tagged CI publish could not schedule a runner;
see docs/ci.md for the runner requirements now recorded in the workflow.