v0.3.0

Rust Engineering MCP 0.3.0

Second qualified core release. It exposes 31 MCP tools: the 13 inspection,
Cargo-check, diagnostics, quality-gate and offline-catalog tools of 0.1.0, five
safe-mutation tools (M2), four bounded quality jobs with MCP Tasks (M3), five
security and supply-chain tools (M4) and four performance tools (M5:
rust.benchmark.run, rust.benchmark.compare, rust.profile.flamegraph,
rust.binary.bloat). The 13 tools of 0.1.0 keep their contracts byte for byte.

Published artifact

• rust-engineering-mcp-v0.3.0-aarch64-apple-darwin.tar.gz
• macOS ARM64 (aarch64-apple-darwin) only
• deterministic inventory with 221 packages, SPDX SBOM, third-party notices,
  licenses and SHA256SUMS
• installation and smoke receipt covering CLI version/doctor, MCP discovery
  (including the Tasks extension), the exact 31 tool schemas and annotations,
  structured results and fail-closed behavior
• GitHub build-provenance attestations for the archive, checksum file and smoke
  receipt

Verify the checksum with shasum -a 256 -c SHA256SUMS. Verify provenance with
gh attestation verify --repo pharos-lang/rust-engineering-mcp <asset>.

Deliberate 0.3.0 boundary

• Every tool that executes project code (check, clippy, test, nextest, coverage,
  semver, mutation, gate v2, Miri, benchmarks, profiling, bloat) requires a
  host-provisioned Docker runtime admitted by image digest; the archive ships no
  image, model, ONNX Runtime, LanceDB runtime or crate catalog.
• Profiling requires the explicit host grant --allow-profiling user-space-sampling.
• rust.benchmark.compare never emits a directional verdict
  (METHOD_QUALIFIED_FOR_DIRECTION = false): it publishes effect, interval and
  declared reasons; the material threshold is 5 %.
• Write tools require their explicit host grants; readOnlyHint describes the
  checkout, not the code the tools compile.
• The semantic search feature (--features local, E5 + LanceDB) is not part of
  this core archive; lancedb stays pinned at 0.31.0 per ADR-027.
• Linux x86_64 and Windows x86_64 remain portable CI targets, not published
  binaries or native-capability claims. crates.io publication remains disabled.

Source is available under MIT OR Apache-2.0. Copyright IUMotion Labs.

Changes

See CHANGELOG.md (0.3.0) for M2–M5 in detail: typed safe mutation with durable
replay; nextest, coverage, SemVer and mutation testing as bounded MCP Tasks with
private artifacts; cargo-deny, unsafe scan, supply-chain facts, quality gate v2
and Miri; Criterion measurement through an offline vendor capture, frozen
statistical method, sampled CPU profiles as SVG Resources and exact binary size
with estimated attribution. Local qualification: native suite 6/6, client matrix
with MCP Inspector 2.5.0 and Claude Code 2.1.267, core 23/23 and full gates.

v0.1.0

Rust Engineering MCP 0.1.0

First qualified core release of Rust Engineering MCP. It exposes exactly 13 MCP
tools for project inspection, Cargo checks, diagnostics, quality gates and offline
crate catalog queries.

Published artifact

• rust-engineering-mcp-v0.1.0-aarch64-apple-darwin.tar.gz
• macOS ARM64 (aarch64-apple-darwin) only
• deterministic inventory with 219 packages, SPDX SBOM, third-party notices,
  licenses and SHA256SUMS
• installation and smoke receipt covering CLI version/doctor, MCP discovery,
  exact tool schemas, structured results and fail-closed behavior
• GitHub build-provenance attestations for the archive, checksum file and smoke
  receipt

Verify the checksum with shasum -a 256 -c SHA256SUMS. Verify provenance with
gh attestation verify --repo pharos-lang/rust-engineering-mcp <asset>.

Deliberate 0.1.0 boundary

• Linux x86_64 and Windows x86_64 remain portable CI targets, not published native
  binaries or positive native-capability claims.
• No official crate catalog, embedding model, ONNX Runtime payload or LanceDB
  runtime is distributed. Catalog-dependent calls report structured unavailable
  results until the operator explicitly provisions trusted data.
• crates.io publication remains disabled.
• Cargo check, Clippy and test operations may execute project build.rs files and
  procedural macros. They require host-enforced containment; requested network
  isolation fails closed when the host cannot prove it.

Source is available under MIT OR Apache-2.0. Copyright IUMotion Labs.

Changes

• Qualified the complete M0/M1 core and its 13-tool MCP contract.
• Added deterministic release inventory, SBOM, notices, checksums and smoke
  verification.
• Added macOS process-tree containment and portable fail-closed coverage.
• Added public Linux, macOS and Windows CI plus supply-chain and SonarCloud gates.
• Closed SonarCloud new-code coverage/security debt: quality gate A/A/A and zero
  new open issues at release qualification.

See the repository validation and ADR documents for the complete evidence matrix,
known limitations and independent reviews.