Skip to content

v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Sep 06:09
· 92 commits to main since this release
v0.1.0
452acdb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Rust Engineering MCP 0.1.0

First qualified core release of Rust Engineering MCP. It exposes exactly 13 MCP
tools for project inspection, Cargo checks, diagnostics, quality gates and offline
crate catalog queries.

Published artifact

  • rust-engineering-mcp-v0.1.0-aarch64-apple-darwin.tar.gz
  • macOS ARM64 (aarch64-apple-darwin) only
  • deterministic inventory with 219 packages, SPDX SBOM, third-party notices,
    licenses and SHA256SUMS
  • installation and smoke receipt covering CLI version/doctor, MCP discovery,
    exact tool schemas, structured results and fail-closed behavior
  • GitHub build-provenance attestations for the archive, checksum file and smoke
    receipt

Verify the checksum with shasum -a 256 -c SHA256SUMS. Verify provenance with
gh attestation verify --repo pharos-lang/rust-engineering-mcp <asset>.

Deliberate 0.1.0 boundary

  • Linux x86_64 and Windows x86_64 remain portable CI targets, not published native
    binaries or positive native-capability claims.
  • No official crate catalog, embedding model, ONNX Runtime payload or LanceDB
    runtime is distributed. Catalog-dependent calls report structured unavailable
    results until the operator explicitly provisions trusted data.
  • crates.io publication remains disabled.
  • Cargo check, Clippy and test operations may execute project build.rs files and
    procedural macros. They require host-enforced containment; requested network
    isolation fails closed when the host cannot prove it.

Source is available under MIT OR Apache-2.0. Copyright IUMotion Labs.

Changes

  • Qualified the complete M0/M1 core and its 13-tool MCP contract.
  • Added deterministic release inventory, SBOM, notices, checksums and smoke
    verification.
  • Added macOS process-tree containment and portable fail-closed coverage.
  • Added public Linux, macOS and Windows CI plus supply-chain and SonarCloud gates.
  • Closed SonarCloud new-code coverage/security debt: quality gate A/A/A and zero
    new open issues at release qualification.

See the repository validation and ADR documents for the complete evidence matrix,
known limitations and independent reviews.

Assets 5
Loading