Repository navigation
Rust Engineering MCP 0.3.0
Second qualified core release. It exposes 31 MCP tools: the 13 inspection,
Cargo-check, diagnostics, quality-gate and offline-catalog tools of 0.1.0, five
safe-mutation tools (M2), four bounded quality jobs with MCP Tasks (M3), five
security and supply-chain tools (M4) and four performance tools (M5:
rust.benchmark.run, rust.benchmark.compare, rust.profile.flamegraph,
rust.binary.bloat). The 13 tools of 0.1.0 keep their contracts byte for byte.
Published artifact
rust-engineering-mcp-v0.3.0-aarch64-apple-darwin.tar.gz- macOS ARM64 (
aarch64-apple-darwin) only - deterministic inventory with 221 packages, SPDX SBOM, third-party notices,
licenses andSHA256SUMS - installation and smoke receipt covering CLI version/doctor, MCP discovery
(including the Tasks extension), the exact 31 tool schemas and annotations,
structured results and fail-closed behavior - GitHub build-provenance attestations for the archive, checksum file and smoke
receipt
Verify the checksum with shasum -a 256 -c SHA256SUMS. Verify provenance with
gh attestation verify --repo pharos-lang/rust-engineering-mcp <asset>.
Deliberate 0.3.0 boundary
- Every tool that executes project code (check, clippy, test, nextest, coverage,
semver, mutation, gate v2, Miri, benchmarks, profiling, bloat) requires a
host-provisioned Docker runtime admitted by image digest; the archive ships no
image, model, ONNX Runtime, LanceDB runtime or crate catalog. - Profiling requires the explicit host grant
--allow-profiling user-space-sampling. rust.benchmark.comparenever emits a directional verdict
(METHOD_QUALIFIED_FOR_DIRECTION = false): it publishes effect, interval and
declared reasons; the material threshold is 5 %.- Write tools require their explicit host grants;
readOnlyHintdescribes the
checkout, not the code the tools compile. - The semantic search feature (
--features local, E5 + LanceDB) is not part of
this core archive;lancedbstays pinned at 0.31.0 per ADR-027. - Linux x86_64 and Windows x86_64 remain portable CI targets, not published
binaries or native-capability claims. crates.io publication remains disabled.
Source is available under MIT OR Apache-2.0. Copyright IUMotion Labs.
Changes
See CHANGELOG.md (0.3.0) for M2–M5 in detail: typed safe mutation with durable
replay; nextest, coverage, SemVer and mutation testing as bounded MCP Tasks with
private artifacts; cargo-deny, unsafe scan, supply-chain facts, quality gate v2
and Miri; Criterion measurement through an offline vendor capture, frozen
statistical method, sampled CPU profiles as SVG Resources and exact binary size
with estimated attribution. Local qualification: native suite 6/6, client matrix
with MCP Inspector 2.5.0 and Claude Code 2.1.267, core 23/23 and full gates.