Skip to content

v0.3.0

Latest

Choose a tag to compare

@github-actions github-actions released this 11 Sep 08:09
· 35 commits to main since this release
6ea330d

Rust Engineering MCP 0.3.0

Second qualified core release. It exposes 31 MCP tools: the 13 inspection,
Cargo-check, diagnostics, quality-gate and offline-catalog tools of 0.1.0, five
safe-mutation tools (M2), four bounded quality jobs with MCP Tasks (M3), five
security and supply-chain tools (M4) and four performance tools (M5:
rust.benchmark.run, rust.benchmark.compare, rust.profile.flamegraph,
rust.binary.bloat). The 13 tools of 0.1.0 keep their contracts byte for byte.

Published artifact

  • rust-engineering-mcp-v0.3.0-aarch64-apple-darwin.tar.gz
  • macOS ARM64 (aarch64-apple-darwin) only
  • deterministic inventory with 221 packages, SPDX SBOM, third-party notices,
    licenses and SHA256SUMS
  • installation and smoke receipt covering CLI version/doctor, MCP discovery
    (including the Tasks extension), the exact 31 tool schemas and annotations,
    structured results and fail-closed behavior
  • GitHub build-provenance attestations for the archive, checksum file and smoke
    receipt

Verify the checksum with shasum -a 256 -c SHA256SUMS. Verify provenance with
gh attestation verify --repo pharos-lang/rust-engineering-mcp <asset>.

Deliberate 0.3.0 boundary

  • Every tool that executes project code (check, clippy, test, nextest, coverage,
    semver, mutation, gate v2, Miri, benchmarks, profiling, bloat) requires a
    host-provisioned Docker runtime admitted by image digest; the archive ships no
    image, model, ONNX Runtime, LanceDB runtime or crate catalog.
  • Profiling requires the explicit host grant --allow-profiling user-space-sampling.
  • rust.benchmark.compare never emits a directional verdict
    (METHOD_QUALIFIED_FOR_DIRECTION = false): it publishes effect, interval and
    declared reasons; the material threshold is 5 %.
  • Write tools require their explicit host grants; readOnlyHint describes the
    checkout, not the code the tools compile.
  • The semantic search feature (--features local, E5 + LanceDB) is not part of
    this core archive; lancedb stays pinned at 0.31.0 per ADR-027.
  • Linux x86_64 and Windows x86_64 remain portable CI targets, not published
    binaries or native-capability claims. crates.io publication remains disabled.

Source is available under MIT OR Apache-2.0. Copyright IUMotion Labs.

Changes

See CHANGELOG.md (0.3.0) for M2–M5 in detail: typed safe mutation with durable
replay; nextest, coverage, SemVer and mutation testing as bounded MCP Tasks with
private artifacts; cargo-deny, unsafe scan, supply-chain facts, quality gate v2
and Miri; Criterion measurement through an offline vendor capture, frozen
statistical method, sampled CPU profiles as SVG Resources and exact binary size
with estimated attribution. Local qualification: native suite 6/6, client matrix
with MCP Inspector 2.5.0 and Claude Code 2.1.267, core 23/23 and full gates.