Skip to content

v6.100.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 22:09
v6.100.0
944ad98

Ouroboros v6.100.0

feat: delegated runs execute in private snapshots — capture, disposition, and GC carry one honest truth (sprint phase C). A mutating delegated run never edits the shared tree again: at delegate_start the host snapshots the authority target's REAL current state (tracked + staged + eligible untracked, with the sensitive/credential veto decided BEFORE anything is hashed — a blanket git add -A would write .env blobs into the object database the execution worktree shares) into a baseline commit pinned by a refs/ouroboros/delegated/ ref, checks out a detached private worktree, and scopes the run there; the typed binding {execution_root, baseline_sha, target_root, authority_source} rides the durable custody rows BEFORE the POST, an explicit retry reproduces it exactly (pre-snapshot mutating rows and GC-collected baselines are typed refusals, never re-mints), and pending-invocation orphan recovery carries the FULL binding into the recovered run's row so the startup GC — whose predicate is settled && patch_disposed — never deletes the snapshot holding the child's only work. Terminal reconciliation (orphan sweep, kill path, in-process release) captures the settled run's diff through the ONE drive-rooted capture core, eagerly ONLY where a terminal receipt proves the run over — an absent (daemon-404) or unreadable close captures nothing, because across the owned-daemon boundary the child may still be writing — and capture-at-disposition is the retry point: integrate_delegated_patch captures on demand BEFORE applying or rejecting, a capture that fails there is the typed INTEGRATE_DELEGATED_CAPTURE_FAILED refusal for BOTH decisions, and patch_captured MEANS "a usable artifact exists" (a manifest reporting its own failure never mints the row, pre-existing rows over failed manifests are re-captured on replay, and reject re-checks the manifest before releasing the snapshot). Nothing reaches the shared tree without the explicit owner apply/reject flow: baseline drift is proven per touched path under the git lock before the apply, touched paths are read NUL-safely from git apply --numstat -z in both directions, cleanup follows the DURABLE disposition row (INTEGRATE_DISPOSITION_UNWRITTEN / INTEGRATE_APPLIED_UNSTAGED are typed, never a silent double-apply), the protected-path gate applies only when the target IS the Ouroboros body, and the pending obligation stays visible on the health surface (undisposed_patches → "DELEGATED PATCH AWAITS DISPOSITION") until disposed. Beside it: SSOT cost projection (accounted_upper_bound_usd under its honest name beside deprecated cost_usd; $0-fabrication fixes; the web UI presents upper-bound cost honestly), delegated_runs_failed on the execution-evidence receipt, notification chat routing (LifecycleJob.chat_id, task-bound reviews, reaper incident chat), byte-accurate argv/env budgeting with --prompt-file transport, and hash-bound skill repair (immutable admission hash, per-write CAS, typed stale terminalization).

Install

Download the package for your platform below. macOS builds currently target Apple silicon.

On Linux, sudo apt install ./ouroboros_*_amd64.deb or sudo dnf install ./ouroboros-*.x86_64.rpm installs to /opt/ouroboros and puts ouroboros on PATH; RED OS 8 has its own .red80.x86_64.rpm. The AppImage runs from a user-writable path when listed and host Git is installed; the .tar.gz stays available for extraction-based installs.

Release proof

This release was built from 944ad9899212.
The release workflow passed the full test matrix, UI and Docker smoke tests, skill smoke tests, and packaged artifact smoke tests before publication.

  • SHA256SUMS covers every release asset, SBOM, and smoke receipt.
  • release-evidence.json binds the tag, commit, workflow run, artifact hashes, SBOMs, and smoke receipts.
  • Each release asset has GitHub build provenance and SBOM attestations.
  • Verify build provenance with gh attestation verify <file> --repo razzant/ouroboros --signer-workflow razzant/ouroboros/.github/workflows/ci.yml --source-digest 944ad989921213dc8394ad09f7dc836e3eed36e3 --source-ref refs/tags/v6.100.0.
  • Verify the CycloneDX attestation with gh attestation verify <file> --repo razzant/ouroboros --signer-workflow razzant/ouroboros/.github/workflows/ci.yml --source-digest 944ad989921213dc8394ad09f7dc836e3eed36e3 --source-ref refs/tags/v6.100.0 --predicate-type https://cyclonedx.org/bom.

Compare v6.99.0...v6.100.0

Assets 25
Loading