v6.105.0
Ouroboros v6.105.0
Download
Choose your platform below. You do not need to clone the repository or install Python or uv.
- macOS 12+ on Apple silicon (.dmg): Ouroboros-6.105.0.dmg
- Windows x64 (.zip): Ouroboros-6.105.0-windows-x64.zip
- Debian, Ubuntu, or Astra Linux x86_64 (.deb): ouroboros_6.105.0_amd64.deb
- Fedora or RHEL x86_64 (.rpm): ouroboros-6.105.0-1.x86_64.rpm
- RED OS 8 x86_64 (.rpm): ouroboros-6.105.0-1.red80.x86_64.rpm
- Other Linux x86_64 (AppImage): Ouroboros-6.105.0-linux-x86_64.AppImage
- Linux x86_64 archive (.tar.gz): Ouroboros-6.105.0-linux-x86_64.tar.gz
Files named SHA256SUMS, release-evidence.json, release-smoke-*.json, and sbom-*.cdx.json are verification evidence, not additional installers.
What's new
feat: unified accounts, delegation substrate, rotation visibility. The first tagged release since v6.103.0 — it also carries the untagged 6.104.0 below. The unified-accounts sprint lands a dual-engine account model behind feature detection (an unreadable engine catalog fails closed to the previous behavior): the Accounts UI renders every engine-side profile with honest copy (the "Default CLI login" / "Managed by the X CLI" fictions are retired), enabled+signed-in family counting with a distinct all-disabled state, an Enabled toggle riding a new PATCH credential-profile thin proxy, Remove on every engine-supported row, and a next-up badge; delegation learns an explicit account pin (OUROBOROS_SUBAGENT_PROFILE rides the stored canonical body as credentialProfileId, replayed byte-identically on retry, with strict per-subject health for every pinned lane including review-session recovery, and requested-vs-applied custody disclosed on the Last delegated run). The rotation-visibility sprint makes lane state typed and visible end to end: {failure_code, reset_at, http_status} plus capability_delta travel from substrate to render, review panels count paid only when dispatched and DEGRADED replays honestly, pre-fanout health-skip rows carry a material health epoch and reviewer-roster fingerprint as replay identity, quorum_unreachable lands as an honest blocked_with_evidence terminal, schedule_followup gives agents a one-shot deferred wake through the existing scheduler, and quota rotation becomes a GET→conditional-POST reconcile with a durable receipt that never overwrites an explicitly persisted value. The delegation-substrate work closes a claudexord admission race, restates the nanny's delegation mandate, and passes a pinned credential profile through route_health to the engine.
Release proof
This release was built from 2d77583a2a16.
The release workflow passed the full test matrix, UI and Docker smoke tests, skill smoke tests, and packaged artifact smoke tests before publication.
SHA256SUMScovers every installable platform artifact, its SBOM, and its smoke receipt.release-evidence.jsonbinds the tag, commit, workflow run, artifact hashes, SBOMs, and smoke receipts.- Each installable platform artifact has GitHub build provenance and a CycloneDX SBOM attestation.
- Verify build provenance with
gh attestation verify <file> --repo razzant/ouroboros --signer-workflow razzant/ouroboros/.github/workflows/ci.yml --source-digest 2d77583a2a16d42c10ed3397484cc73792c9ea77 --source-ref refs/tags/v6.105.0. - Verify the CycloneDX attestation with
gh attestation verify <file> --repo razzant/ouroboros --signer-workflow razzant/ouroboros/.github/workflows/ci.yml --source-digest 2d77583a2a16d42c10ed3397484cc73792c9ea77 --source-ref refs/tags/v6.105.0 --predicate-type https://cyclonedx.org/bom.