Skip to content

pi-career v0.1.0

Choose a tag to compare

View all tags
@revazi revazi released this 06 Aug 16:38
· 10 commits to main since this release
v0.1.0
967da62
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

pi-career v0.1.0

First public release of the self-contained deterministic Career Core package for Pi.

Install

pi install npm:pi-career@0.1.0

Git installation remains available at the immutable release commit:

pi install git:github.com/revazi/pi-career@967da62503bc8a97c070946f6506ea3471baeb34

Included Pi surface

Native tools:

  • career_core_discover
  • career_core_resume
  • career_core_job

Deterministic slash commands:

  • /career-setup
  • /career-library
  • /career-vacancy
  • /career-match
  • /career-analyze

Coordinates and integrity

  • npm: pi-career@0.1.0
  • Git commit: 967da62503bc8a97c070946f6506ea3471baeb34
  • npm integrity: sha512-mmbDdWDyWz77f2uLzZECJT9E6w1ZRCJjYFrUnZd3ldoS6ehEa5DrCENIfavHR5xMOFi0of6AVQ35ZTxwpeDeAQ==
  • npm shasum: 4212cea50c08c98771df267361cee28070a15765

The published npm package was verified by an isolated Pi install/list/load/bundled-runtime/remove smoke.

Native targets and release boundary

Supported targets are exactly:

  • macOS Apple silicon (darwin-arm64)
  • Linux x64 glibc (linux-x64-gnu)

Both package-owned Career Core executables are unsigned and not notarized. They are pinned to Career Core commit a3cdb4c6d7f966397e93ea4664071975bca7228c with exact manifest, provenance, size, mode, hash, license, and bounded contract verification. No Cargo/Rust install-time build, runtime download, PATH fallback, crate publication, or custom GitHub Release asset is used.

The original CI artifacts were rechecked on 2026-08-06. The tracked binaries, per-target provenance, manifest, archive identities/hashes, public Core commit, and package verification were accepted as sufficient durable evidence after upstream artifact expiry.

Audit and license-review disclosure

At release:

  • package-owned production audit: zero vulnerabilities at explicit low threshold
  • complete development/host-Pi audit: zero vulnerabilities at explicit low threshold
  • native license inventory: 30 Cargo packages, Rust 1.97.1, and 11 exact license/notice files verified

Native-license evidence received documented sole-maintainer review by Revaz Zakalashvili. This was maintainer self-review, not independent legal review or legal advice.

Assets 2
Loading