BeforeDone v1.1.1 hardens concurrent local event capture and release integrity for the DeepSeek Harness Bundle.
Reliability
- Initializes the event-ledger lock atomically during concurrent first use.
- Retries only transient missing-lock cases within the existing bounded timeout and fails other lock errors immediately.
- Validates the complete archive and SBOM checksum matrix together with cross-platform public installation.
- Requires BeforeDone CLI
>=1.1.1 <2for the DeepSeek Harness Bundle.
Release integrity
- Generates path-neutral SPDX 2.3 SBOMs from validated archive contents and binds each document to its source archive SHA-256.
- Rejects path traversal, drive-qualified paths, duplicate members, links, special files, and host paths.
- Supports Python 3.11 and newer for release SBOM generation.
Compatibility
- BeforeDone CLI:
1.1.1 dsh-beforedoneBundle:0.1.0- DeepSeek Harness:
0.1.0-rc.6 - Node.js:
22.19.xor24+
Privacy and safety
BeforeDone remains local-first and has no telemetry or hosted service. The Harness integration records bounded lifecycle metadata; prompts, reasoning, tool arguments, tool-result content, and credentials are excluded from the BeforeDone ledger.
Release assets
This release provides CGO-disabled archives for macOS, Linux, and Windows on amd64 and arm64, SHA-256 checksums, an SPDX SBOM for every archive, and Homebrew and Scoop manifests.