Clouda OCR v0.2.1

Clouda OCR v0.2.1 — Release Notes

Clouda OCR v0.2.1 is a maintenance and hardening release that completes the current brand migration from the historical Clouda PDF name to Clouda OCR, while preserving the existing v0.2.0 release as historical.

Highlights

• Canonical project/package identity prepared for Clouda OCR v0.2.1.
• Dataset quality gate now runs text near-duplicate leakage detection in the real pipeline.
• Cross-split near-duplicate findings now fail the quality verdict, including Arabic diacritic/tatweel/whitespace variants covered by regression tests.
• Failed quality verdicts can no longer silently produce an artifact that looks like an approved clean manifest.
• Dataset download provenance now records whether a digest is registry-pinned or self-reported.
• Unpinned dataset downloads fail closed unless the explicit opt-in environment variable is enabled.
• Reliability hardening from the engineering audit includes queue cancellation/retry fixes, duplicate-dispatch protection, SQLite claim locking, atomic publication paths, safer backup/audit naming, dead-symlink handling, Windows reserved-name protection, and dependency hardening.

Verification

Release-candidate verification reported:

• python -m pytest -q → 2169 passed, 16 skipped, 0 failed
• Ruff → pass
• Black → pass
• mypy → pass
• pip-audit → 0 known vulnerabilities
• wheel build → pass
• sdist build → pass
• clean wheel install → pass
• clean sdist install → pass
• CLI/import/runtime smoke tests → pass

Bandit still reports two previously triaged findings:

• intentional Arabic bidi characters in the RAQM corpus path
• a digest-guarded torch.load path

These were reviewed as non-blocking for this release.

Important limitations

• No final project-trained OCR model is bundled.
• OCR inference remains disabled by default unless a licensed, validated model is integrated.
• The expanded 462-page held-out benchmark is separate from this software release and remains in progress; this release does not claim a new benchmark winner or production OCR accuracy.
• Dataset integrity verification is stronger, but publisher authenticity is not yet backed by a signing infrastructure. Operators should prefer pinned trusted digests.

Historical note

v0.2.0 remains the historical Clouda PDF release.

v0.2.1 is the first release candidate using the canonical Clouda OCR project identity.