kriya Console v0.3.0 — sessions, test-before-apply, more agents

kriya Console v0.3.0.

Signed + notarized universal macOS DMG (Apple Silicon + Intel). Free tier needs no account and opens no network connection.

New: Sessions — run correlation. Every governed run reconstructed as a tree — which session → which sub-agent → which action, in order — from the signed receipts alone. Computed from verified receipts only; where a seam has no parent pointer (Claude Code's hook payload), none is invented — sub-agents group by their real agent_id. Run ids live inside receipt params, which the fleet-envelope minimizer structurally cannot read: session correlation never leaves the device.

New: Policy "test before apply." Replay a candidate policy over this device's own re-verified receipts and see which past actions would land on a different tier — before you apply the edit. The simulation itself is a signed, chained receipt.

New: Govern All — Cursor · Cline · GitHub Copilot · Gemini CLI. One-click detection + routing of each client's stdio MCP servers through the governed gateway; idempotent and byte-for-byte reversible. Honest ceiling in the app: the MCP lane is governed — native built-in tools bypass MCP unless launched under containment, and cloud-executed agents are out of scope.

In the open kriya runtime (same release train): kriya-govern (per-call govern + sign), SDK middleware for LangGraph · OpenAI Agents SDK · CrewAI · Claude Agent SDK (TypeScript + Python), and kriya-ci — the governed CI lane (fail the build on a policy block; the signed receipts are the build artifact, re-verifiable offline).

See CHANGELOG.md.

Verify the download:

shasum -a 256 -c KriyaConsole-0.3.0-universal.dmg.sha256
xcrun stapler validate KriyaConsole-0.3.0-universal.dmg