kriya Console v0.3.2 — governed spend, Verified Replay, verifiable telemetry

The largest release since v0.1.0 — twelve items from the hard-to-copy build programme land together.

Four of them add something you can hand to another person and have them check without kriya installed: a replay bundle, an OpenTelemetry span set, a C2PA artifact manifest, and a diode bundle.

New in the app

• Spend — what each governed Claude Code session actually cost, reconstructed on-device from the local transcript, priced by a bundled offline sheet, and signed into its own hash chain. Only token counts, model id and timestamps are ever read — never message content, tool inputs/outputs, or file paths. Extraction runs entirely in Rust, so transcript bytes never reach the UI layer. A priced estimate, never an invoice; an unrecognised model is reported unpriced, never guessed.
• Dollar budget gates — budgets per session, rolling day and user, consulted before the next action runs: deny, route to a human, or warn. The decision is itself a signed receipt recording how stale the spend figure was. A trailing-state gate, deliberately not a hard cap.
• Verified Replay (in Sessions) — step through a past session re-derived from its signed receipts alone. Nothing is re-run. A failed signature or broken chain makes the whole derivation refuse rather than render a plausible partial.
• Local Models — kriya-llm-proxy receipts every completion from Ollama / llama.cpp / vLLM / LM Studio (model digest, token usage, prompt and output hashes), with policy able to gate on model identity. Governs clients you point at the proxy; a direct connection to the model port stays invisible.
• New Settings panes — Telemetry (OTel), Integrity (pipeline measurement), Artifact signing (C2PA), Air-gap (diode bundles).

New offline verifiers on the free kriya-audit CLI

--verify-replay · --verify-otel · --verify-artifact · --verify-bundle · --verify-exec

Also

• ISO/IEC 42001 + CSA AICM evidence pack with an AI-CAIQ support sheet. Every Annex A row capped at partial; eight controls named as not covered.
• Deterministic execution lane — a tool run as a WASI component under pinned Wasmtime with virtualised clocks and randomness, so a captured run can be re-executed and hash-compared bit-for-bit.
• Opt-in FIPS and post-quantum build lanes (AWS-LC-FIPS cert #5298 · ML-DSA-87). Both off by default and mutually exclusive — this download is byte-unchanged by them.

Honest scope

• The OTel bridge is file export and import. There is no live collector push and no listening socket.
• The budget gate is trailing-state, as described above — not a hard cap.
• Pipeline integrity is measurement, not attestation: no hardware root of trust, and a fully compromised host can lie about its own measurement.
• C2PA uses a self-managed anchor, so public validators correctly report an untrusted signing credential. That is expected, not a defect.
• A missing diode chunk is reported by index; erasure-code reconstruction is not built.

Full detail: CHANGELOG · docs

---

Verify this download before you run it:

shasum -a 256 -c KriyaConsole-0.3.2-universal.dmg.sha256

Signed with a Developer ID certificate, notarized by Apple, and stapled. Universal (Intel + Apple Silicon), macOS 10.15+.

Then verify what the app shows you with the free offline auditor — that's the whole point: don't trust us, check.