v0.4.0 — 6-Sprint Master Architecture: DCP-2.0 Moat, MCP Server, EU CRA Ed25519/SBOM, Action v2 & Policy Gate

🏆 LetItLoop 6-Sprint Master Architecture Release (v0.4.0)

This landmark release completes the full 6-sprint architectural roadmap, transforming LetItLoop from a standalone WAL prototype into an enterprise-grade crash-resilience kernel, viral public benchmark moat, universal MCP server, and EU CRA compliance gate.

---

📦 Key Highlights & Capabilities

1. 🔧 Real Framework Adapters & Durable Kernel (Sprint 1)

• Zero-Dependency Decorators: @durable\ and @durable_async\ automatically cache step inputs/outputs into Write-Ahead Logs (WAL v2).
• Sub-Millisecond Resume: Crashed pipelines fast-forward past completed steps with 0% duplicate token consumption in <1ms.
• Framework Bridges: Ready-to-use adapters and examples for LangGraph, CrewAI, AutoGen, and raw AsyncIO pipelines.

2. 🏆 DCP-2.0 Conformance Moat & Public Leaderboard (Sprint 2)

• HMAC Anti-Cheat Signatures: Benchmark runs generate non-reproducible, cryptographically signed audit receipts (\ race_id\ + 64-char HMAC).
• Visual Terminal Visualizer: \lil demo\ displays a 10s interactive crash-recovery visualizer with synthetic tasks.
• SVG Badges & HTML Reports: Generates deterministic durability shields (\durability_score.svg) and static leaderboard pages.
• Nightly GitHub Pages: Deploys the latest benchmark rankings automatically to \https://sdageltc.github.io/letitloop/bench\.

3. 📢 Production GitHub Action v2 (Sprint 3)

• Zero Runtime Dependencies: Compiled into a single 24 KB CJS bundle (\dist/index.js) using Node.js built-ins.
• Fail-Closed Verification Gate: Validates AST integrity across all Python files and CRC checksums on WAL frames in <2.5s.
• Automated PR Billboard: Posts cryptographic durability proof receipts as sticky PR comments on every commit.

4. 🔌 Universal MCP Durability Server (Sprint 4)

• Universal IDE Compatibility: Stdio-based MCP server (\python -m letitloop.mcp) for Cursor, Windsurf, Claude Code, and Roo.
• 7 Durable Tools: \checkpoint_state,
  ollback_ast, \�erify_scope, \emit_receipt, \durable_step, \�ench_compare, and \wal_verify.
• Security Jailing & Idempotency: Hard filesystem containment preventing path traversal outside declared workspaces and worktrees.

5. 🛡️ EU Cyber Resilience Act (CRA) Auto-Remediation (Sprint 5)

• Proof-Carrying Patches: \lil remediate\ executes auto-fixes inside isolated Git worktrees with machine-verifiable proof contracts.
• Hardware-Grade Cryptography: Ed25519 detached signatures and Sigstore OIDC attestations for software supply-chain integrity.
• Lightweight SBOM Diffing: Automated CycloneDX SBOM generation comparing dependency trees and code hashes before and after repairs.

6. 🏛️ Enterprise Deterministic Policy Gatekeeper (Sprint 6)

• Token Budget & Scope Enforcement: \lil gate\ blocks CI/CD pipelines if an autonomous agent exceeds LLM token limits or modifies forbidden files.
• Entropy Secret Scrubber: Scans logs and diffs for high-entropy strings and masks API keys (\sk-, \ghp_, \AKIA, private keys) into <secret:REDACTED>.