v0.1.0-beta.3

Container images

• ghcr.io/shikanon/orag-api:v0.1.0-beta.3 @ sha256:6892e9ea182cc3cf5b536bb1afa033911fa7b3473356a1212279ca36224f10ff
• ghcr.io/shikanon/orag-console:v0.1.0-beta.3 @ sha256:917d5afcc7985896944724e4a32e1164643c426fa080e664e66d675fbe0a1668

Both images support linux/amd64 and linux/arm64 and include registry SBOM/provenance attestations plus keyless signatures.

Quick verification

Run make demo from this tag for the no-key migration, API, Console, ingestion, cited-query, trace, and evaluation walkthrough.

Hosted documentation: https://www.tensorbytes.com/orag/ (GitHub Pages mirror: https://shikanon.github.io/orag/)

See CHANGELOG.md and docs/compatibility.md for Beta limitations and migration policy.

What's Changed

• docs: add reference server deployment by @shikanon in #239
• test: verify beta2 SDK consumer by @shikanon in #240
• docs: link hosted deployment guide by @shikanon in #241
• docs: add disaster recovery runbook by @shikanon in #242
• ci: add integration and race gates by @shikanon in #243
• feat(console): add project API debugger by @shikanon in #244
• feat(console): add evaluation center by @shikanon in #245
• feat: define release lifecycle by @shikanon in #246
• feat: persist release lifecycle by @shikanon in #247
• feat: expose release lifecycle APIs and console by @shikanon in #248
• feat: expose release lifecycle in public Go SDK by @shikanon in #249
• feat: add pipeline version evidence gates by @shikanon in #250
• docs: document pipeline release SDK APIs by @shikanon in #251
• feat: connect console release candidate workflow by @shikanon in #252
• feat: expose RAG Studio node registry by @shikanon in #253
• feat: persist revisioned pipeline drafts by @shikanon in #254
• feat: compile and debug revisioned pipelines by @shikanon in #255
• feat: expose project pipeline debug API by @shikanon in #256
• feat: run pipeline drafts from console debugger by @shikanon in #257
• feat: add revisioned RAG Studio draft editor by @shikanon in #258
• feat: save debug runs as evaluation cases by @shikanon in #259
• docs: update phase four roadmap progress by @shikanon in #260
• feat: freeze pipeline drafts into immutable versions by @shikanon in #261
• docs: record immutable pipeline version progress by @shikanon in #262
• feat: allow mirrored compose dependency images by @shikanon in #263
• feat: validate drafts before creating pipeline versions by @shikanon in #264
• docs: document public issue triage by @shikanon in #265
• feat: add immutable evaluation policy foundation by @shikanon in #266
• docs: record evaluation policy foundation by @shikanon in #267
• feat(release): persist frozen pipeline definitions by @shikanon in #268
• feat(evaluation): derive evidence from stored runs by @shikanon in #269
• feat(release): enforce derived evaluation evidence by @shikanon in #270
• docs: record derived release gate progress by @shikanon in #271
• feat(release): activate evaluated development versions by @shikanon in #272
• feat(release): execute production active versions by @shikanon in #273
• feat(console): gate release lifecycle against real storage by @shikanon in #274
• feat(tutorial): add verified Pack clone and Text Quick Live Run by @shikanon in #275
• feat: add auditable P1 tutorial parser candidate by @shikanon in #276
• feat: publish tutorial P2 chunk candidate by @shikanon in #277
• feat: add P3 contextual retrieval tutorial candidate by @shikanon in #278
• docs: host tutorial P3 contextual guide by @shikanon in #279
• feat: add tutorial P4 sparse retrieval by @shikanon in #280
• feat: add tutorial P5 multi-query candidate by @shikanon in #281
• feat: add tutorial P6 rerank candidate by @shikanon in #282
• feat: add tutorial P7 graph retrieval by @shikanon in #283
• feat: add tutorial P8 context pack candidate by @shikanon in #284
• feat: add reproducible text benchmark runs by @shikanon in #285
• feat: add official text tutorial replay by @shikanon in #286
• feat: publish verified text rag pack by @shikanon in #287
• feat: add pinned visual document recipe clone by @shikanon in #288
• feat: add private Video RAG benchmark protocol by @shikanon in #289
• fix: verify Video RAG protocol release path by @shikanon in #290
• feat: install Video RAG protocol safely by @shikanon in #291
• feat: persist verified private video sources by @shikanon in #292
• feat: expose private video source import API by @shikanon in #293
• feat: define safe temporal index descriptions by @shikanon in #294
• feat: persist deterministic temporal index assets by @shikanon in #295
• docs: publish private video import contract by @shikanon in #296
• feat: activate private video evaluation snapshots by @shikanon in #297
• docs: publish private video evaluation activation by @shikanon in #298
• docs: reflect private video temporal P0 availability by @shikanon in #299
• docs: record visual tutorial live run availability by @shikanon in #300
• feat: publish verified visual recipe 1.0.1 by @shikanon in #301
• fix: verify public release version prefix by @shikanon in #302
• feat: add read-only migration status check by @shikanon in #303
• feat: add optional OTLP trace exporter by @shikanon in #304
• feat: add Grafana observability dashboard by @shikanon in #305
• feat: add OTLP metrics exporter by @shikanon in #306
• feat: add verifiable performance baseline contract by @shikanon in #307
• feat: add execution budget controls by @shikanon in #308
• feat: verify backup artifacts before restore by @shikanon in #309
• docs: add RFC governance process by @shikanon in #310
• docs: make tensorbytes the primary hosted site by @shikanon in #311
• feat: propagate and sample OTLP traces by @shikanon in #312
• feat: add public extension conformance contracts by @shikanon in #313
• docs: publish extension contracts page by @shikanon in #314
• feat: add reproducible performance baseline runner by @shikanon in #315
• feat: add isolated backup restore drill by @shikanon in #316
• docs: publish verifiable performance baseline evidence by @shikanon in #317
• feat: guard production configuration by @shikanon in #318
• feat: rotate tenant API keys atomically by @shikanon in #319
• feat: add credential rotation drill by @shikanon in #320
• feat: audit release compatibility by @shikanon in #321
• ci: verify public release images by @shikanon in #322

Full Changelog: v0.1.0-beta.2...v0.1.0-beta.3

v0.1.0-beta.2

Container images

• ghcr.io/shikanon/orag-api:v0.1.0-beta.2 @ sha256:1e7b7111ffb1e10751f689850adb03b1a7f068e320ab91b06db7a6cceaac04d0
• ghcr.io/shikanon/orag-console:v0.1.0-beta.2 @ sha256:67a3180d101d14e3107425edde514096df8dca0492ae8770197f2d8c3c6e0e86

Both images support linux/amd64 and linux/arm64 and include registry SBOM/provenance attestations plus keyless signatures.

Quick verification

Run make demo from this tag for the no-key migration, API, Console, ingestion, cited-query, trace, and evaluation walkthrough.

Hosted documentation: https://shikanon.github.io/orag/

See CHANGELOG.md and docs/compatibility.md for Beta limitations and migration policy.

What's Changed

• chore(deps-console): bump jsdom from 25.0.1 to 29.1.1 in /console by @dependabot[bot] in #194
• chore(deps-docker): bump alpine from 3.22 to 3.24 in /deployments by @dependabot[bot] in #189
• chore(deps-actions): bump actions/checkout from 4 to 7 by @dependabot[bot] in #188
• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.52.0 in /tests/consumer by @dependabot[bot] in #198
• chore(deps): bump google.golang.org/grpc from 1.64.1 to 1.79.3 in /tests/consumer by @dependabot[bot] in #204
• chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 in /tests/consumer by @dependabot[bot] in #203
• chore(deps): bump github.com/jackc/pgx/v5 from 5.5.5 to 5.9.2 in /tests/consumer by @dependabot[bot] in #202
• docs: design staged Qdrant visibility protocol by @shikanon in #206
• fix: prevent failed ingestion vector visibility by @shikanon in #207
• fix: make knowledge base deletion retryable by @shikanon in #208
• fix: make optimizer execution single-flight by @shikanon in #209
• test: verify RAG span execution timelines by @shikanon in #210
• build: remediate Go dependency vulnerabilities by @shikanon in #212
• ci: add code and supply-chain security gates by @shikanon in #214
• fix: bound fake embedding dimensions by @shikanon in #216
• ci: pin supply-chain dependencies by @shikanon in #218
• test: add continuous Go fuzzing by @shikanon in #220
• fix: keep optimizer results finite by @shikanon in #224
• fix: upgrade Eino Jinja security boundary by @shikanon in #222
• docs: design machine API keys and project authorization by @shikanon in #227
• feat(auth): add typed principal and deny-by-default policy by @shikanon in #228
• feat(auth): add secure machine API key persistence by @shikanon in #229
• feat(auth): authenticate API keys and enforce project RBAC by @shikanon in #230
• feat(auth): assign knowledge roots to projects by @shikanon in #231
• feat(auth): enforce project resource access by @shikanon in #232
• feat(auth): throttle API key usage audits by @shikanon in #233
• feat(sdk): expose project and API key lifecycle by @shikanon in #234
• feat(console): manage API keys by @shikanon in #235
• feat(console): add authenticated sessions by @shikanon in #236
• feat(auth): scope evaluations and optimizations by project by @shikanon in #237
• test: verify published beta SDK consumer by @shikanon in #238

New Contributors

• @dependabot[bot] made their first contribution in #194

Full Changelog: v0.1.0-beta.1...v0.1.0-beta.2

v0.1.0-beta.1

Container images

• ghcr.io/shikanon/orag-api:v0.1.0-beta.1 @ sha256:afc5034223a048b22fc7adb98c2a7424dab270d6e29e70e1d2e6bb3148205380
• ghcr.io/shikanon/orag-console:v0.1.0-beta.1 @ sha256:f814158be703d22f0ee8143ddb2673e62ae9394591973e8cf36b065b5fe7b452

Both images support linux/amd64 and linux/arm64 and include registry SBOM/provenance attestations plus keyless signatures.

Quick verification

Run make demo from this tag for the no-key migration, API, Console, ingestion, cited-query, trace, and evaluation walkthrough.

Hosted documentation: https://shikanon.github.io/orag/

See CHANGELOG.md and docs/compatibility.md for Beta limitations and migration policy.

What's Changed

• [codex] Upgrade Go 1.26 compatibility by @shikanon in #5
• [codex] add multimodal document parsers by @shikanon in #1
• 语义缓存键遗漏 profile 和 top_k / Semantic cache key omits profile and top_k by @shikanon in #12
• 失败的 RAG 图不会持久化错误 span / Failed RAG graph skips persisted error spans by @shikanon in #16
• 文档入库缺少知识库存在性校验 / document ingestion misses knowledge-base existence checks by @shikanon in #21
• 入库接口未校验知识库存在性 / Ingestion routes skip knowledge-base existence checks by @shikanon in #27
• 知识库仓储吞掉 PostgreSQL 错误 / Knowledge base repository swallows PostgreSQL errors by @shikanon in #32
• 删除知识库接口返回成功但不删除 / Knowledge base delete returns success without deleting by @shikanon in #33
• 入库失败后 PostgreSQL chunk 仍可被检索 / Failed ingestion leaves searchable PostgreSQL chunks by @shikanon in #36
• 评估 accuracy 会被任意引用刷满 / Evaluation accuracy treats any citation as correct by @shikanon in #48
• 数据集样本读取缺少租户校验 / Missing tenant check for dataset item access by @shikanon in #51
• 评估运行未校验数据集存在性 / Evaluation runner does not validate dataset existence by @shikanon in #55
• 知识库删除接口返回 204 但不删除 / Knowledge-base delete returns 204 without deleting by @shikanon in #10
• 评估数据集 item 访问缺少租户校验 / Evaluation dataset item access lacks tenant checks by @shikanon in #11
• 知识库写入错误被吞掉会返回假成功 / Swallowed KB write errors can return false success by @shikanon in #17
• 语义缓存未按 profile 隔离 / semantic cache is not isolated by profile by @shikanon in #22
• top_k 参数在混合检索中被固定配置覆盖 / top_k is overridden in hybrid retrieval by @shikanon in #23
• 删除知识库接口只返回 204 不删除 / Knowledge base delete is a no-op by @shikanon in #28
• 数据集条目缺少租户校验 / Dataset items miss tenant checks by @shikanon in #29
• 数据集样本缺少租户归属校验 / Dataset items miss tenant ownership checks by @shikanon in #37
• 查询接口未校验必填字段导致错误请求返回正常答案 / Query handlers accept missing required fields as normal queries by @shikanon in #41
• 删除知识库接口是空操作 / Knowledge base delete is a no-op by @shikanon in #49
• 数据集条目访问缺少租户校验 / Dataset item access lacks tenant check by @shikanon in #52
• API 初始化失败时以 0 退出 / API exits zero on initialization failure by @shikanon in #56
• 语义缓存键缺少 profile 导致错误复用 / Semantic cache key omits profile by @shikanon in #60
• 语义缓存未按 profile 隔离 / Semantic cache is not profile-scoped by @shikanon in #63
• 知识库创建忽略 Postgres 写入失败 / Knowledge base creation ignores Postgres write failures by @shikanon in #66
• 数据集样本和评估缺少租户校验 / Missing tenant checks for dataset items and evaluation by @shikanon in #67
• 入库和查询未校验知识库存在 / Ingestion and query skip knowledge base existence checks by @shikanon in #69
• 查询端点未校验 required 字段 / Query handlers skip required field validation by @shikanon in #73
• 失败入库会留下可检索的 PostgreSQL chunks / Failed ingestion leaves queryable PostgreSQL chunks by @shikanon in #77
• 高精检索配置 multi_query 和 HyDE 被静默忽略 / Multi-query and HyDE settings are silently ignored by @shikanon in #80
• 入库接口未校验知识库存在导致后端行为漂移 / Document ingestion skips knowledge base existence validation by @shikanon in #84
• 删除知识库接口返回成功但不删除 / Knowledge base delete returns success without deleting by @shikanon in #88
• 重复 trace_id 会混合不同请求的 span / Reused trace_id mixes spans across requests by @shikanon in #93
• README 引用缺失的 .env.example / README references missing .env.example by @shikanon in #96
• high_precision 的 multi_query 配置没有实际效果 / high_precision multi_query config is a no-op by @shikanon in #99
• 数据集 item 与评估读取缺少租户约束 / Dataset item and evaluation reads omit tenant scope by @shikanon in #103
• 语义缓存未按 profile 隔离 / Semantic cache lookup ignores profile isolation by @shikanon in #74
• 失败的 RAG graph trace 不会持久化 / Failed RAG graph traces are not persisted by @shikanon in #83
• 评估数据集样本缺少租户校验 / Evaluation dataset items miss tenant checks by @shikanon in #89
• 文档入库未先校验知识库存在 / Document ingest handlers skip knowledge base existence checks by @shikanon in #107
• Implement LLM Judge optimizer by @shikanon in #108
• DELETE 知识库返回成功但不删除数据 / DELETE knowledge base returns success without deleting by @shikanon in #112
• Resolve GitHub issues and polish docs by @shikanon in #113
• 评估运行绕过数据集租户校验 / Evaluation runner bypasses dataset tenant ownership by @shikanon in #114
• 复合入库索引器可能留下半成功数据 / Composite ingestion indexing can leave partial writes by @shikanon in #127
• 失败的 RAG 节点不会写入持久化 trace / Failed RAG nodes are not persisted to trace storage by @shikanon in #128
• [codex] Refresh docs links and trace API documentation by @shikanon in #133
• Postgres 创建知识库错误被吞掉 / Postgres knowledge base create errors are ignored by @shikanon in #134
• 优化恢复会丢失原始运行参数 / Optimization resume drops original run parameters by @shikanon in #138
• 评估入口缺少知识库存在性校验 / Evaluation endpoint misses knowledge-base existence validation by @shikanon in #140
• 重入库失败会先删除旧文档索引 / Re-ingest failure deletes the previous source first by @shikanon in #139
• OpenAPI 缺少 direct route 的 bypass cache_status / OpenAPI misses bypass cache_status by @shikanon in #144
• top_k 语义在 RAG 检索中被覆盖 / top_k semantics are overwritten in RAG retrieval by @shikanon in #145
• Qdrant 已存在集合未校验向量配置 / Existing Qdrant collections skip vector config validation by @shikanon in #149
• 未配置 graph 搜索会关闭线上查询增强 / Empty graph candidate disables query enhancements by @shikanon in #152
• 恢复优化运行时 dataset/kb 更新未持久化 / Resume does not persist dataset or KB changes by @shikanon in #153
• feat: add self-check diagnostics and self-ops agent capabilities by @shikanon in #154
• Fix second-round GitHub issue regressions by @shikanon in #160
• 优化提交缺少 run 和 candidates 的原子创建 / Optimization submit does not atomically create run and candidates by @shikanon in #164
• feat(ingest): add resumable uploads by @shikanon in #180
• 知识库删除先删外部索引会造成残留元数据与丢失向量 / Knowledge base delete removes external indexes before metadata by @shikanon in #179
• 优化恢复可更新配置但不会重建候选集 / Optimization resume updates config without rebuilding candidates by @shikanon in #178
• 自运维计划的写入路径和快照对象不匹配 / Self-ops plan snapshots the wrong generated artifacts by @shikanon in #174
• 图谱关系失败会留下已激活入库结果 / Graph relation failure leaves activated ingest data by @shikanon in #170
• 优化成本预算只在候选前检查，最后一个候选超支仍会 completed / Optimizer cost budget is only checked before candidates so final overrun completes by @shikanon in #158
• 语义缓存键缺少优化候选维度，候选评估会相互污染 / Semantic cache key lacks optimizer candidate dimension and contaminates candidate evaluation by @shikanon in #159
• 诊断 trace lookup 对任意 trace_id 返回假阳性 / Diagnostic trace lookup returns false positives for any trace_id by @shikanon in #165
• self-ops 快照校验跟踪错误的 artifact 路径 / self-ops snapshot checks wrong artifact paths by @shikanon in #169
• feat: add role-based ORAG scenario demos by @shikanon in #181
• feat: add multimodal test asset scenario by @shikanon in #182
• Harden...