v0.1.0.dev9

What's Changed

• fix(optimizer): metric-correct Riemannian Adam second moment by @smaniches in #84
• fix(sheaf): guard explicit-Euler diffusion against unstable steps by @smaniches in #85
• feat(examples): reproducible end-to-end SO(3) aggregation demonstration by @smaniches in #86
• ci: update scipy requirement from <1.16,>=1.10 to >=1.10,<1.18 in the runtime group by @dependabot[bot] in #87
• test: bridge actual point-action aggregation to equivalent neural networks by @smaniches in #88
• fix: preserve committed federated-round state on failure by @smaniches in #89
• research: publish byte-exact six-seed neural gauge evidence and replay verifier by @smaniches in #90
• docs: reconcile real-neural experiment with core API validation boundary by @smaniches in #91
• ci: stop masking benchmark-test failures by @smaniches in #92
• release: publish metric-aware numerical corrections as 0.1.0.dev9 by @smaniches in #94

Full Changelog: v0.1.0.dev8...v0.1.0.dev9

v0.1.0.dev8

What's Changed

• fix(compat): retire end-of-life Python 3.10 (v0.1.0.dev8) by @smaniches in #83

Full Changelog: v0.1.0.dev7...v0.1.0.dev8

v0.1.0.dev7

What's Changed

• fix(release): verify PyPI distributions without counting attestation sidecars by @smaniches in #74
• ci(recovery): finish dev6 GitHub prerelease from original PyPI-matched artifacts by @smaniches in #75
• fix(recovery): attach both verified Sigstore sidecars from dist/ by @smaniches in #76
• chore(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #69
• fix(security): eliminate unused torch dependency and audited CVE constraints by @smaniches in #81
• ci: bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #78
• fix(science): use nonzero bottleneck-to-diagonal for unmatched H0 bars by @smaniches in #77
• release: 0.1.0.dev7 corrective pre-alpha distribution by @smaniches in #82

Full Changelog: v0.1.0.dev6...v0.1.0.dev7

v0.1.0.dev6

What's Changed

• fix(release): attest the CycloneDX SBOM via custom predicate mode by @smaniches in #62
• chore(deps): bump actions/attest from 4.1.0 to 4.2.2 in the actions group by @dependabot[bot] in #63
• fix(release): reconcile dist against PyPI before anything consumes it by @smaniches in #64
• fix(release): serialize same-version runs from reconciliation to publication by @smaniches in #65
• chore(deps): bump the actions group with 2 updates by @dependabot[bot] in #66
• fix(transport): correct pole-ladder step schedule and implement a true Schild's ladder by @smaniches in #68
• docs: state scientific authorship and assistance plainly by @smaniches in #70
• fix(release): classify .dev, alpha, beta and rc tags as prereleases by @smaniches in #71
• ci(release): auto-tag only after successful main CI by @smaniches in #73
• [RELEASE CANDIDATE - DO NOT MERGE] release: 0.1.0.dev6 pre-alpha distributing #68 fixes by @smaniches in #72

Full Changelog: v0.1.0.dev5...v0.1.0.dev6

v0.1.0.dev5

What's Changed

• Fix release automation: explicitly dispatch release.yml instead of relying on the tag push by @smaniches in #51
• ci(security): ignore PYSEC-2026-3447 (setuptools <83) in pip-audit by @smaniches in #53
• chore(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #54
• chore(deps): bump the actions group with 2 updates by @dependabot[bot] in #55
• fix(sbom): derive release SBOM from exact published wheel by @smaniches in #58
• chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the actions group across 1 directory by @dependabot[bot] in #56
• ci(dependabot): ignore numpy 2.x version proposals by @smaniches in #60
• fix(science): correct holonomy and transport semantics by @smaniches in #61

Full Changelog: v0.1.0.dev4...v0.1.0.dev5

---

Note on these release assets

The files attached here were reconciled to the immutable PyPI 0.1.0.dev5
artifacts originally published by workflow run
31931064720 on
2026-08-16. A later run,
32427167884,
rebuilt the same tag and overwrote the mutable GitHub Release assets with
byte-different files; the two builds were content-identical and differed only in
embedded build timestamps, and PyPI, being immutable, was unaffected throughout.

The wheel and sdist here are byte-for-byte the PyPI artifacts:

file	SHA-256
groupoid-0.1.0.dev5-py3-none-any.whl	452c16ad642c8432b1ee46c661d9d50ed9de831061f10c01debf1c3a0b7187c4
groupoid-0.1.0.dev5.tar.gz	99739902157798bf3443df2eb8beb7394ce04b77862ddefabe2c6d9547fd8dce

sbom.cdx.json is run 31931064720's own SBOM, whose CycloneDX root component
binds the wheel above.

The two .sigstore.json bundles were reconstructed from that run's original
Rekor transparency-log entries (log indices 2484701423 and 2484701424) and
cryptographically verify the artifacts above. They are not byte-identical copies
of the originally published bundle files, because Rekor does not preserve the
RFC 3161 timestamp material; verification therefore proceeds via the inclusion
promise and the log's integrated time.

v0.1.0.dev4

What's Changed

• ci(dependabot): group and schedule updates, scope pip to direct deps by @smaniches in #38
• chore: verify CodeQL gate (throwaway) by @smaniches in #43
• chore(deps): bump the actions group with 5 updates by @dependabot[bot] in #41
• ci: scope docs-deploy permissions and SHA-pin first-party actions (OpenSSF Scorecard) by @smaniches in #44
• Audit: fix Morphism str() bypassing compact repr; align docs-site PyPI claims; sobriety cleanups by @smaniches in #47
• chore(release): cut 0.1.0.dev3 by @smaniches in #48
• Optimizer moment transport, pipeline integration, and a preregistered benchmark of the central hypothesis by @smaniches in #49
• Cut 0.1.0.dev4 and add a two-workflow auto-tag-then-release pipeline by @smaniches in #50

Full Changelog: v0.1.0.dev2...v0.1.0.dev4

v0.1.0.dev2 — RiemannianAdam bias-init fix

Pre-alpha development pre-release. Fixes the RiemannianAdam optimizer's first-moment bias initialization (a first-step magnitude inflation; the optimizer is not integrated into the aggregation pipeline, so no published/DOI'd result changes) and corrects the STATUS.md PyPI line. Cite the concept DOI 10.5281/zenodo.20563974, which always resolves to the latest version. See CHANGELOG.md.

What's Changed

• chore(deps): bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #27
• chore(deps): bump actions/upload-pages-artifact from 3 to 5 by @dependabot[bot] in #28
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #29
• chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #30
• chore(deps): update scipy requirement from <1.14,>=1.10 to >=1.10,<1.16 by @dependabot[bot] in #32
• ci(deps): bump actions/setup-python from 5 to 6 by @smaniches in #35
• ci(release): add PyPI Trusted Publishing release workflow by @smaniches in #36
• docs(readme): add PyPI badge and pip install line by @smaniches in #37
• Fix RiemannianAdam first-moment bias init and correct STATUS.md PyPI line by @smaniches in #39
• chore(release): cut 0.1.0.dev2 by @smaniches in #40

New Contributors

• @dependabot[bot] made their first contribution in #27

Full Changelog: v0.1.0.dev1...v0.1.0.dev2

v0.1.0.dev1 - pre-alpha on mathematically corrected code

Pre-alpha research prototype. This release is cut on mathematically corrected code and supersedes v0.1.0.dev0.

Supersession notice

The earlier v0.1.0.dev0 tag and its Zenodo version DOI (10.5281/zenodo.20563975) predate the correctness fixes below and must not be cited for results. The concept DOI (10.5281/zenodo.20563974) resolves to this corrected version.

Fixed

• Sheaf (connection) Laplacian corrected to a positive-semidefinite operator (L = delta^T delta) with a transport-consistent kernel; verified against an independent coboundary construction in the general, non-orthogonal case (#13).
• Persistence diagrams retain the homology-dimension label, so H0 and H1 are no longer conflated in divergence tracking; H0 divergence is verified against an independent scipy-MST reference (#21).
• H^1 cohomology raises on incomplete cocycles instead of forming a partial holonomy product (#20).

Also since v0.1.0.dev0

• Consolidated PROBLEMS.md self-audit (#23).
• CHANGELOG.md linked from package metadata (#24).
• .zenodo.json with curated deposit metadata and version-chain links to the concept and prior version DOIs.
• Dependabot configuration for pip and github-actions (#25).
• numpy array annotations parameterized to NDArray[np.float64] with mypy --strict enforced as a hard CI gate (#26).
• Hard pip-audit security gate replacing the deprecated soft safety check (#22).

See CHANGELOG.md for full details. API is unstable and will change without notice.

v0.1.0.dev0 - pre-alpha snapshot (first archived for DOI)

First Zenodo-archived snapshot of GROUPOID, created to provide a citable DOI.

Status: pre-alpha research prototype. See STATUS.md and LIMITATIONS.md for exactly what is implemented and tested versus not. This is not a working federated-learning framework; it is a small, honestly-scoped library of groupoid / Riemannian-geometry primitives (Karcher mean, morphism composition, H^1 holonomy, sheaf Laplacian, aggregation pipeline).

Known issues tracked openly: #8 (sheaf Laplacian off-diagonal block), #9 (compute_h1 missing-edge handling), #10 (persistence per-dimension labels).

Author: Santiago Maniches (ORCID 0009-0005-6480-1987).