v0.1.0-beta.1

Changelog

• Soul Stack v0.1.0-beta.1 — public beta
• ci(release): extend goreleaser to all six binaries + apk
• ci(release): add workflow_dispatch for manual release runs
• ci(release): fix dockers_v2 build-context path via TARGETPLATFORM

Install

Container images — keeper and soul, multi-arch (linux/amd64 +
linux/arm64), distroless. Version tags only, there is no latest:

docker pull ghcr.io/souls-guild/soul-stack/keeper:0.1.0-beta.1
docker pull ghcr.io/souls-guild/soul-stack/soul:0.1.0-beta.1

Native packages — the .deb / .rpm / .apk assets below, one per binary,
amd64 and arm64. keeper and soul ship a systemd unit, an env file and an
example config, so the package lands a runnable daemon:

curl -fsSLO https://github.com/souls-guild/soul-stack/releases/download/v0.1.0-beta.1/soul-stack-keeper_0.1.0-beta.1_linux_amd64.deb
sudo dpkg -i soul-stack-keeper_0.1.0-beta.1_linux_amd64.deb

Swap keeper for soul, soul-lint, soulctl, soul-trial or soul-legion.

Archives — soul-stack_0.1.0-beta.1_<os>_<arch>.tar.gz for Linux and macOS,
.zip for Windows. The Linux bundle carries all six binaries; macOS and Windows
carry the four CLIs only, since keeper and soul are Linux daemons.

Verify before you run it. Everything here is signed with keyless cosign
(GitHub OIDC, no long-lived key), and every archive ships a CycloneDX SBOM
(*.cdx.json):

cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity "https://github.com/souls-guild/soul-stack/.github/workflows/release.yml@refs/tags/v0.1.0-beta.1" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

cosign verify ghcr.io/souls-guild/soul-stack/keeper:0.1.0-beta.1 \
  --certificate-identity "https://github.com/souls-guild/soul-stack/.github/workflows/release.yml@refs/tags/v0.1.0-beta.1" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com