v1.34.0-rc.8

Pre-release on the edge channel; rc.7 plus the two demo-estate fixes rc.7 could not carry, the
2026-09-21 Windows-side handoff merged onto the rc.7 tree, and one adversarial review of that merge
folded. Server migration 159 (org_model_prices.peak_json; run observer-org migrate before starting
the new image) and agent migrations 125 + 126 (node-local, additive). Node binaries need updating too.

• Org server: the fleet-findings sweeper is now carried onto the served server (D-DEMO-12) - the built-in
  no_contact alert rule seeds and authority_divergence / integrity_risk / no_contact /
  governance_lapsed findings open; a runtime test pins every background worker across the assembly copy.
• Deploy bundle: observer-env-sync.sh re-asserts the D12 secrets/config.toml mountpoint placeholder in
  place (D-DEMO-11) so docker exec observer-org <cli> keeps reading the real config.
• Org server, pricing feed: the public signed pricing feed importer now defaults to ENABLED with mode
  auto (operator decision 2026-09-20): a connected org pulls https://superbased.app/api/pricing/v1/observer-pricing
  and auto-applies list-price versions as source = imported rows; opt out with [pricing_feed] enabled = false,
  or keep pulls but park them for approval with mode = "park". An air-gapped org (bundle_path set) egresses nothing.
• Pricing, peak/off-peak (Phases 0-3): org_model_prices.peak_json backs pricing.Row.Peak (a peak RateSet
  • UTC schedule); both signed rails carry it; the node cost engine prices a turn at the peak variant inside
    the window; the org Pricing page shows a read-only vendor-line badge; the Tokenomics feed export carries
    peak_json. Inert until an org authors (or the feed publishes) a peak variant. Both pricing rails now
    verify over the raw received bytes and persist them, so a field a newer server adds degrades instead of
    freezing the cache. DeepSeek flash-family off-peak base correction.
• Guard: manage guard rules from the node dashboard (Settings, per project) through a daemon-local
  trusted per-project policy layer under ~/.observer (weaken/disable scoped to one project, never below
  the org floor; R-160/R-161 integrity rules cannot be disabled or relaxed below the org); the global rule
  picker can loosen built-ins; the org dashboard's guard form picks rules from a described dropdown; the
  guard-rule vocabulary is one shared module for both dashboards. Hook-lane policy blocks are interleaved
  into the session Messages tab at the exact message anchor.
• Guard, merge-review fold: a signed org bundle carrying a top-level disable list is accepted with the key
  ignored and noted (the forward-compatibility rc.7 introduced now covers decoded keys too - rejecting it
  would have stranded every node on its stale bundle); the trusted per-project layer loads even when the
  in-repo project_policy layer is disabled; /api/session/<id>/guard carries overridable / org_locked
  like the global timeline.
• Capture: user file/image attachments on a prompt are captured and shown in the Messages tab (agent 126);
  the AI tool / CLI version is captured per session (agent 125) and shown on the session card; lines of
  code by sub-agents fold under the parent session card; process-APM metrics correlate to the message /
  turn that caused them across every adapter; clinecli pidbridge rail proven live.
• Org client: benign policy-rail states (channel_off, disabled, not_supported, no_budget,
  no_pricing) log at Debug instead of a WARN per rail per cycle.
• Marketing site: www 301s to the apex host; /listed-on directory page with a quiet footer link;
  tool counts say 40 supported tools and 27 CLI launchers; guide links from the home page and footer.
• Price snapshot: 2026-09-17 (aws us-east-1, azure eastus2, gcp us-central1)

---

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform	Asset
Linux x86_64	observer-v1.34.0-rc.8-linux-x64.tar.gz
Linux arm64	observer-v1.34.0-rc.8-linux-arm64.tar.gz
macOS x86_64 (Intel)	observer-v1.34.0-rc.8-darwin-x64.tar.gz
macOS arm64 (Apple Silicon)	observer-v1.34.0-rc.8-darwin-arm64.tar.gz
Windows x86_64	observer-v1.34.0-rc.8-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.34.0-rc.8

Org server (Teams)

The self-hosted org server is an enterprise-licensed product distributed from SuperBased's private container registry with a per-customer pull token issued with your enterprise licence; its release assets are not attached here. Contact sales for a pull token. The pull-and-verify recipe for your exact release is the README.md of the deployment bundle (observer-org deploy export).

Enterprise updates

This release publishes on the edge channel.

Each agent archive carries a detached vendor signature (<archive>.sig, raw Ed25519 over the archive bytes) and the release ships a signed update-manifest-edge.json. Self-hosted org servers consume them with:

observer-org update sync --version v1.34.0-rc.8
observer-org update publish --channel edge --version v1.34.0-rc.8

For a disconnected server, download observer-v1.34.0-rc.8-airgap-bundle.tar (archives + signatures + SHA256SUMS + the signed manifest + provenance), carry it across the gap, and run observer-org update import --version v1.34.0-rc.8 --bundle <dir>.

Supply chain

A CycloneDX SBOM for the agent is attached: observer.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private