v0.2.0

v0.2.0 (2026-11-13)

Release status

v0.2.0 is the gated release, and its anchor misses. Of the three gates of org golden rule 6 it clears two: the fidelity sheet against its source, Güneş, Sorges & Bouazizi, IWAHN 2002 (https://doi.org/10.1109/icppw.2002.1039715; docs/fidelity.md), and the per-PR delivery smoke. The third, the anchor on that paper's trend against AODV, misses: ARA's routing load is below AODV's at every pause time, but its delivery is below AODV's at pause 0 and 30 s, so both gated PDR checks fail (docs/benchmarks/v0.2.0-anchor.md; maintainer decision 2026-11-13 on #5). Org rule 6 counts a comparator's numbers only after its three gates, so v0.2.0 ships with that written infeasibility verdict, and its delivery numbers are not presented as a reproduction of the paper. The next anchor is the 2003 version's, a different source with its own trend (#27, #125, v0.3.0). It ships core/ (MIT OR GPL-2.0-only, with core/LICENSE), the ns-3 contrib module ara (ns3/, GPL-2.0-only) and docs/, as they stand on main at the release commit; the anchor's raw cells are in the repository at the tag, under results/cells/.

Feat

• core: a default-off switch that holds data while its discovery runs (#112)
• ns3: the adapter carries out duplicate errors and route-failure backtracking (#98)
• bench: the anchor plan, the paper trend as a paired campaign (#97)
• core: duplicate errors and route-failure backtracking (#96)
• bench: benchmark pipeline: a caller of the reusable cell and the change-test smoke plan (#93)
• observer: report through swarm-core's router observer (#54)

Fix

• audit follow-ups (a plan-dependency check for the anchor, the dedup lifetime, stale status text) (#111)

Perf

• core: age() lists only the entries about to expire (#94)
• core: read pheromone rows without entries() copies (#92)

Verify your download

Checksums (also the SHA256SUMS asset):

631e944e56294a0277a7092340b3a0c8b1d41ad1c15a3705303e2dd114bb794f  ara-0.2.0.cdx.json
30926b4b287d4401352aa1ced7b32da5b584fcfd7d7382413ac77de937138bcc  ara-0.2.0.tar.gz

sha256sum -c SHA256SUMS --ignore-missing   # in the directory you downloaded to

Every asset carries signed SLSA build provenance (ara-0.2.0.intoto.jsonl, and the Sigstore bundle ara-0.2.0.sigstore.json) and is described by a CycloneDX SBOM (ara-0.2.0.cdx.json). With the GitHub CLI, for any asset, e.g. ara-0.2.0.tar.gz:

gh attestation verify ara-0.2.0.tar.gz --repo swarm-routing/ARA --signer-workflow swarm-routing/.github/.github/workflows/reusable-release.yml
gh attestation verify ara-0.2.0.tar.gz --repo swarm-routing/ARA --predicate-type https://cyclonedx.org/bom --signer-workflow swarm-routing/.github/.github/workflows/reusable-release.yml
gh attestation verify ara-0.2.0.tar.gz --repo swarm-routing/ARA --bundle ara-0.2.0.sigstore.json --signer-workflow swarm-routing/.github/.github/workflows/reusable-release.yml   # offline

Built and signed by reusable-release.yml, run 43467550239.

v0.1.0

v0.1.0 (2026-11-11)

Release status

v0.1.0 is cut before the comparator gates (maintainer decision 2026-11-10). It has not cleared the three gates of org golden rule 6 (a fidelity sheet from its source, the per-PR delivery smoke, and an anchor reproducing the source's own trend). The anchor is pending. No result from this release counts as a benchmark number, and it does not enter the benchmarks suite until a release clears the gates; that gated release is proposed as v0.2.0 (swarm-routing/.github ROADMAP "Releases"). It ships core/ (MIT OR GPL-2.0-only, with core/LICENSE), the ns-3 contrib module ara (ns3/, GPL-2.0-only) and docs/, as they stand on main at the release commit.

Feat

• core: route maintenance by data, Δϕ toward both ends on every hop (#44)
• ns3: the ara contrib module on swarm-core: codec, adapter, helper, arm, tests (#40)
• core: route discovery on swarm-core: fant/bant, trails, evaporation, retries (#33)

Verify your download

Checksums (also the SHA256SUMS asset):

b3fe33168f49ff2b0351e5fe421744677830b32cac3b154734dbf077c391ed02  ara-0.1.0.cdx.json
0ac773df594481f467c12a1d2e63f2ea064f0d573240397b3d4e15dce989625a  ara-0.1.0.tar.gz

sha256sum -c SHA256SUMS --ignore-missing   # in the directory you downloaded to

Every asset carries signed SLSA build provenance (ara-0.1.0.intoto.jsonl, and the Sigstore bundle ara-0.1.0.sigstore.json) and is described by a CycloneDX SBOM (ara-0.1.0.cdx.json). With the GitHub CLI, for any asset, e.g. ara-0.1.0.tar.gz:

gh attestation verify ara-0.1.0.tar.gz --repo swarm-routing/ARA --signer-workflow swarm-routing/.github/.github/workflows/reusable-release.yml
gh attestation verify ara-0.1.0.tar.gz --repo swarm-routing/ARA --predicate-type https://cyclonedx.org/bom --signer-workflow swarm-routing/.github/.github/workflows/reusable-release.yml
gh attestation verify ara-0.1.0.tar.gz --repo swarm-routing/ARA --bundle ara-0.1.0.sigstore.json --signer-workflow swarm-routing/.github/.github/workflows/reusable-release.yml   # offline

Built and signed by reusable-release.yml, run 42955480536.