v1.15.1 — init templates parse cleanly

Patch release. symbi init agent templates now parse cleanly — no runtime or API changes.

Fixed

• All four init templates (assistant, dev, coordinator, worker) were missing the statement-terminating ; the grammar requires, producing Parse errors on generated agents. Semicolons added.
• The dev template used an executor { } block (not a valid agent item), the and keyword (grammar uses &&), and audit: … with signature (policy rules take only an optional if). Its executor config now uses the Mode B metadata convention (executor = "claude_code", model, allowed_tools) and the policy syntax is corrected — so dev-agent is a functional managed agent.
• WithBlock::parse_sandbox_tier now accepts tier1/tier2/tier3 aliases (→ docker/gvisor/firecracker), matching the docs and example agents (clears the Invalid sandbox tier extraction warning).

Added

• Regression test asserting every init template parses without errors and exposes an extractable sandbox tier.

Pre-Built Binaries

Note: Pre-built binaries are tested but considered less reliable than installing via cargo install symbi or Docker (ghcr.io/thirdkeyai/symbi). If you encounter issues, please try those methods first.

Quick Install

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/thirdkeyai/symbiont/main/scripts/install.sh | bash

Homebrew (macOS):

brew tap thirdkeyai/tap
brew install symbi

Manual download:
Download the appropriate binary for your platform from the assets below. Verify checksums with checksums.txt.

Verification

Each binary is signed with Sigstore cosign. Verify with:

cosign verify-blob --certificate symbi-*.pem --signature symbi-*.sig symbi-*.tar.gz \
  --certificate-identity-regexp="https://github.com/ThirdKeyAI/Symbiont" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

SHA256 checksums are in checksums.txt (also signed).