v1.9.1
What's Changed
Optional LanceDB build feature
LanceDB, arrow-array, and arrow-schema are now optional dependencies gated behind the vector-lancedb feature flag. LanceDB remains in the default feature set so existing builds are unaffected.
Build without vector backends for lighter binaries:
cargo build --no-default-featuresBuild with only Qdrant:
cargo build --no-default-features --features vector-qdrantWhen no vector backend is enabled, the runtime gracefully falls back to NoOpVectorDatabase.
Documentation overhaul
- README restructured around "policy-governed agent runtime" positioning
- Core capabilities table trimmed from 17 to 8 rows
- DSL example simplified to show allow/deny/audit pattern
- Performance claims linked to benchmark harness instead of inline numbers
- Community vs Enterprise editions clearly delineated
- All 5 translations (zh-cn, es, pt, ja, de) updated to match
- Docs index rewritten to match README messaging
- SECURITY.md support matrix updated to 1.9.x/1.8.x
Fixes
- Rust version requirement: 1.88+ → 1.82+ across all docs (matches workspace MSRV)
- Dockerfile port comment: 8080 is Runtime API/MCP, not gRPC
- Removed dead enterprise/README.md link from public READMEs
- Removed speculative Risk Assessment Algorithm from security and architecture docs
Pre-Built Binaries
Note: Pre-built binaries are tested but considered less reliable than installing via
cargo install symbior Docker (ghcr.io/thirdkeyai/symbi). If you encounter issues, please try those methods first.
Quick Install
macOS / Linux:
curl -fsSL https://raw.githubusercontent.com/thirdkeyai/symbiont/main/scripts/install.sh | bashHomebrew (macOS):
brew tap thirdkeyai/tap
brew install symbiManual download:
Download the appropriate binary for your platform from the assets below. Verify checksums with checksums.txt.
Verification
Each binary is signed with Sigstore cosign. Verify with:
cosign verify-blob --certificate symbi-*.pem --signature symbi-*.sig symbi-*.tar.gz \
--certificate-identity-regexp="https://github.com/ThirdKeyAI/Symbiont" \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"SHA256 checksums are in checksums.txt (also signed).