BenchHandoff v0.4.0

GitHub-only early-alpha release; not a PyPI publication or supported deployment.

What changed

• Added an optional, source-only Kubernetes AgentRun controller for strict
  BenchHandoff version 3 suites.
• Added immutable PVC, suite-digest, runner-image, and deadline bindings.
• Added write-once resume approval, deterministic start/resume/verify Jobs,
  manager restart/adoption, and fresh bundle verification.
• Added fail-closed handling for identity drift, digest mismatch, ambiguous
  Jobs or Pods, preseeded approval, and malformed results.

The controller source includes the CRD, Go manager, reference Kustomize
manifests, and disposable kind gate. No controller image, Helm chart,
production installer, or compatibility matrix is published.

Validation scope

• Tag CI
• Tag AgentRun real kind E2E

Both workflows passed on commit
6e2c43e59a88193f301b84988ab0fe6b0b410e13.

The recorded Kubernetes gate used Go 1.26.5, kind v0.32.0, and
Kubernetes/kubectl v1.36.1 with one manager and one node. It exercised
deliberate failure, exact approval, resume, fresh verification, manager
restart/adoption, declared suite-digest mismatch, wrong approval,
duplicate-Pod rejection, and bounded cleanup.

This synthetic validation does not establish high availability, exactly-once
execution, workload isolation, performance, general Kubernetes compatibility,
production reliability, independent reproduction, or external adoption.

Install the Python CLI

Download the attached wheel, verify it against SHA256SUMS, then run:

python -m pip install ./benchhandoff-0.4.0-py3-none-any.whl

Python 3.11 or newer is required.