Skip to content

ztd v1.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Oct 23:00
v1.4.1
ba2ab90
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[1.4.1] - 2026-10-25 - Operator Ownership and Evaluation Reliability

Overview

v1.4.1 fixes inference and Tribunal evaluation paths, clarifies Operator capability ownership, improves public mirror performance, and streamlines Evaluation Explorer startup. The embedded Operator now defaults to data only; pass ztd gw start --capabilities data,inference to keep embedded inference.

Added

  • Governance deliberation results retain Tribunal vote inference evidence, and conformance runs can verify Tribunal deliberations through POST /api/v1/governance/deliberations, including supporting inference and observation runtimes.
  • Evaluation run and assignment correlation fields associate Tribunal vote activity with its campaign assignment.
  • Operator capability ownership checks reject duplicate actuator keys and prevent singleton inference, provenance, or observer capabilities from being claimed by multiple Operators. Outbound Operator startup holds operator.lock to prevent multiple processes from sharing a runtime directory.

Changed

  • Inference, provenance, and observer capabilities require explicit selection; ztd gw start --capabilities data,inference opts the embedded Operator into inference.
  • Inference selection prefers an eligible embedded Operator and preserves explicit errors for targeted sessions that lack the inference capability.
  • Public mirror indexes cover additional query columns, and ingest batches writes to reduce query and update overhead. Changed indexes use new names so upgraded mirror.db files build the covering indexes.
  • Evaluation Explorer displays a spinner while connecting, caches a validated bootstrap for faster startup, and avoids downloading the full bootstrap when a cached feed can catch up through the stream.

Fixed

  • Ollama requests no longer fail when a model value uses the supported model representation.
  • Tribunal vote events retain their campaign run and assignment identity, and unassigned or unrelated governance votes no longer appear on campaign assignment rows.
  • Tribunal voting assignment fixes preserve inference evidence across revised or failed admission reviews.
  • Website version display updates with the release preparation, and the website journal includes the event receipt illustration.

Qualification evidence

The Linux amd64 candidate builds successfully and reports v1.4.1. The Explorer and Console production bundles build with TypeScript checks, and the Console embed matches its source build. The expanded local CI pipeline (make ci), including platform tests (coverage 76.3%), FIPS 140-3 module verification and test rerun (make test-fips), and clean-room containerized onboarding qualification across Ubuntu, Debian, Fedora, and Arch Linux, passed end to end. Containerized qualification also verified contributor setup, runtime release smoke, and the real 3-Operator deployment lifecycle.

Compatibility

The embedded Operator capability default changes from data,inference to data. Existing workflows that require embedded inference must opt in with ztd gw start --capabilities data,inference.

The protocol adds optional evaluation_run_id and evaluation_assignment_id fields to GovernanceEnvelope, plus typed deliberation and conformance evidence fields. These are additive protobuf schema changes. Mixed-version Gateway/Operator operation was not exercised during this documentation and build preparation. The correlation fields provide display context and do not grant authorization.

Tests

Command or check Result
make version-sync-check PASS; 16 declarations match v1.4.1.
make explorer-embed PASS; refreshed production assets for v1.4.1.
make build PASS; Linux amd64 binary and both frontend embeds.
./ztd version --json PASS; reports v1.4.1.
make console-embed-check PASS.
make website-test PASS; 143 passed, 12 PowerShell tests skipped because pwsh is unavailable.
make website-build PASS; generated homepage, README projection, and v1.4.1 release-note fragment.
scripts/release-preflight.sh --event workflow_dispatch --ref refs/heads/draft/v1.4.1 --publish false PASS; local branch preflight only.
Runtime release-smoke PASS; verified in containerized onboarding lifecycle qualification.
Linux FIPS qualification (make test-fips) PASS; FIPS 140-3 approved mode verified, unit and integration suites clean.
Clean-room onboarding matrix (make test-onboarding-docker) PASS; Ubuntu 24.04, Debian 12, Fedora 42, Arch Linux.
Containerized lifecycle gate PASS; build-only, contributor, release-smoke, operator-deploy on Ubuntu 24.04.
Aggregate test suites (make ci) PASS; full expanded local gate passed end to end.
Full documentation audit Skipped; targeted docs updated for v1.4.1 and build prerequisites.

Documentation

The changelog and documentation catalog link to these notes. Current architecture and startup guides describe the configurable embedded Operator, its data default, and capability ownership. Release version headers, npm manifests and lockfiles, the README badge, and the website hero are synchronized.

Compliance Evidence

No v1.4.1 compliance evidence bundle was generated; preparation was skipped.

Deferred

  • Release owner review, commit, PR creation and merge, rehearsal on merged main, tagging, and publication.
Assets 25
Loading