Wydania
Co się zmieniło i kiedy.
Wydania są wersjonowane, podpisane i opatrzone zestawieniem komponentów oprogramowania — bez cichych zmian, bez nieujawnionych poprawek. Ta strona dokumentuje zawartość każdej wersji, począwszy od pierwszego publicznego wydania.
-
v26.8.0
First public release
One self-hosted Go binary to run and govern the AI agents you already use — durable work items with fenced leases, four deny-closed enforcement points, a read/write access map with permitted-vs-observed drift, and a hash-chained, signed audit ledger.
Zobacz wydanie na GitHubieDodane- Work plane: durable work items, fenced leases (acquire, renew, release, take over, revoke), launch-for-work and A2A delegation to authorized peers with durable receipts; messages with acknowledgements scoped to an orchestration workflow.
- Governance: Cedar authorization (RBAC + deny-overlay + scoped grants), four deny-closed enforcement points — the Claude Code PreToolUse/PostToolUse hook, an inline /v1/messages inference proxy, an MCP tools/call gate and an A2A delegation gate — two-person approvals, break-glass with dual control and an estate kill-switch.
- Evidence: append-only, hash-chained audit ledger with Ed25519-signed checkpoints; exports to CEF, LEEF, syslog, OTLP and OCSF; push to Splunk HEC, Microsoft Sentinel, Datadog, New Relic and HMAC webhooks; 26 compliance framework catalogs.
- Integrations: 30 modules and 158 integrations — Claude Code at the hook, Codex and Grok Build as first-class command surfaces, gemini-cli, Cursor, opencode, goose, cline, OpenHands, OpenClaw and Hermes as connectors, each stating what it can enforce versus only observe.
- Modules named for the roadmap, all in the community binary with no license check: the MCP catalog and admission (approved agents, MCP servers, skills and templates, MCP admission policies) with the MCP introspection source and the MCP tools/call gate; FinOps budgets that deny or throttle spend, live in the default binary with no provisioning; compliance evidence mapping over 26 framework catalogs with sealed, exportable evidence.
- Distribution: signed archives for linux/darwin (amd64/arm64, FIPS builds alongside), .deb/.rpm/.apk packages with a hardened systemd unit, multi-arch container images on Docker Hub and GHCR (with -fips and -stig variants), a Homebrew cask and a one-command verified installer.
Bezpieczeństwo- The checksums manifest and the container image are cosign-signed (keyless); archives carry SPDX and CycloneDX SBOM attestations plus OpenVEX statements, and the set carries SLSA build provenance; scripts/verify-release.sh verifies what it recognizes and says what it skipped, offline if you prefer.
- No mandatory telemetry and no control-plane egress by default; license validation is offline; the one vendor call is olivares upgrade, and --endpoint points it at your own mirror.
Bądź na bieżąco
Obserwuj repozytorium na GitHubie lub subskrybuj kanał RSS, aby otrzymywać powiadomienia o każdym nowym wydaniu.
Każde wydanie jest weryfikowalne
Podpisane pliki binarne, atestacje SLSA i SBOM towarzyszą każdemu publicznemu wydaniu — zweryfikuj pochodzenie i integralność każdego artefaktu bez polegania na naszym słowie.