Saltar para o conteúdo

Versões

O que mudou e quando.

As versões são numeradas, assinadas e acompanhadas de um inventário de componentes de software — sem alterações silenciosas, sem correções não divulgadas. Esta página documenta o que é publicado em cada versão, a começar pela primeira versão pública.

  1. v26.8.0

    First public release

    One self-hosted Go binary to run and govern the AI agents you already use — durable work items with fenced leases, four deny-closed enforcement points, a read/write access map with permitted-vs-observed drift, and a hash-chained, signed audit ledger.

    Adicionado
    • Work plane: durable work items, fenced leases (acquire, renew, release, take over, revoke), launch-for-work and A2A delegation to authorized peers with durable receipts; messages with acknowledgements scoped to an orchestration workflow.
    • Governance: Cedar authorization (RBAC + deny-overlay + scoped grants), four deny-closed enforcement points — the Claude Code PreToolUse/PostToolUse hook, an inline /v1/messages inference proxy, an MCP tools/call gate and an A2A delegation gate — two-person approvals, break-glass with dual control and an estate kill-switch.
    • Evidence: append-only, hash-chained audit ledger with Ed25519-signed checkpoints; exports to CEF, LEEF, syslog, OTLP and OCSF; push to Splunk HEC, Microsoft Sentinel, Datadog, New Relic and HMAC webhooks; 26 compliance framework catalogs.
    • Integrations: 30 modules and 158 integrations — Claude Code at the hook, Codex and Grok Build as first-class command surfaces, gemini-cli, Cursor, opencode, goose, cline, OpenHands, OpenClaw and Hermes as connectors, each stating what it can enforce versus only observe.
    • Modules named for the roadmap, all in the community binary with no license check: the MCP catalog and admission (approved agents, MCP servers, skills and templates, MCP admission policies) with the MCP introspection source and the MCP tools/call gate; FinOps budgets that deny or throttle spend, live in the default binary with no provisioning; compliance evidence mapping over 26 framework catalogs with sealed, exportable evidence.
    • Distribution: signed archives for linux/darwin (amd64/arm64, FIPS builds alongside), .deb/.rpm/.apk packages with a hardened systemd unit, multi-arch container images on Docker Hub and GHCR (with -fips and -stig variants), a Homebrew cask and a one-command verified installer.
    Segurança
    • The checksums manifest and the container image are cosign-signed (keyless); archives carry SPDX and CycloneDX SBOM attestations plus OpenVEX statements, and the set carries SLSA build provenance; scripts/verify-release.sh verifies what it recognizes and says what it skipped, offline if you prefer.
    • No mandatory telemetry and no control-plane egress by default; license validation is offline; the one vendor call is olivares upgrade, and --endpoint points it at your own mirror.
    Ver versão no GitHub

Mantenha-se informado

Acompanhe o repositório no GitHub ou subscreva o feed RSS para ser notificado de cada nova versão.

Seguir no GitHub Feed RSS

Cada versão é verificável

Binários assinados, atestações SLSA e SBOM acompanham cada versão pública — verifique a proveniência e a integridade de cada artefacto sem confiar em nós.

Como as versões são verificadas Centro de confiança