Releases
Every Korvun release ships signed binaries for six platforms (Linux, macOS, Windows × x86-64, ARM64) plus the desktop apps: each artifact is covered by a cosign-signed checksum manifest and an SBOM. How to download and verify is in the install guide.
All releases live on GitHub: github.com/Sebastian197/korvun/releases
The story so far
| Release | What it brought |
|---|---|
| v0.14.0 | Current release — the Beta (minor) — the ledger and the verifiable receipts: the fourth stage of the Execution Trust Layer. Every terminal action outcome — denied, shadowed, succeeded or failed — leaves a canonical receipt signed with Ed25519 on an append-only hash chain, born in the SAME transaction as the outcome (an unreceipted effect cannot exist); raw results never touch the disk — digests only. The operator re-judges the book offline with seven named checks: korvun receipt verify, korvun ledger check (a forged outcome caught in triplicate, a deleted receipt denounced by its hole with its position), and korvun receipt rotate-key — each era of the chain verifies with the key of its era. The limit is confessed in every public line: tamper-evident, never "immutable", because the operator controls storage and keys. Automatic crash-proof v4→v6 migrations; receipts exempt from the retention prune; ~1.25 ms per governed action under the 5 ms ceiling. Accepted through the forgery-hunt ceremony on the director's real profile. |
| v0.13.0 | The Beta (minor) — effects and per-action policy: the third stage of the Execution Trust Layer. Every operation carries a declared class on a consequence ladder with a total order (unknown ranks above critical — fail-closed); effect ceilings wake as attenuation's tenth dimension, judged by the same oracle-checked validator at the store, the CLI (--effect-ceiling) and the gate; every decision pins the exact law that took it (governance + effect registry, versioned); and under bounded authority the irreversible demands a human yes — dying with the honest approval_unavailable until the approval workflow ships. Receipts untouched by construction; automatic crash-proof v2→v4 migrations; the exterior byte-for-byte. Accepted through the ladder ceremony on the director's real profile. |
| v0.12.0 | The Beta (minor) — identity, intent and authority: the second stage of the Execution Trust Layer. Every recorded action knows WHO asked (a principal born from authenticated provenance — a forged sender can never mint the operator), under WHICH human intention and with HOW MUCH authority — which can only shrink: the attenuation wall (oracle-judged, property-tested, fuzzed in the permanent gate) rejects any widening delegation naming the dimension, and governs the operator too. First operator tool: korvun intent / korvun grant, every act leaving an identified receipt — refusals included. Zero new config; automatic crash-proof v1→v2 store migration; receipts stay byte-compatible. Accepted through the operator's ceremony on the director's real profile. |
| v0.11.0 | The Beta (minor) — the Action Kernel: the first stage of the Execution Trust Layer. Every tool action is born as a canonical envelope with a deterministic digest, gets an explainable decision recorded BEFORE any effect (shadow never executes — now with a receipt; hallucinated tools are denied with their rule; an unrecordable attempt fails closed) and leaves a durable, capped, self-managing record — with ZERO experience change, zero new config and one machine-enforced path to execution. Full toll ~1ms per call (ceiling 5ms); parsers fuzzed from birth. Approved by the director's manual pass: identical chat plus a real customs receipt read from his own profile. |
| v0.10.0 | The Beta (minor) — the honest desktop, and the new face. The chat never lies: protocol JSON can never reach a channel, the wait names who is actually thinking, and a dead request says so on screen with a retry at hand (a 60-second notice warns but never cuts on its own). The desktop grows its missing rooms: brain selection on New chat, a write-only Secrets panel over the OS keychain, an onboarding that speaks OpenAI-compatible and validates the chosen model, mouse deletion for canvas cables, and a model panel that blocks corruption shapes before Apply. Plus the A1 governed-K identity across the website, README, app icon and CLI banner — and a real routing defect (a masked fatal close code) found and fixed by the deflake work. Gated end to end by the Sixth Law and the director's bash: zero use-breakers. |
| v0.9.2 | The Beta (patch) — the four use-breaking findings of the exhaustive UX audit, fixed and hand-verified on the packaged build: canvas cables can be disconnected, a provider change clears the orphan warmup, the reload trail is logged and its cutover contract pinned, and model health reaches the UI (builder badge + chat warning). The first release under the sixth house law: design-first, and a manual pass over the packaged build gates every release. |
| v0.9.1 | The Beta (patch) — seven desktop fixes from the first field audit of the packaged app: the Builder loses its embedded token gate, learns the openai-compatible provider truthfully, desktop configs always carry the admin block, the canvas answers (model-drop hint, panel close paths), the desktop logs to a file, and the webhook channel gains its wizard breadcrumb. |
| v0.9.0 | The Beta — the universal model gateway: any OpenAI-compatible endpoint, cloud or local, becomes a first-class model by config alone — same policy engine, same declared-locality privacy, same governed tools (native tool calling included), with quota told apart from rate limits, redirects refused, and the API key never surfacing. Full changes are recorded in the GitHub release notes. |
| v0.8.0 | Governed memory closes the last beta piece: bounded notes through the governed memory_note tool, deliberate /recall of a session's tail, /notes for the operator. Full changes are recorded in the GitHub release notes. |
| v0.7.0 | The operator console + governed tools & skills — the Chat tab (takeover, sessions, direct chat), tri-state tool grants with shadow rehearsal, the network shield, markdown skills, native tool calling with an honest fallback. |
| v0.6.0 | The visual builder canvas — drag channels, brains, and models from a palette, validator-checked cables, the privacy exclusion drawn as a gray dashed cable, persona per brain, hot apply. |
| v0.5.0 | The generic webhook channel — POST JSON in, replies out to your URL; fail-closed Bearer auth, conversation identity, honest 503 on saturation. |
| v0.4.0 | Korvun Desktop — the gateway behind a native window: first-run onboarding, secrets in the OS keychain, the builder embedded. |
| v0.3.0 | The Discord channel — Gateway inbound with resume/reconnect, REST outbound, mentions blocked by default, a complete anti-loop family. |
| v0.2.0 | Resilience + the CLI — boot warmup for local models, generous per-attempt timeouts, retry with differentiated fallback; serve, config check, status. |
Release notes are published on each GitHub release — this page stays a map, not a mirror.