Skip to content

release: 0.9.1 — the quickstart points at the loop whose guard refuses what it cannot read - #28

Merged
itswl merged 1 commit into
mainfrom
quickstart-0-9-1
Oct 27, 2026
Merged

itswl merged 1 commit into
mainfrom
quickstart-0-9-1

Conversation

@itswl

@itswl itswl commented Oct 27, 2026

Copy link
Copy Markdown
Owner

The quickstart's six image lines move from 0.9.0 to 0.9.1, pinned by digest as docs/releasing.md says. The digests are the OCI index digests GHCR serves for the 0.9.1 tags, read anonymously after the release run for the tag finished green on every job; :latest carries the same four.

Nothing in 0.9.1 is something this file depends on, so its comment keeps saying it needs 0.8.0 or newer and points at the newest. No compose key was added since 0.9.0.

Run the way a stranger does before this was opened, from an empty directory holding only the compose file and scripts/demo.sh: pulled by digest, the three boards answered 200 within seconds, and the demo ran all nine steps (routes ai 2, reuse 1, recovery 1; the card press executed both observations; the recovery verified the work). demo exit=0; down -v removed the containers, the volumes and the network.

Read back from the running investigator image: curl … | sh is refused by the unseen-code guard under both postures; rm /data/results/x.json is refused; aws logs start-query is allowed in the readonly posture; a 429 is the rate limited kind the failure streak counts.

Rollback: re-pin these lines to the 0.9.0 digests; nothing persisted changes shape.

Gate: STACK GATE GREEN locally; CI read back before merging.

…s what it cannot read

The six image lines move from 0.9.0 to 0.9.1, pinned by the OCI index digests GHCR serves for the tags, read anonymously after the release run for the tag finished green on every job; :latest carries the same four. Nothing in 0.9.1 is something this file depends on, so the comment keeps saying it needs 0.8.0 or newer and points at the newest. No compose key was added since 0.9.0.

Run the way a stranger does, from an empty directory: pulled by digest, boards up, the demo's nine steps with the press executed and demo exit 0, down -v. Read back from the running investigator image: curl | sh refused under both postures, rm in results/ refused, aws logs start-query allowed readonly, a 429 counted as the rate-limited kind. Rollback: re-pin to the 0.9.0 digests; nothing persisted changes shape.
@itswl
itswl merged commit da3bc5a into main Oct 27, 2026
6 checks passed
@itswl
itswl deleted the quickstart-0-9-1 branch October 27, 2026 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant