<div align="center">
<p><i>All glory and honor to God יהוה in the name of Yeshua the Messiah (Jesus Christ).</i></p>
</div>
<p align="center">
<img src="https://raw.githubusercontent.com/Rullst/Rullst/v12.3.0/Rullst.png" alt="Rullst Logo" width="300">
</p>
<h1 align="center">🌐🦀📜 Rullst 📜🦀🌐</h1>
<h3 align="center"><i>Intelligent, Security-Conscious, and Designed for Effortless Productivity — Because With Rullst, We Rule!</i></h3>
<p align="center">An open-source, Axum-based framework suite.<br>Build beyond the endpoint—with code you can inspect and boundaries you control.</p>
<p align="center">
<a href="https://crates.io/crates/rullst"><img src="https://img.shields.io/crates/v/rullst?style=for-the-badge&color=10b981&logo=rust" alt="Crates.io"></a>
<a href="https://crates.io/crates/rullst"><img src="https://img.shields.io/crates/d/rullst?style=for-the-badge&color=blue" alt="Crates.io Downloads"></a>
<a href="https://docs.rs/rullst/12.3.0"><img src="https://img.shields.io/docsrs/rullst?style=for-the-badge&logo=docsdotrs" alt="Docs.rs"></a>
<a href="https://github.com/Rullst/Rullst/actions/workflows/ci.yml?query=branch%3Av12"><img src="https://img.shields.io/github/actions/workflow/status/Rullst/Rullst/ci.yml?branch=v12&style=for-the-badge&label=Stable%20Build" alt="Stable Rust CI"></a>
<img src="https://img.shields.io/badge/License-MIT-yellow.svg?style=for-the-badge" alt="License: MIT">
</p>
<p align="center">
<a href="https://codecov.io/gh/Rullst/Rullst"><img src="https://codecov.io/github/Rullst/Rullst/branch/v12/graph/badge.svg" alt="Whole-repository coverage"></a>
<a href="https://scorecard.dev/viewer/?uri=github.com/Rullst/Rullst"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fapi.scorecard.dev%2Fprojects%2Fgithub.com%2FRullst%2FRullst&query=%24.score&label=OpenSSF%20Scorecard" alt="OpenSSF Scorecard"></a>
<a href="https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/compatibility-policy.md"><img src="https://img.shields.io/badge/MSRV-1.96.0-f74c00?logo=rust" alt="MSRV 1.96.0"></a>
</p>
<p align="center">
<a href="https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/start-here.md"><strong>Start building</strong></a> ·
<a href="https://academy.rullst.win/"><strong>Learn at Rullst Academy</strong></a> ·
<a href="#live-examples"><strong>Try live examples</strong></a> ·
<a href="https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/SUMMARY.md"><strong>Documentation</strong></a> ·
<a href="https://github.com/Rullst/Rullst/blob/v12.3.0/CONTRIBUTING.md"><strong>Contribute</strong></a>
</p>
> **Rullst v12.** The crates.io badge above shows the latest published version.
> `v12` receives stable maintenance; next-major work lives on `main`. The legacy
> `v5` line is no longer maintained. [Release record](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/v12.md)
> · [Compatibility policy](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/compatibility-policy.md).
**Rullst 12.3.0** deprecates the APIs that 13.0 removes, fixes fresh builds
of the `nfse` feature, removes WAF and RASP false positives on ordinary text
and lets `cargo rullst audit` use the workspace lockfile. Public APIs and Rust
1.96.0 compatibility are preserved; builds that deny warnings may need an
`#[allow(deprecated)]`. Read the
[12.3 upgrade notes](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/migration-v12-1.md#upgrading-to-123)
before deploying. See the
[release record](https://github.com/Rullst/Rullst/blob/v12/docs/src/v12.md)
for publication evidence and the
[release review](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/v12-3-0-review.md)
for verification boundaries.
Release artifacts include a portable signed provenance bundle. Verify the
artifact, publisher, release tag and commit using the
[verification guide](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/openssf-scorecard.md#portable-release-attestations).
The public OpenSSF score is a repository assessment, not a security certification.
## 🎓 Rullst Academy — built with Rullst to teach Rullst
[Rullst Academy](https://academy.rullst.win/) is a free learning platform built
with the Rullst framework. Learn Rust, Rullst and other technologies through
short lessons and practical projects, with learning paths covering Git/GitHub,
web development, databases and more. Explore the Academy in Portuguese, English
or Spanish.
**[Start learning at Rullst Academy ↗](https://academy.rullst.win/)**
## 🚀 Start building
Generate a project, choose a blueprint and database, then start the development loop:
```bash
cargo install cargo-rullst --version '^12' --locked
cargo rullst --version
cargo rullst new my_app
cd my_app
cargo rullst dev
```
Choose **Blank / API, Blog, SaaS, LMS, Portfolio or ERP**. Generated projects
contain ordinary Rust you can inspect and change.
The selector installs the latest published stable v12 CLI. To reproduce a
particular release, use its full version, such as `--version 12.3.0`, after
confirming its availability on [crates.io](https://crates.io/crates/cargo-rullst).
[Installation and prerequisites](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/1-getting-started.md)
· [Zero-to-Hero tutorial](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/tutorials/01-hello-world.md)
· [Build a JSON REST API](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/tutorials/rest-api-quickstart.md)
· [CLI reference](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/cli_reference.md)
<a id="live-examples"></a>
## 🧪 Try the live examples
Explore applications hosted on Azure Container Apps, with their code and
deployment recipes in [Rullst/examples](https://github.com/Rullst/examples):
| Application | Explore |
| :--- | :--- |
| 🌐 **Showcase** — blog, SSR and selected integration demonstrations | [Open Showcase ↗](https://rullst-showcase.redpond-24d9228d.eastus.azurecontainerapps.io/) |
| 🎓 **LMS** — course catalog and learning-platform example | [Open LMS ↗](https://rullst-lms.redpond-24d9228d.eastus.azurecontainerapps.io/) |
| 💼 **Portfolio** — projects, skills and experience presentation | [Open Portfolio ↗](https://rullst-portfolio.redpond-24d9228d.eastus.azurecontainerapps.io/) |
| 🛒 **SaaS production** — real purchases with the founding-member certificate offer | [Open SaaS ↗](https://saas.rullst.win/) |
> **The SaaS production checkout charges real money.** The founding-member
> certificate is part of the published customer offer; review its terms and
> availability on the site before purchasing.
> **The first visit may take longer.** These Azure Container Apps demos may
> scale down to zero while idle. Your request can trigger a container startup
> (a *cold start*); please allow it to finish and retry if necessary. That initial
> wait includes hosting startup time and is not a Rullst request-performance
> benchmark. [How Azure scaling works](https://learn.microsoft.com/en-us/azure/container-apps/scale-app).
These are independently maintained demo snapshots and may lag the stable release.
Showcase payment fixtures are **not live checkout**. Deployment availability,
native downloads and provider approval are separate from framework test evidence;
use test data, not sensitive information, in public test environments.
## ✨ What you can build on
Rullst coordinates application foundations in one versioned Rust workspace:
- **Product-shaped starting points:** six blueprints, inspectable generators,
supervised rebuild/restart, a terminal dashboard and assisted upgrades.
- **Data and background work:** Active Record, transactions and an outbox for
supported relational databases, plus explicitly scoped specialized stores
and durable local messaging.
- **Identity and security:** sessions, Argon2id, passkey and OAuth2/OIDC helpers,
ownership checks, CSRF, secure headers and bounded request defenses.
- **AI and service integrations:** local/cloud AI clients, tenant-aware RAG,
transactional email and provider-specific payment/webhook adapters.
- **Developer visibility:** Studio for local runtime telemetry and Nexus for
explicitly authorized registered-model administration.
- **A web-first foundation:** SSR with HTMX, JSON APIs and generated Omni/Tauri
shells. Native toolchains, signing and device validation remain separate steps.
**Explicit boundaries are part of the design.** Database capabilities are not
interchangeable; security middleware does not replace application authorization;
live fiscal authorization and remote message-broker adapters remain roadmap work.
Choose the features you need and review their
[documented capabilities](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/capability-ledger.md).
Rullst builds on **Axum, Tokio, Tower and SQLx**, with standard routers and pools
available at documented integration points. You can adopt it incrementally.
[Why Rullst?](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/why-Rullst.md)
· [Axum & SQLx escape hatches](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/axum-sqlx-migration.md)
· [Omni's web-first contract](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/tutorials/43-omni-web-first.md)
<details>
<summary><strong>See the CLI and blueprint gallery</strong></summary>
<p>Recorded repository previews, not live release evidence. The current CLI can differ in menu options, labels and layout.</p>
<h2 align="center">CLI · From idea to inspectable Rust</h2>
<p align="center">
<img src="https://raw.githubusercontent.com/Rullst/Rullst/v12.3.0/images/gifs/gif.gif" alt="Rullst CLI Initiating LMS Blueprint" width="80%"/>
</p>
<h2 align="center">Click to Watch: How to build a SaaS Blueprint with Rullst </h2>
<p align="center">
<a href="https://www.youtube.com/watch?v=nDXLeNM327g">
<img src="https://img.youtube.com/vi/nDXLeNM327g/hqdefault.jpg" alt="How to build a SaaS with Rullst" width="60%" />
</a>
</p>
<table align="center" width="100%">
<tr>
<th align="center" width="50%"><h2>SaaS Blueprint</h2></th>
<th align="center" width="50%"><h2>LMS Blueprint</h2></th>
</tr>
<tr>
<td align="center">
<img src="https://raw.githubusercontent.com/Rullst/Rullst/v12.3.0/images/gifs/gif1.gif" alt="SaaS Blueprint" width="100%" />
</td>
<td align="center">
<img src="https://raw.githubusercontent.com/Rullst/Rullst/v12.3.0/images/gifs/gif2.gif" alt="LMS Blueprint" width="100%" />
</td>
</tr>
</table>
</details>
<details>
<summary><strong>Open the development dashboard preview</strong></summary>
<p align="center">
<img src="https://raw.githubusercontent.com/Rullst/Rullst/v12.3.0/images/cargo-rullst-dash.png" alt="Recorded Rullst terminal dashboard with project information, logs and controls" width="100%"/>
</p>
Repository screenshot, not live telemetry. Layout and available controls can
differ by version. [Development workflow](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/tutorials/51-authenticated-hot-reload.md).
</details>
## 🔄 Upgrade with a preview
From an existing application's root:
```bash
cargo rullst upgrade --dry-run
cargo rullst upgrade
```
The CLI coordinates dependency updates, backs up controlled files and runs
compiler checks. Review the plan and application behavior; it does not migrate
production data or guarantee compatibility with an unreleased major version.
[Assisted upgrade tutorial](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/tutorials/36-assisted-framework-upgrades.md)
· [v5 → v12 migration guide](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/migration-v5-to-v12.md)
<a id="the-rullst-ecosystem"></a>
## 🏛️ Explore the ecosystem
Sixteen publishable crates share one release train. Select what your application
needs; detailed feature and provider boundaries live in the
[specification](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/spec.md).
<details>
<summary><strong>Browse the crate directory</strong></summary>
| Crate | Focus |
| :--- | :--- |
| [rullst](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst) | Public framework facade and feature selection |
| [rullst-core](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-core) | HTTP runtime, routing, lifecycle and telemetry |
| [rullst-orm](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-orm) | Relational models, transactions and capability-specific persistence |
| [rullst-auth](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-auth) | Passwords, sessions, passkeys and authorization helpers |
| [rullst-security](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-security) | Defense-in-depth middleware, guards and audit helpers |
| [rullst-connect](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-connect) | OAuth2/OIDC identity integrations |
| [rullst-ai](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-ai) | Guarded local/cloud clients and tenant-aware retrieval |
| [rullst-capital](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-capital) | Payment/payout adapters, webhooks and bounded billing helpers |
| [rullst-mail](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-mail) | Transactional email and delivery controls |
| [rullst-messaging](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-messaging) | Broker-neutral contracts and durable local messaging |
| [rullst-studio](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-studio) | Local developer control room |
| [rullst-nexus](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-nexus) | Registered-model admin with explicit access policy |
| [rullst-iot](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-iot) | Bounded no_std helpers and signed OTA verification, not device integration |
| [rullst-macros](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-macros) | Compile-time HTML and application macros |
| [rullst-orm-macros](https://github.com/Rullst/Rullst/tree/v12.3.0/rullst-orm-macros) | Typed ORM code generation |
| [cargo-rullst](https://github.com/Rullst/Rullst/tree/v12.3.0/cargo-rullst) | Project scaffolding, development and upgrade CLI |
</details>
## ⚡ Performance you can inspect
The [benchmark hub](https://rullst.github.io/Rullst/benches/) publishes eight
Criterion groups backed by nine benchmark binaries. They measure specific
workloads and regressions—not universal speed, application throughput or a
ranking of frameworks. Read the
[methodology](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/tutorials/35-high-performance-benchmarking.md)
alongside the results.
## 🛡️ Verification, with visible scope
Explore the [stable release audit](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/v12-release-audit.md),
[current capability status](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/capability-status.md)
and [quality scorecard](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/quality-scorecard.md).
Badges and test results are evidence for their stated scope, not a security
certification of every application built with the framework.
<details>
<summary><strong>🛡️ Open the full v12 verification dashboard (38 workflows)</strong></summary>
<h3 align="center">🛡️ v12 Main Verification Dashboard</h3>
<p align="center">
Rullst applies layered compile, test, architecture, portability, and security checks.<br/>
Branch-specific badges are pinned to <code>v12</code>; they report the latest matching run, not a certification or deployment guarantee.
</p>
| Continuous or change-aware gate | v12 maintenance status | Actual scope |
| :--- | :---: | :--- |
| **Rust CI** | [](https://github.com/Rullst/Rullst/actions/workflows/ci.yml?query=branch%3Av12) | Format, all-target/all-feature Clippy, tests on Linux/macOS/Windows, Cargo-aware doctests sourced from all 52 public tutorials, strict DB boundaries, feature boundaries, generated-code checks, and MSRV 1.96.0. |
| **Declared MSRV** | [](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/compatibility-policy.md) | Every publishable v12 manifest declares Rust 1.96.0 and CI runs an explicit workspace all-feature check with that toolchain. |
| **GitHub Actions lint** | [](https://github.com/Rullst/Rullst/actions/workflows/workflow-lint.yml?query=branch%3Av12) | Validates workflow syntax, expressions, embedded shell, and full-SHA third-party Action pins. |
| **Documentation** | [](https://github.com/Rullst/Rullst/actions/workflows/documentation.yml?query=branch%3Av12) | Builds the mdBook and rejects broken local links and anchors; scheduled/manual runs also preserve an informational external-link report. |
| **End-to-end smoke** | [](https://github.com/Rullst/Rullst/actions/workflows/e2e-smoke.yml?query=branch%3Av12) | Boots the release blog example and verifies HTTP, security headers, form flow, and SQLite persistence. |
| **Codecov — whole repository** | [](https://codecov.io/gh/Rullst/Rullst) | The badge reports the current branch aggregate. The [stable-source LLVM run](https://github.com/Rullst/Rullst/actions/runs/34895523751) at `eb11f892` measured **90.3220%** (79,813/88,365 lines) before Codecov upload. The enforced repository floor is **≥90%** with zero tolerance. |
| **Codecov — framework libraries** | [](https://codecov.io/gh/Rullst/Rullst) | Runtime libraries are enforced separately at **≥90%**. CLI and proc-macro components stay separately visible; [Coverage CI](https://github.com/Rullst/Rullst/actions/workflows/coverage.yml?query=branch%3Av12) uploads their real LCOV evidence with OIDC. |
| **Cargo Audit** | [](https://github.com/Rullst/Rullst/actions/workflows/audit.yml?query=branch%3Av12) | RustSec advisory scan with only governed, expiring exceptions. |
| **Security exception governance** | [](https://github.com/Rullst/Rullst/actions/workflows/security-audit.yml?query=branch%3Av12) | Cross-checks scanner allowlists against the owner/expiry ledger, then independently reruns Cargo Audit. |
| **Cargo Deny** | [](https://github.com/Rullst/Rullst/actions/workflows/cargo-deny.yml?query=branch%3Av12) | Advisory, license, ban, and source policy. |
| **CodeQL SAST** | [](https://github.com/Rullst/Rullst/actions/workflows/codeql.yml?query=branch%3Av12) | Rust semantic analysis after an all-target/all-feature build. |
| **OpenSSF Scorecard** | [](https://scorecard.dev/viewer/?uri=github.com/Rullst/Rullst) | The badge renders the score from the official public Scorecard JSON report; the pinned [Scorecard workflow](https://github.com/Rullst/Rullst/actions/workflows/scorecards.yml) publishes OIDC-authenticated results on each `main` push and weekly. A score is evidence, not a security certification. [Evidence and improvements](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/openssf-scorecard.md). |
| **Cargo Machete** | [](https://github.com/Rullst/Rullst/actions/workflows/machete.yml?query=branch%3Av12) | Unused direct dependency detection. |
| **SemVer checks** | [](https://github.com/Rullst/Rullst/actions/workflows/semver.yml?query=branch%3Av12) | Supported library APIs are compared with exact latest non-yanked registry baselines; never-published packages and unsupported proc-macro/binary surfaces are reported explicitly. |
| **Zero-panics policy** | [](https://github.com/Rullst/Rullst/actions/workflows/zero-panics.yml?query=branch%3Av12) | Denies panic-family operations in published production targets and generated runtime templates. |
| **Unsafe boundary** | [](https://github.com/Rullst/Rullst/actions/workflows/unsafe-policy.yml?query=branch%3Av12) | Denies new production unsafe code outside the reviewed OS/FFI allowlist. |
| **Secret scanning** | [](https://github.com/Rullst/Rullst/actions/workflows/trufflehog.yml?query=branch%3Av12) | Verified-secret scan across the configured Git history range. |
| **Spellcheck** | [](https://github.com/Rullst/Rullst/actions/workflows/spellcheck.yml?query=branch%3Av12) | Repository-wide typo detection. |
| **Crate architecture policy** | [](https://github.com/Rullst/Rullst/actions/workflows/architecture.yml?query=branch%3Av12) | Compares the real publishable-crate dependency graph with a versioned, reviewed repository policy. |
| **WebAssembly matrix** | [](https://github.com/Rullst/Rullst/actions/workflows/wasm-matrix.yml?query=branch%3Av12) | Compiles Core, the public facade and macros for browser Wasm and WASI Preview 1. |
| **Bare-metal `no_std` matrix** | [](https://github.com/Rullst/Rullst/actions/workflows/no_std-build.yml?query=branch%3Av12) | Builds IoT helpers for Cortex-M and RISC-V targets; this is compile evidence, not hardware testing. |
| **IoT integration** | [](https://github.com/Rullst/Rullst/actions/workflows/iot-integration.yml?query=branch%3Av12) | Host tests, signed OTA invariants, and a Cortex-M build. |
| **IoT crypto containment** | [](https://github.com/Rullst/Rullst/actions/workflows/pqc-compliance.yml?query=branch%3Av12) | Path-aware signed OTA, Vault, advisory, and simulator-boundary checks; no PQC/HSM certification claim. |
| **Omni desktop matrix** | [](https://github.com/Rullst/Rullst/actions/workflows/omni-desktop.yml?query=branch%3Av12) | Generates fresh web shells and checks their Tauri crates on Linux, macOS and Windows; no installer, signing or store claim. |
| **Omni Android compile** | [](https://github.com/Rullst/Rullst/actions/workflows/omni-android.yml?query=branch%3Av12) | Generates a fresh shell and compiles an unsigned Android debug APK; no physical-device, Play testing/signing or store claim. |
| **Omni iOS simulator** | [](https://github.com/Rullst/Rullst/actions/workflows/omni-ios.yml?query=branch%3Av12) | Path-aware fresh scaffold generation and compilation on a macOS iOS simulator target; no device, signing or App Store claim. |
| **PR security evidence** | [](https://github.com/Rullst/Rullst/actions/workflows/ai-sentinel-pr.yml?query=event%3Apull_request) | Pull-request-only bounded IDOR/RBAC heuristics and CycloneDX SBOM artifact. It intentionally has no continuous `main` status. |
Deep or irreversible workflows are intentionally not presented as continuously
green continuous gates:
| Deep evidence | Trigger and enforcement |
| :--- | :--- |
| [Benchmark regression](https://github.com/Rullst/Rullst/actions/workflows/bench.yml) | Weekly, `main` push, or manual; eight published groups backed by nine Criterion benchmark binaries emit non-blocking alerts at a 20% regression. |
| [Property testing](https://github.com/Rullst/Rullst/actions/workflows/proptest.yml) | Weekly/manual release-mode invariant testing with 10,000 configured cases. |
| [TSan and ASan](https://github.com/Rullst/Rullst/actions/workflows/sanitizers.yml) | Daily/manual package matrices on a pinned verifier-only nightly. |
| [Fuzzing](https://github.com/Rullst/Rullst/actions/workflows/fuzzing.yml) / [corpus minimization](https://github.com/Rullst/Rullst/actions/workflows/corpus-sync.yml) | Forty manual libFuzzer jobs; weekly/manual corpus maintenance is informational. |
| [OWASP ZAP](https://github.com/Rullst/Rullst/actions/workflows/dast-zap.yml) | Manual baseline over three release surfaces: generated REST API and complete LMS are blocking with no ignored alerts; the deliberately CDN-backed blog showcase remains an explicitly informational boundary. |
| [Kani](https://github.com/Rullst/Rullst/actions/workflows/kani.yml), [Miri](https://github.com/Rullst/Rullst/actions/workflows/miri.yml), [mutation testing](https://github.com/Rullst/Rullst/actions/workflows/mutants.yml), [cargo-udeps](https://github.com/Rullst/Rullst/actions/workflows/udeps.yml) | Manual or scheduled research signals: selected Kani/Miri scopes are strict, while mutation and unused-dependency findings remain explicitly informational. |
| [GitHub Pages](https://github.com/Rullst/Rullst/actions/workflows/pages.yml) | Deploys current development documentation from `main`; it is not a code-quality gate. |
| [Release and provenance](https://github.com/Rullst/Rullst/actions/workflows/release.yml) | Exact version tags only: full verification, package-all, evidence bundle, checksums, GitHub build-provenance attestation, changelog-derived release notes, and ordered crates.io publication. This does **not** claim a project-wide SLSA level or independent certification. |
Scheduled events use the repository's default branch, so scheduled and
continuous v12 evidence are separate from development `main`. The recommended required-check
profile and the exact scope of all
38 workflow definitions are documented in [WORKFLOWS.md](https://github.com/Rullst/Rullst/blob/v12.3.0/WORKFLOWS.md).
> 📖 **[Read the detailed breakdown of all CI/CD and security workflows](https://github.com/Rullst/Rullst/blob/v12.3.0/WORKFLOWS.md).**
>
> 🧭 **[Capability Status & Vision Decisions](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/capability-ledger.md)** preserves ambitious features that are partial or not implemented, with an explicit recommendation and rationale for each one.
>
> 📋 **[Simple Capability Status](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/capability-status.md)** and the **[per-commit quality scorecard](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/quality-scorecard.md)** keep feature progress separate from SHA-bound engineering evidence.
</details>
## 🤝 Build Rullst with us
Try a blueprint, report a reproducible bug, improve a tutorial or contribute a
focused change with tests. Documentation, accessibility and integration feedback
matter as much as new features.
[Contributing](https://github.com/Rullst/Rullst/blob/v12.3.0/CONTRIBUTING.md)
· [Issues](https://github.com/Rullst/Rullst/issues)
· [Discord](https://discord.com/invite/2ntKFtsSjw)
· [Community links](https://rullst.github.io/Rullst/#community)
· [Our story and philosophy](https://github.com/Rullst/Rullst/blob/v12.3.0/docs/src/philosophy.md)
**What's next?** v12 receives compatible maintenance. The
[v13 roadmap](https://github.com/Rullst/Rullst/blob/main/ROADMAP.md) guides
next-major development; planned capabilities are not shipped features.
[MIT license](https://github.com/Rullst/Rullst/blob/v12.3.0/LICENSE)
· [Report a vulnerability privately](https://github.com/Rullst/Rullst/security/policy)
· [Website privacy notice](https://rullst.github.io/Rullst/#privacy)
<div align="center">
<p><i>All glory and honor to God יהוה in the name of Yeshua the Messiah (Jesus Christ).</i></p>
</div>