Releases

SPIFFE-style identity + per-namespace ACL for Mnemo agents (v0.4.0 P0-2). Speaks the lifecycle-attestation envelope Cloudflare Mesh expects.

coreutils ~ GNU coreutils (updated); implemented as universal (cross-platform) utils, written in Rust

caixa-tatara — typed renderer that emits a tatara Process CR with Intent::Aplicacao + Lifetime::Ephemeral from an :kind Aplicacao caixa. Bridges caixa-helm's chart output to tatara-reconciler's ephemeral envelope.

Multikey self-describing cryptographic key data

Hardware Abstraction Layer for HiSilicon WS63 (RISC-V RV32IMFC_Zicsr)

Fast, lightweight PDF and document parsing with spatial text extraction

Safe Rust wrapper around PDFium for liteparse

Raw FFI bindings to PDFium for liteparse

Arena-enclosed Lisp virtual environments — bumpalo-backed, sealable, serializable compilers you can author in Lisp and deploy as typed artifacts

Runs one declared ExportSpec from an ephemeral Process — reads the artifact, ships through the chosen VectorChannel, emits a typed export receipt

Reconciler for EphemeralPool + EphemeralAllocation CRDs — population manager that maintains warm pools of pre-attested ephemeral Processes and allocates them to requestors (GitHub PRs, CI runs, manual operators).

GitHub webhook receiver — translates org-wide PR + push + branch events into EphemeralAllocation CRs the pool reconciler then routes to a matching EphemeralPool.

The unified FluxCD-adjacent Kubernetes controller — reconciles Process CRDs as Unix processes, composes tatara three-pillar attestation

tatara IS PID 1 — typed service supervisor authored in tatara-lisp. Drop-in replacement for systemd/s6/openrc inside a tatara-os Linux guest.

NixOS-equivalent — typed SystemConfig deriving TataraDomain, activation synthesizer, Linux-kernel + bootloader + services + users + filesystems, composed via tatara-nix module fixpoint

Package set abstraction + nixpkgs bridge + tend-driven tatara-lisp mirror — the tatara equivalent of nixpkgs

Optimized in-memory Lisp interpreter for tatara — evaluates Sexp to Value, produces typed Derivations, composes with tatara-nix realizers

Nix's academic essence, re-expressed in Rust + Lisp. Derivation, StorePath, Module, Overlay, Flake — all typed, all Lisp-authorable via #[derive(TataraDomain)], all attestable via BLAKE3.

Lattice algebra over tatara classification — meet/join/leq, replaces qualities_match

Process CRD — K8s clusters, workloads, migrations, tests as Unix processes in the tatara convergence lattice

caixa-tatara — typed renderer that emits a tatara Process CR with Intent::Aplicacao + Lifetime::Ephemeral from an :kind Aplicacao caixa. Bridges caixa-helm's chart output to tatara-reconciler's ephemeral envelope.

Multisig self-describing multicodec implementation for digital signatures

Policy library for working with protobuf-defined policy objects

Python bindings for sz-orm-core (PyO3): Model, QueryBuilder, Pool, Transaction

Arena-enclosed Lisp virtual environments — bumpalo-backed, sealable, serializable compilers you can author in Lisp and deploy as typed artifacts

Runs one declared ExportSpec from an ephemeral Process — reads the artifact, ships through the chosen VectorChannel, emits a typed export receipt

GitHub webhook receiver — translates org-wide PR + push + branch events into EphemeralAllocation CRs the pool reconciler then routes to a matching EphemeralPool.

Reconciler for EphemeralPool + EphemeralAllocation CRDs — population manager that maintains warm pools of pre-attested ephemeral Processes and allocates them to requestors (GitHub PRs, CI runs, manual operators).

The unified FluxCD-adjacent Kubernetes controller — reconciles Process CRDs as Unix processes, composes tatara three-pillar attestation

tatara IS PID 1 — typed service supervisor authored in tatara-lisp. Drop-in replacement for systemd/s6/openrc inside a tatara-os Linux guest.