Releases

Shared mid-layer VTA services — trust-context storage, the sealed-transfer seal helper, and the sealed-bootstrap nonce store

VTA backup/restore subsystem — encrypted full-state export/import, the sealed backup-bundle store, and its TTL sweeper

VTA external accounts — the VTA as the key authority for cloud and third-party accounts: account store, auth-model drivers, downscoped credential issuance

CSAF 2.0 / 2.1 advisory CRUD server with HATEOAS JSON API and HTML UI (TLS 1.3, HTTP/1.1 + HTTP/2 + HTTP/3)

Fast, lightweight PDF and document parsing with spatial text extraction

VTA keyspace-name registry — the shared storage vocabulary for the VTA subsystem crates

VTA key management — master-seed storage, BIP-32 key derivation, key wrapping, and the seed-store backend selection

Structured audit logging for the VTA — the `audit!` tracing macro plus the audit-keyspace persistence helpers

Safe Rust wrapper around PDFium for liteparse

Raw FFI bindings to PDFium for liteparse

VTA configuration types — the `AppConfig` TOML shape and its sub-configs, composing the vti-common and vti-secrets config types

Pluggable secret-store backends + integration onboarding flow for Verifiable Trust Infrastructure

The DTG-credential chain verifier for data rooms

Headless model thumbnails rendered entirely in Rust

Shared CLI command handlers and rendering helpers for VTA CLIs

CSAF storage, validation, sidecar generation, import/export

Client SDK for Verifiable Trust Communities (VTC) — auth, members, join, removal, policies

A pure rust implementation of the UEFI DXE Core.

A layer host for ikigai: independent shared spaces between participants (`urn:layer:{layer}`), each defined by configuration with an access model, closed SHACL admission shapes, an egress context, exact per-layer capabilities and its own gapless feed; collaborations are manifests (`urn:collab:{name}`) from which the door's enrollment is generated. Two access models: an append-only channel, and a tuplespace whose take is an atomic claim with a receipt.

Common internal library for Patina

Event sourcing and CQRS toolkit with SQL persistence, projections, and subscriptions

Fjall embedded key-value store implementation for evento event sourcing library

SQL migrations for evento event sourcing library.

SQL database implementations for evento event sourcing library.

Data-room storage, wire types, and authorization — the parts of a room that are not a service

Shared server-side infrastructure for VTA and VTC services

Core types and traits for evento event sourcing library.

Heddle's CLI verb catalog, schemas, help, and recovery contract.

SDK for Verifiable Trust Agents operating in Verifiable Trust Communities

OpenLatch runtime enforcement node — the capture-and-enforce adapter that evaluates every covered action against a coding agent's Autonomy Zone before it runs