Releases

Fully Rust native BladeRF driver

engenho-control-server — serves engenho's control API (spec/engenho-control.openapi.yaml): the local Unix socket with kernel peer credentials, routing every request through the spec's operation catalog to one EngenhoControl implementation.

AWS SDK for Amazon Elastic Compute Cloud

engenho-control-client — talks to a running engenho's control API (spec/engenho-control.openapi.yaml) over its local socket: typed calls per operation, a generic call for the table-driven CLI, and the socket resolution the daemon and `engenho ctl` share.

engenho-control-types — the central types of engenho's non-Kubernetes control plane, DERIVED at build time from spec/engenho-control.openapi.yaml: the schema types, the closed OperationId + CATALOG (authority tier, confirm gate, CLI spelling per operation), per-operation typed requests, and the transport-agnostic EngenhoControl trait every transport serves.

A fast Rust agent harness with a small footprint and opinionated defaults

Static site data generator for CloudCover

AWS API and permission data for CloudCover

One-dependency front door to the Trust Tasks framework: re-exports trust-tasks-rs plus the transport, proof, ceremony and capability crates behind Cargo features.

Terraform source analyzer for CloudCover

Go source analyzer for CloudCover

Pluggable ProofVerifier implementations for the Trust Tasks framework. Backends are gated by Cargo features; ships with an Affinidi Data Integrity backend (EdDSA suites) by default.

HTTPS transport binding for the Trust Tasks framework — typed client + axum-based server with bearer-auth identity, suitable for demos, mockups, and end-to-end testing.

Client-side wire helpers for the capability Trust Task families (governance/capability/*, git-trust/*): document builders, envelope parsing, reply classification. Shared by capability producers (community services) and management UIs so the two cannot drift.

Reference Rust library for the Trust Tasks framework — transport-agnostic, JSON-based descriptions of verifiable work between parties.

k9s-style TUI for AWS Elastic Beanstalk

Enterprise-grade distributed ID generation system

Service for Verifiable Trust Agents operating in Verifiable Trust Communities

MLIR based CPU backend for the Burn framework

CUDA backend for the Burn framework

ROCm HIP backend for the Burn framework

WebVH hosting infrastructure for the VTA — the DID-record store, the HTTP client to a did:webvh hosting server, and its DID-auth handshake

VTA TEE bootstrap — Nitro/SEV-SNP attestation providers, KMS attest/decrypt + storage-key derivation, the anchor MAC, and first-boot DID autogen

Background TTL sweepers for the VTA's core keyspaces — ACL grant expiry, pending-consent expiry, and soft-deleted-vault purge

VTA holder credential vault — storage, query, receive/verify, present, and status refresh for credentials a holder stores on a VTA

API bindings for the Nominal platform

The single business-facing facade for Saddle applications

VTA backup/restore subsystem — encrypted full-state export/import, the sealed backup-bundle store, and its TTL sweeper

VTA policy subsystem — the regorus (Rego) engine, the default policy bundle, consent model, and decision evaluators

VTA persona store — the holder's own identity attributes, the profiles that project over them, the bindings that assign a profile to a persona DID, and the contacts peers disclose