Releases

Nostr VPN's app-facing FIPS EndpointData API

Nostr VPN's reusable FIPS mesh, endpoint, transport, and protocol library

Verified Hashtree blob routes over authenticated TCP/FIPS streams

Capability-gated automation bots on a change-detecting ECS schedule: Observe, Evaluate, Execute, and Query, with an async runtime facade.

Everyday Rust primitives with no async runtime required: codecs, timestamps, ids, hashing, regex, JSON/RON/wire, HTTP, and default structured-debugging install. One audited stack per feature — a stack is not always one crate (json is serde + serde_json, ron is serde + ron, http is ureq + iri-string).

One multi-language AST parser: language identification from path or shebang, opt-in content parsing, tree-sitter grammar selection by cargo feature, bounded traversal, and span-carrying typed diagnostics. Includes a typed-diagnostic derive.

Authenticated FIPS peer provider for nostr-pubsub

The per-community VGI bridge: holds the community's forge credentials, takes git-ns/bridge jobs from its VTC over TSP or DIDComm, runs the forge adapters, reports results, events and drift, and posts the commit-trust check where no forge feature can be trusted to.

The `vgi` command: `vgi repo init` turns VGI commit trust on for a repository in a manual or personal-account git namespace, acting as you through `gh` (GitHub) or your own token (Forgejo) — the same bootstrap the community's bridge runs.

Git commit signing proxy using DID Ed25519 keys via VTA

CI verifier for VGI: checks that every commit in a git range is signed by a DID the community's Trust Registry currently authorizes.

FIPS endpoint adapter for TCP/FIPS streams

FIPS endpoint adapter for TCP/FIPS streams

An Oxigraph storage adapter for RDF.rs knowledge graphs.

Composition, semantics, accessibility, and robot test utilities for Cranpose

Dioxus components for zino.

A Turso storage adapter for RDF.rs knowledge graphs.

A SQLite storage adapter for RDF.rs knowledge graphs.

WebVH hosting infrastructure for the VTA — the local did:webvh DID-record and hosting-server store

Service for Verifiable Trust Agents operating in Verifiable Trust Communities

Rust bindings for Barretenberg, a C++ cryptographic library for zero-knowledge proofs

Background TTL sweepers for the VTA's core keyspaces — ACL grant expiry, pending-consent expiry, and soft-deleted-vault purge

VTA TEE bootstrap — Nitro/SEV-SNP attestation providers, KMS attest/decrypt + storage-key derivation, the anchor MAC, and first-boot DID autogen

VTA persona store — the holder's own identity attributes, the profiles that project over them, the bindings that assign a profile to a persona DID, and the contacts peers disclose

VTA holder credential vault — storage, query, receive/verify, present, and status refresh for credentials a holder stores on a VTA

VTA backup/restore subsystem — encrypted full-state export/import, the sealed backup-bundle store, and its TTL sweeper

VTA policy subsystem — the regorus (Rego) engine, the default policy bundle, consent model, and decision evaluators

VTA key management — master-seed storage, BIP-32 key derivation, key wrapping, and the seed-store backend selection

A minimalistic image viewer with analysis and editing tools

Shared mid-layer VTA services — trust-context storage, the sealed-transfer seal helper, and the sealed-bootstrap nonce store