Releases

Guest runtime orchestrator — 'hospedeiro' = 'host' in Portuguese. Polymorphic supervisor dispatching GuestSpec → HVF/VZ/WASM backends. Phase H.6.

Runs one declared ExportSpec from an ephemeral Process — reads the artifact, ships through the chosen VectorChannel, emits a typed export receipt

Typed VM definitions — Darwin-hosted Linux guests for tatara-os, authored in tatara-lisp, emitted as vfkit/qemu config

Arena-enclosed Lisp virtual environments — bumpalo-backed, sealable, serializable compilers you can author in Lisp and deploy as typed artifacts

Structured audit logging for the VTA — the `audit!` tracing macro plus the audit-keyspace persistence helpers

The DTG-credential chain verifier for data rooms

GitHub webhook receiver — translates org-wide PR + push + branch events into EphemeralAllocation CRs the pool reconciler then routes to a matching EphemeralPool.

Reconciler for EphemeralPool + EphemeralAllocation CRDs — population manager that maintains warm pools of pre-attested ephemeral Processes and allocates them to requestors (GitHub PRs, CI runs, manual operators).

Pluggable secret-store backends + integration onboarding flow for Verifiable Trust Infrastructure

The unified FluxCD-adjacent Kubernetes controller — reconciles Process CRDs as Unix processes, composes tatara three-pillar attestation

tatara IS PID 1 — typed service supervisor authored in tatara-lisp. Drop-in replacement for systemd/s6/openrc inside a tatara-os Linux guest.

NixOS-equivalent — typed SystemConfig deriving TataraDomain, activation synthesizer, Linux-kernel + bootloader + services + users + filesystems, composed via tatara-nix module fixpoint

Package set abstraction + nixpkgs bridge + tend-driven tatara-lisp mirror — the tatara equivalent of nixpkgs

Optimized in-memory Lisp interpreter for tatara — evaluates Sexp to Value, produces typed Derivations, composes with tatara-nix realizers

Nix's academic essence, re-expressed in Rust + Lisp. Derivation, StorePath, Module, Overlay, Flake — all typed, all Lisp-authorable via #[derive(TataraDomain)], all attestable via BLAKE3.

Nord-themed CLI UX for the tatara toolchain — typed palette + sigils + UiEvent stream + cache-aware renderer, all content-addressable as tatara-nix Derivations

Lattice algebra over tatara classification — meet/join/leq, replaces qualities_match

Shared CLI command handlers and rendering helpers for VTA CLIs

Client SDK for Verifiable Trust Communities (VTC) — auth, members, join, removal, policies

Testing utilities and harness for Cranpose

Utilities for writing Dylint libraries

Data-room storage, wire types, and authorization — the parts of a room that are not a service

Shared server-side infrastructure for VTA and VTC services

SDK for Verifiable Trust Agents operating in Verifiable Trust Communities

The tari full base node implementation

Minimal Windows global-hotkey library

GraphQL router for Federation, part of the Hive platform

A local HTTP server and browser bundle for editing a repository's JSONL tables

The Query plane's read model: a DataFusion engine over signed projection artifacts, behind a verified credential.

One-dependency front door to the Trust Tasks framework: re-exports trust-tasks-rs plus the transport, proof, ceremony and capability crates behind Cargo features.