Releases

Fast non-cryptographic hashing for canonical packed DNA kmers

gripsack built-in fetchers and sourcerer plugin host (plan/0002)

Reusable robot-UI testing framework for egui apps: drive real interactions (click/scroll/type/key) via egui_kittest (AccessKit), observe via each component's state_json (the nordisk Observable pattern), and emit each (action → expected outcome) step as a nornir-testmatrix row — so a robot run auto-clicks around and FILLS the test matrix. Reusable by korp, facett-demo, mannequin, and nornir's own viz.

gripsack tool configuration: env.toml + layered merge (plan/0005)

Apache Fory: Blazingly fast multi-language serialization framework with trait objects and reference support.

gripsack store paths and generations (plan/0001)

The release warehouse ledger: the canonical Iceberg schemas for release_lineage / release_events / release_changes plus the Arrow writer+reader codecs over the backend-neutral nornir Warehouse seam. One definition, consumed by both the warehouse owner and the release orchestrator.

Arcature: an opinionated full-stack Rust web framework. One package, batteries included.

gripsack IR types and validation (plan/0001)

The Flight-backed BuildInfoSink for the nordisk constellation — ships build-info rows (nornir-build-thing's §f3 schema) over an Apache Arrow Flight endpoint (nornir-flight's do_put/do_get) instead of in-process. The ONE place that deps BOTH nornir-build-thing (the transport-agnostic BuildInfoSink trait + rows) and nornir-flight (the wire), keyed per build_id[/step_id] so a viz live-tail subscribes per sub-job. Rides arrow-56 (the Flight wire's arrow), column-identical to build-thing's canonical schema. Extracted from nornir per the shrink plan.

holger's BUILD THING: its deployment tiers and suite service shapes declared in Rust, plus the airgap rules only holger knows. Compiled into holger (self-description) and to wasm32 as the plugin the dwarves forge loads — one implementation, two link targets.

Apache Fory: Blazingly fast multi-language serialization framework with trait objects and reference support.

Apache Fory: Blazingly fast multi-language serialization framework with trait objects and reference support.

RTL-SDR USB software defined radio library

Pure-Rust, zero-shell UNATTENDED disk-installer for the korp appliance: an OS-less PID-1 that HW-detects a target disk (sysfs/efivarfs), lays a clean GPT (hand-rolled), formats the ESP (fatfs), and streams a blake3-chunked .znippy app payload raw onto the system partition — narrating every step to the serial console. Ships the root-of-trust `korp-start` start-app that blake3-verifies the app .znippy on every boot and memfd+fexecve's korp straight from RAM.

A sandboxed local-machine MCP server with out-of-band approvals

A command line utility for interactive renaming of a potentially large number of files.

Declarative cargo build variants + SLSA-style build-provenance attestation: a repo declares its buildable variants (embedded/minimal/full …) as data; build one, capture a content-addressed provenance record (variant, toolchain, host cores+memory, inputs, artifact hashes) with a znippy-seal seam. Dependency-light so a leaf repo's xtask can pull it. The build-thing core of nornir.

The `nornir-workspace.toml` multi-repo descriptor: parse a workspace of independent repos (path / git / fat-both members) and resolve every member to a concrete on-disk checkout, auto-materializing missing `git` members via the pure-Rust `nornir-git` transport (SSH via russh, no shell-out; `NORNIR_OFFLINE` for the airgap path). Pure parse + repo-source resolve — NO warehouse, NO Iceberg. Extracted out of nornir/src/workspace so dwarves can consume it FAT without inverting edda->nornir into a cycle; nornir re-exports it verbatim under `nornir::workspace`.

Generic, use-case-agnostic Apache Arrow Flight transport seam for the nordisk constellation — raw do_put/do_get/do_exchange over RecordBatch, schema-agnostic FlightSink/FlightSource traits, composing the shared nornir-service bearer-auth interceptor. The ONE Flight transport (LAW: reuse); each use (build-info stream, skade-flight, …) is an independent consumer on top.

Shared auth POLICY / composition layer for the nordisk servers — the RBAC role model (`Role`, `AuthConfig`, per-repo ACLs, the opt-in read gate), the declarative `AuthMethodConfig` (OIDC / OAuth2 / mTLS / static-token), and `validate_request`, which builds the enabled, feature-gated `nornir_service::AuthProvider` set from the config and dispatches a presented bearer + client-cert CN through it. The composition tier ABOVE the per-method provider leaves (nornir-auth-{bearer,oidc,oauth2,mtls}): a server pins the providers its tier needs and gets the same login + authorization model as holger (the reference consumer). Consumed by holger, and (suite-wide) korp / dwarves / nornir.

Hashed static API-key auth PROVIDER for the nordisk servers — verifies a presented key against a store of SHA-256-HASHED keys (hashed-at-rest, distinct from `nornir-auth-bearer`'s single plaintext secret). Enables rotating / multi-tenant key stores where the plaintext key is never persisted. Implements the shared `nornir_service::AuthProvider` seam via `verify_bearer`. REUSES the shared primitives (`nornir-hash::sha256_hex` for the digest, `nornir_service::token_matches` for the constant-time compare) — no crypto/HTTP of its own, so it is a tiny provider every tier can pin cheaply. Consumed by holger (reference impl), korp, dwarves.

Proc-macro crate for Arcature: #[model], #[request], #[controller], #[derive(Job)], #[derive(Event)].

WebAuthn / FIDO2 / passkey auth PROVIDER for the nordisk servers. RP-side verification of a passkey authentication assertion: verifies the signature against the stored credential public key, checks the challenge, origin and relying-party ID hash, enforces the user-present and user-verified flags, and rejects a replayed or rolled-back signature counter. Registration (attestation) parsing included. No password path, no session issuing — it answers whether one assertion is genuine, and the caller decides what that grants.

Warehouse-free release logic lifted out of nornir — source-drift/skip-unchanged detection plus the pure deps-first publish-wave planner; the shared release logic in one place, with the release command in dwarves over nornir's warehouse.

Experimental C-SKY architecture support primitives

SAML 2.0 (enterprise SSO) auth PROVIDER for the nordisk servers — SP-side validation of a signed SAML assertion / response (HTTP-POST binding): cryptographically verify the XML-DSIG signature against the configured IdP certificate, check the conditions, and map the subject NameID to an identity. Enables ADFS / Entra ID / Okta / Ping SAML estates. Implements the shared `nornir_service::AuthProvider` seam via the `verify_saml_assertion` credential-shape method. REUSES the `samael` crate for the XML-DSIG crypto (does NOT hand-roll). HARD feature-gated: samael pulls the heavy native `xmlsec1` / `libxml2` / `openssl` stack, so it rides ONLY behind the off-by-default `saml` feature — the mini/embedded/airgap tiers link NONE of it and the provider fails closed without it. Consumed by holger (reference impl), korp, dwarves.

The ONE userspace WireGuard data plane of the nordisk appliance fleet: x25519 key handling + keygen, a wg-quick INI tokenizer, a /dev/net/tun device, a boringtun packet pump (encapsulate/decapsulate/timers, AllowedIPs longest-prefix routing) that runs in ONE thread and needs NO wireguard kernel module — and the appliance identity CEREMONY: load-or-mint the keypair at a path (idempotent, fail-closed, 0600), the one canonical identity line every product prints, and the hub.conf dialect (one [Peer], public data only). Consumed by tunnr's wg-appliance PID-1 payload, gunnar's OS-less appliance, and holger's appliance tiers. Carries no product config schema and no address writer: each consumer keeps its own declared config surface and its own netlink/ioctl writer.

SharpeBench orchestration: drive an agent over seeds × windows and capture trajectories (Phase 1).

WASM bindings for the SharpeBench scoring kernel (consumed by Gordon/Bun via the identical kernel).