Releases

gen — the Security-Attestation (SecAttest) INVARIANT contract. The universal typed law that every derivation carries a COMPLETE, content-addressed, FAIL-CLOSED security verdict {signature, SBOM, CVE⊖VEX, provenance} keyed by the SAME content hash PDC uses (the attestation address = the third use of PDC clause-4's one cell), verified before use: an unverified/incomplete/tampered artifact has no run path. Ships the six-clause law, the sealed RunToken capability, the fail-closed checker + Attestable trait, and the verdict-kind CATALOG + verification MATRIX forcing-function. Security peer of gen-pdc; OSS-first (cosign/sbomnix/Trivy/osv/OpenVEX/SLSA/in-toto plug in as producers).

gen — typed cache client (CacheClient trait + AtticClient HEAD-probe impl + NoCacheClient default). Engines consult the trait before triggering builds; substituter hits short-circuit the rebuild. The trait is the swap-in seam for any future binary cache (cachix, S3, R2). Today attic is offline → NoCacheClient is the default; AtticClient activates when the substituter is reachable.

gen — typed bridge between pleme-io's caixa SDLC primitive and the gen ecosystem. (defcaixa …) blocks declare a :gen slot; this crate translates the typed CaixaToGen request into an AdapterRoute the caixa renderer can act on. The first M9 milestone; full caixa-side wiring (caixa-author skill update, feira render integration) lands when the typed surface stabilizes.

gen — the Per-Dependency Content-Addressed Cacheability (PDC) contract. The typed variant CATALOG of ecosystem adapters (cargo/gomod/npm/pip/…) + the universal PDC invariant checker + the verification MATRIX forcing-function. Codifies the per-dependency-caching law that gen-cargo (shipped) and gen-gomod (M1) already implement implicitly, so a new ecosystem cannot ship without a PDC conformance proof. See theory/PDC-CONTRACT.md.

gen — Buck2 BUCK file renderer. Sibling of gen-nix / gen-nix-bulk / gen-bazel; same typed Manifest in, typed Buck Starlark out. Buck2's BUCK files are Starlark-dialect — we reuse the typed Starlark AST published by gen-bazel and emit Buck-specific rule names + attrs.

RDW framing microcrate with header primitives, reader/writer, and buffered helpers

Offline PackageURL validator using a prebuilt FST of known packages.

gen — Bazel BUILD.bazel + MODULE.bazel renderer. Sibling of gen-nix (per-crate Nix) and gen-nix-bulk (per-tree Nix); same typed Manifest in, typed Starlark out. Operators pick the backend via shikumi config — the same source-of-truth typed Manifest renders to Nix or Bazel mechanically.

A lightweight and efficient OCR library based on PaddleOCR models, using the MNN inference framework for high-performance text detection and recognition

Google BigQuery adapter for the Quarb query engine

Chip-selecting radio facade for HiSilicon embedded Rust

gen — polyglot workspace dispatcher. Probes a directory for every configured adapter marker and emits a typed PolyglotWorkspace containing one Manifest per detected language. Engines that operate across language boundaries (caixa-author + the M5 cross-language renderer + audit reports) consume this.

gen — typed shikumi::TieredConfig for the universal package-manager engine. Owns the operator-facing knobs: workspace root resolution, cache substituter URLs, render policy (per-crate / per-tree), the target the engine evaluates predicates against, and the discovery rules that map a directory to an adapter.

gen — per-tree (crane shape) bulk Nix renderer. Sibling of gen-nix's per-crate renderer. Produces one big derivation that builds the entire workspace in one shot — cheaper for CI's first-canary build, more expensive for incremental local dev. Operators pick the shape via shikumi config (RenderMode::PerTree).

gen — typed Nix AST + pretty-printer + per-crate (crate2nix shape) derivation renderer. Implements theory/NIX-AST.md: every Nix construct the substrate emits is a typed `NixValue` rendered through one canonical pretty-printer. `format!()` of nix syntax is forbidden in this crate's downstream consumers.

gen — typed (defadapter …) spec + scaffold-generator. Every new gen-X adapter is authored as one typed AdapterSpec value (or one tatara-lisp (defadapter …) form when the Lisp runtime ships); adapter-forge synthesizes the scaffold (lib.rs / error.rs / raw.rs / tests) from the spec. The shape is distilled from gen-cargo + gen-npm + gen-bundler — the next 6+ adapters land as ~50-line typed specs.

gen — Ruby/Bundler adapter. Parses Gemfile + Gemfile.lock into gen_types::Manifest. The bundler half of the universal package-manager engine; sibling of gen-cargo + gen-npm. Authored Gemfile parsing is line-oriented (DSL eval intentionally deferred — pleme-io's Bundler usage is declarative-shape).

gen — poetry adapter. Parses pyproject.toml + lockfile into a typed gen_types::Spec emission. One of N adapters that share the typed core via Spec/QuirkRegistry/Invariants traits.

gen — swift adapter. Parses Package.swift + lockfile into a typed gen_types::Spec emission. One of N adapters that share the typed core via Spec/QuirkRegistry/Invariants traits.

gen — ansible adapter. Parses galaxy.yml + lockfile into a typed gen_types::Spec emission. One of N adapters that share the typed core via Spec/QuirkRegistry/Invariants traits.

gen — gomod adapter. Parses go.mod + lockfile into a typed gen_types::Spec emission. One of N adapters that share the typed core via Spec/QuirkRegistry/Invariants traits.

gen — pip adapter. Parses pyproject.toml + lockfile into a typed gen_types::Spec emission. One of N adapters that share the typed core via Spec/QuirkRegistry/Invariants traits.

gen — npm/pnpm/yarn adapter. Parses package.json + package-lock.json/pnpm-lock.yaml into gen_types::Manifest. The npm half of the universal package-manager engine; sibling of gen-cargo.

gen — helm adapter. Parses Chart.yaml + lockfile into a typed gen_types::Spec emission. One of N adapters that share the typed core via Spec/QuirkRegistry/Invariants traits.

Fixed-length (LRECL) record framing reader/writer primitives for copybook-rs

Host-side App build, Fleet install, deployment, and release-set library for Canic workspaces

Amazon Athena adapter for the Quarb query engine — the S3 datalake's query layer on the shared relational model

Operator CLI for Canic fleet setup, builds, evidence, catalog, backup, and restore workflows

gen — Cargo adapter. Parses Cargo.toml + Cargo.lock + workspace shape into gen_types::Manifest. The cargo half of the universal package-manager engine; one of N adapters (gen-npm, gen-bundler, gen-pip, gen-gomod, gen-helm, …) that share the typed core. See theory/GEN.md for the full design.

Oliphaunt WASIX AOT artifact package for the pg_hashids on aarch64-apple-darwin