Changelog

What changed, and when.

Only published releases appear here. Each entry links to its release notes on GitHub, which remain the source of truth.

Rune Box

Rune Box releases

Rune Box is pre-1.0. Summaries are drawn from each release’s notes.

  1. v0.4.1

    • The release to use in place of v0.4.0.
    • Each image’s digest pattern no longer matches other images.
  2. v0.4.0

    • Superseded by v0.4.1: this release is missing the multi-arch server and IDE images, and its Python and npm SDKs weren’t published.
    • Rune Box is ported to Rust, with governed agent sessions and a live demo.
    • Native Firecracker and libkrun microVM hosts; persistent kata-fc workspaces and the in-sandbox supervisor on Kubernetes.
    • Egress enforces endpoint binaries with in-sandbox attribution, and Kubernetes sidecar decisions are recorded.
    • 1Password op:// secret references, and child Charters admitted only when no broader than their parent’s.
    • Security and supply-chain hardening, including OIDC RS256 verification with ring.
  3. v0.3.0

    • Made SDK publishing retry-safe from release tags.
  4. v0.3.0-rc.2

    Pre-release
    • Release-candidate hardening, including root-scoped archive extraction.
    • Dependency updates (Go modules, OPA, GitHub Actions, the Alpine base image).
  5. v0.2.1

    • Hardened runtime images and addressed security findings.
    • Enforced the configured Trivy severity thresholds.
  6. v0.2.0

    • Prepared the governance-harness release and renamed the public surface to the themed vocabulary (Citadel, Charter, Chronicle and others).
    • Moved the toolchain to Go 1.26.2 and updated dependencies.
  7. v0.1.4

    • Hardening, governance, observability and adapter work.
    • Wired host.runtime_class to the container runtime for VM-grade isolation.
    • Made Runeward publishable to the MCP registry; fixed cosign release signing and added gosec and govulncheck checks.
  8. v0.1.3

    • Added observability, telemetry and cosign signing, and sped up image builds.
  9. v0.1.2

    • Documentation site rendering fix.
  10. v0.1.1

    • Added the Homebrew tap release step and the MkDocs documentation site.
    • Added the licence, community files and the goreleaser release pipeline.
  11. v0.1.0

    • First tagged release.

All releases on GitHub

Rune Gurd Live

No public Gurd releases yet.

Guard is in early access and has not published a release. Its changes are tracked in its private repository; this page will list Guard releases once they are public.