AGPL-3.0-or-later · forever.

v0.107.1

the composition wave

published 2026-08-02 · 8 assets

The 0.107 train shipped the trust objects; an outside checkpoint then measured what a stranger actually meets and found the composition missing. Three synthetic personas (novice FR · senior dev · privacy-first) walked the binary end to end, and every fix carries the transcript line that found it. One door catalog, one ratchet: DoorId{Discover,Create,Project} is the single source behind every taught first-contact command: the five workspace states, the chat-only JSON mirror and the kit’s allowed-tools all derive from it, and a test replays EVERY command welcome can teach against the live clap tree. The dead nika examples the concierge kept teaching is gone from text, JSON, kit and docs, and hygiene vector 45 sweeps three rendered surfaces so the class cannot return. nika try opens on three jobs, not thirty-nine: one contrasted trade each (support · meetings · release), every row a taught try <slug>, while a pipe still gets the full parsable shelf byte-for-byte.

the artifacts

8 assets, each with its recorded digest

The sha256 beside each artifact is the digest GitHub recorded when the release train uploaded it: re-derivable by anyone, fabricated by no one. Verify a download against it, or against the SHA256SUMS asset the train signs.

  1. multiple.intoto.jsonl24 KB · sha256 c646bcbeff7c14d8…
  2. nika-linux-arm64-0.107.1.tar.gz12.7 MB · sha256 058d8800b3d44289…
  3. nika-linux-x64-0.107.1.tar.gz13.8 MB · sha256 2d976c9186567d7d…
  4. nika-macos-arm64-0.107.1.tar.gz11.3 MB · sha256 da3ec006e8476017…
  5. nika-macos-x64-0.107.1.tar.gz12.8 MB · sha256 28f21423cc7084d3…
  6. SHA256SUMS1 KB · sha256 ee2220b05f4d72b5…
  7. supernovae-st-nika-check-wasm-0.107.1.tgz1.3 MB · sha256 0754c70b5c50bb84…
  8. supernovae-st-nika-check-wasm-0.107.1.tgz.sha2561 KB · sha256 b026c85418f02a61…

vendored from the public release record · re-vendored at the train cadence