Changelog
What shipped, version by version
Tagged releases with versioned artifacts. The full, technical changelog and the live commit stream both live in the open.
- GPU rental checksVerified release →
Scheduled real GPU rentals check funding, authenticated SSH, GPU inspection, settlement and provider cleanup. The latest result and recent history are public.
Added- Six-hour rental schedule with durable reservations and explicit pending, blocked, failed and recovery outcomes.
- A reporting heartbeat separate from the rental cadence, with monitoring for missed or unsuccessful windows.
- Public results and bounded pilot admissions, including deliberate pauses when the approved budget is exhausted.
- Compute 0.3.0Verified release →
Encrypted workspace snapshots preserve files independently of a GPU lease. Buyers keep their keys, pin the saved version and restore a checkpoint for a later rental.
Added- Client-side encryption, signed workspace requests and versioned commits with provider-native checksum verification.
- Persistent interrupted-upload recovery, private key backups and exact-version restores that preserve existing destination files.
- Public acceptance evidence for a synthetic checkpoint restored across two rented L40S instances, settled leases and verified ciphertext cleanup.
- Compute Python 0.1.0Verified package →
Python agents built with Microsoft Agent Framework can use Covenant as a paid inference tool, with Solana USDC payments and verified Compute receipts.
Added- Native Python x402 client with persistent purchase reservations, spending limits and signed-result verification.
- Official Agent Framework FunctionTool with prompt-only model arguments. Wallet, model and spending policy remain application-controlled.
- A persistent incident-review workflow that checkpoints before payment and reuses the same completed purchase after a restart.
- 0.1.0-alpha.1Signed release →
First tagged release. The daemon, CLI, and operator console are usable end to end, and every release artifact is signed in CI with cosign keyless OIDC.
Added- covenant bootstrap grants the capabilities a fresh install needs, so the first intent works out of the box.
- Operator console overhaul: tasks, permissions, memory, messages, agents, spending, and the activity log rewritten for non-technical operators, with a command palette.
- Plain-English capability titles across the console and CLI.
- Source installer with dry-run, upgrade preflight, and rollback.
- Multi-platform release workflow (macOS arm64 and x86_64, Linux x86_64) with SHA-256 checksums and cosign signatures.
Changed- Getting-started and demo docs rewritten around the current CLI; alpha framing replaced with versioned releases.
- First-task errors point users at covenant bootstrap instead of granting each capability by hand.
Security- Capability trust root enforced at every verify callsite; the daemon refuses self-granted operator capabilities.
- Constant-time peer-token comparison; the audit chain refuses to rebuild on a length mismatch.
- CI hardening: per-job timeouts, no persisted credentials, CodeQL, and cargo-audit integrity checks.