waveframelabs.github.io/updates.html at main · Waveframe-Labs/waveframelabs.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
<!--
---
title: "Updates - Waveframe Labs"
short_title: "Updates"
version: "2.3.0"
status: "Active"
type: "website"
author: "Waveframe Labs"
maintainer: "Waveframe Labs"
license: "CC-BY-4.0"
policy_version: "ARI-Metadata-3.0.2"
description: "Current product releases and architecture changes across the Waveframe platform."
ai_assisted: "partial"
---
-->

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Updates - Waveframe Labs</title>
<meta name="description" content="Current releases and architecture changes across Waveframe Ledger, Guard, CRI-CORE, Cloud, and Guard Inspector." />
<link rel="icon" type="image/png" sizes="96x96" href="assets/brand/favicon-96x96.png" />
<link rel="shortcut icon" href="assets/brand/favicon.ico" />
<link rel="apple-touch-icon" sizes="180x180" href="assets/brand/apple-touch-icon.png" />
<link rel="manifest" href="assets/brand/site.webmanifest" />
<link rel="canonical" href="https://waveframelabs.org/updates.html" />
<meta name="theme-color" content="#050505" />
<style>
:root{--bg:#050505;--surface:#111;--card:#141414;--panel:#0d0d0f;--ink:#e7eaef;--muted:#9aa3b2;--soft:#c5cad3;--edge:#252832;--accent:#ff5a0a;--accent2:#ff7a33;--green:#3ddc97;--red:#ff4d4d;--maxw:1120px;--rad:12px}
*{box-sizing:border-box}
html,body{margin:0;padding:0;background:var(--bg);color:var(--ink);font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}
body:before{content:"";position:fixed;inset:0;pointer-events:none;background:radial-gradient(circle at 82% 12%,rgba(255,90,10,.18),transparent 30%),linear-gradient(180deg,rgba(255,90,10,.08),transparent 380px)}
a{color:inherit;text-decoration:none}a:hover{color:var(--accent)}
.wrap{max-width:var(--maxw);margin:0 auto;padding:0 22px;position:relative}
.hdr{border-bottom:1px solid var(--edge);background:rgba(8,8,8,.9);backdrop-filter:blur(14px);position:sticky;top:0;z-index:100}
.hdr-inner{max-width:var(--maxw);margin:0 auto;padding:16px 22px;display:flex;justify-content:space-between;align-items:center;gap:18px}
.brand{display:flex;align-items:center;gap:10px;font-weight:750}.brand img{height:34px;width:auto;max-width:48px;object-fit:contain}
.topnav{display:flex;gap:20px;font-size:.9rem;flex-wrap:wrap;justify-content:flex-end}.topnav a{color:var(--muted)}.topnav a:hover,.topnav a[aria-current="page"]{color:var(--accent)}
h1,h2,h3,p{margin-top:0}h1{max-width:900px;font-size:clamp(2.65rem,5.2vw,5rem);line-height:.98;letter-spacing:-.04em;margin-bottom:20px}h2{font-size:clamp(1.7rem,3vw,2.65rem);line-height:1.08;margin-bottom:14px}h3{font-size:1.18rem;margin-bottom:8px;color:var(--ink)}
p{color:var(--muted);line-height:1.65}.eyebrow{color:var(--accent);text-transform:uppercase;letter-spacing:.12em;font-size:.78rem;font-weight:850;margin-bottom:14px}.lede{font-size:1.2rem;max-width:820px;color:var(--soft)}
.hero{padding:82px 0 58px;border-bottom:1px solid var(--edge)}.section{padding:58px 0;border-top:1px solid var(--edge)}.section:first-of-type{border-top:0}.section-intro{max-width:800px;margin-bottom:28px}
.status-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:16px}.panel{background:var(--card);border:1px solid var(--edge);border-radius:var(--rad);padding:22px;min-width:0}.panel p:last-child{margin-bottom:0}.panel strong{display:block;font-size:1.05rem;margin-bottom:8px}.pill{display:inline-block;border:1px solid rgba(255,90,10,.38);color:var(--accent);border-radius:999px;padding:5px 9px;font-size:.72rem;font-weight:850;text-transform:uppercase;letter-spacing:.1em;margin-bottom:14px}
.release-list{display:grid;gap:18px}.release{background:linear-gradient(180deg,rgba(20,20,20,.98),rgba(10,10,12,.98));border:1px solid var(--edge);border-radius:var(--rad);overflow:hidden}.release-head{padding:20px 22px;border-bottom:1px solid var(--edge);display:flex;justify-content:space-between;gap:18px;align-items:flex-start}.release-title{min-width:0}.meta{color:var(--muted);font-size:.88rem;white-space:nowrap}.release-body{padding:20px 22px 22px}.release-body ul{margin:0;padding-left:20px;color:var(--muted);line-height:1.75}.release-body li+li{margin-top:5px}.tags{display:flex;gap:7px;flex-wrap:wrap;margin-top:12px}.tag{display:inline-flex;border:1px solid rgba(255,90,10,.35);color:var(--accent);border-radius:999px;padding:4px 8px;font-size:.72rem;font-weight:800}.boundary{margin-top:16px;padding:14px 16px;border-left:3px solid var(--accent);background:var(--panel);color:var(--soft);line-height:1.55}.version{color:var(--accent);font-family:"SFMono-Regular",Consolas,"Liberation Mono",monospace;font-weight:800}
.callout{border:1px solid var(--edge);border-radius:var(--rad);background:var(--panel);padding:20px}.callout strong{display:block;color:var(--ink);margin-bottom:8px}.callout p:last-child{margin-bottom:0}
footer{margin-top:30px;border-top:1px solid var(--edge);background:var(--surface);padding:40px 20px 22px}.footer-grid{display:grid;grid-template-columns:1.5fr 1fr 1fr;gap:32px;max-width:var(--maxw);margin:0 auto}.ft-links a{display:block;color:var(--muted);margin-bottom:10px}.ft-links a:hover{color:var(--accent)}.ft-bottom{max-width:var(--maxw);margin:34px auto 0;padding-top:20px;border-top:1px solid var(--edge);display:flex;justify-content:space-between;gap:16px;color:var(--muted);font-size:.82rem}
@media(max-width:900px){.hdr-inner{align-items:flex-start;flex-direction:column}.topnav{justify-content:flex-start;gap:14px}.status-grid{grid-template-columns:1fr}.release-head{display:block}.meta{margin-top:8px;white-space:normal}.footer-grid,.ft-bottom{grid-template-columns:1fr;display:grid}}
@media(max-width:620px){.wrap{padding:0 16px}.hero{padding:52px 0 46px}.topnav{font-size:.84rem;gap:12px 14px}.release-head,.release-body{padding-left:18px;padding-right:18px}}
</style>
</head>
<body>
<header class="hdr">
  <div class="hdr-inner">
    <a class="brand" href="index.html"><img src="assets/brand/canon_wf_logo_mark_transparent.png" alt="Waveframe Labs mark"><span>Waveframe Labs</span></a>
    <nav class="topnav" aria-label="Primary"><a href="hierarchy.html">Architecture</a><a href="tools.html">Public Tools</a><a href="compatibility.html">Compatibility</a><a href="case-studies.html">Reference Scenarios</a><a href="updates.html" aria-current="page">Updates</a></nav>
  </div>
</header>

<main class="wrap">
  <section class="hero" aria-labelledby="hero-title">
    <div class="eyebrow">Product and Release Engineering</div>
    <h1 id="hero-title">What changed across Waveframe.</h1>
    <p class="lede">A current record of the releases that move governance from authored policy to published authority, local enforcement, durable evidence, and operational inspection.</p>
  </section>

  <section class="section" aria-labelledby="status-title">
    <div class="eyebrow">Current Platform State</div>
    <h2 id="status-title">The authority-to-enforcement path is now connected.</h2>
    <p class="section-intro">Ledger publishes canonical authority. Guard resolves and verifies it by immutable reference. CRI-CORE produces the execution decision. Cloud preserves evidence, and Inspector explains the resulting record.</p>
    <div class="status-grid">
      <div class="panel"><span class="pill">Governance</span><strong>Ledger <span class="version">v0.5.0</span></strong><p>Published Authority is now a stable, versioned object with bundle identity, lifecycle state, registry resolution, and publication receipts.</p></div>
      <div class="panel"><span class="pill">Runtime</span><strong>Guard <span class="version">v0.13.0</span></strong><p>Applications can load Ledger authority directly through an explicit <code>name@version</code> reference and enforce it locally.</p></div>
      <div class="panel"><span class="pill">Operations</span><strong>Cloud <span class="version">v0.3.0</span></strong><p>The current released baseline includes provider-backed state, background jobs, deployment gates, authentication, and production rehearsal.</p></div>
    </div>
  </section>

  <section class="section" aria-labelledby="ledger-title">
    <div class="eyebrow">Release Ledger</div>
    <h2 id="ledger-title">Latest core releases.</h2>
    <p class="section-intro">Entries are ordered by release date. Unreleased work is shown separately and is not presented as shipped capability.</p>

    <div class="release-list">
      <article class="release">
        <div class="release-head"><div class="release-title"><h3>Waveframe Ledger <span class="version">v0.5.0</span> — Published Authority</h3><div class="tags"><span class="tag">authority_bundle.v1</span><span class="tag">registry</span><span class="tag">lifecycle</span><span class="tag">publication receipt</span></div></div><div class="meta">July 13, 2026</div></div>
        <div class="release-body"><ul><li>Completed transactional publication of the compiled contract, authority bundle, publication receipt, review, snapshot, manifest, and registry update.</li><li>Added explicit resolution through immutable <code>authority-id@version</code> references.</li><li>Added bundle hashes, lifecycle state, duplicate-identity protection, and fail-closed lifecycle validation.</li><li>Verified the release with 200 public-core tests.</li></ul><div class="boundary"><strong>Why it matters:</strong> approved governance now becomes a canonical authority object that downstream systems can resolve without guessing which contract or version should be trusted.</div></div>
      </article>

      <article class="release">
        <div class="release-head"><div class="release-title"><h3>Waveframe Guard <span class="version">v0.13.0</span> — Published Authority Consumption</h3><div class="tags"><span class="tag">Guard.local</span><span class="tag">resolver</span><span class="tag">verification</span><span class="tag">cache</span></div></div><div class="meta">July 2026</div></div>
        <div class="release-body"><ul><li>Added <code>Guard.local(authority="name@x.y.z")</code> and the shared authority resolver boundary.</li><li>Added canonical Ledger <code>authority_bundle.v1</code> verification across registry, bundle, contract, and computed hashes.</li><li>Added lifecycle-aware cache revalidation so revoked or superseded authority cannot remain trusted through stale cache reuse.</li><li>Rejected duplicate identities, ambiguous authority sources, and non-versioned references.</li><li>Verified the release with 194 tests, package builds, and clean-environment installation.</li></ul><div class="boundary"><strong>Why it matters:</strong> Ledger publication and Guard enforcement now meet at one explicit authority reference.</div></div>
      </article>

      <article class="release">
        <div class="release-head"><div class="release-title"><h3>Guard Inspector <span class="version">v0.2.0</span> — Execution Investigation Workspace</h3><div class="tags"><span class="tag">investigation</span><span class="tag">decision pipeline</span><span class="tag">Cloud replay</span></div></div><div class="meta">July 1, 2026</div></div>
        <div class="release-body"><ul><li>Reframed Inspector around execution investigation instead of raw JSON artifact intake.</li><li>Added present, missing, and optional decision-pipeline states.</li><li>Added Cloud replay package intake and a dedicated Cloud handoff path.</li><li>Aligned Inspector examples and artifacts with the current Guard developer interface.</li></ul><div class="boundary"><strong>Boundary:</strong> Inspector explains recorded execution evidence. It does not author policy, evaluate admissibility, or rewrite the original decision.</div></div>
      </article>

      <article class="release">
        <div class="release-head"><div class="release-title"><h3>Waveframe Cloud <span class="version">v0.3.0</span> — Production Infrastructure Baseline</h3><div class="tags"><span class="tag">PostgreSQL</span><span class="tag">object storage</span><span class="tag">workers</span><span class="tag">deployment gates</span></div></div><div class="meta">June 23, 2026</div></div>
        <div class="release-body"><ul><li>Added PostgreSQL-backed structured state and S3-compatible object storage.</li><li>Added background jobs for replay generation, exports, impact processing, and state-index rebuilding.</li><li>Added authentication, organization membership, production-readiness checks, and runtime configuration reporting.</li><li>Completed a 16-step production-local rehearsal using PostgreSQL and MinIO.</li></ul><div class="boundary"><strong>Boundary:</strong> Cloud distributes authority and preserves operational evidence. It does not replace Guard's local execution decision.</div></div>
      </article>

      <article class="release">
        <div class="release-head"><div class="release-title"><h3>CRI-CORE <span class="version">v0.13.0</span> — Structured Enforcement Kernel</h3><div class="tags"><span class="tag">evaluate_structured</span><span class="tag">determinism</span><span class="tag">immutability</span><span class="tag">commit_allowed</span></div></div><div class="meta">May 3, 2026</div></div>
        <div class="release-body"><ul><li>Moved the canonical enforcement interface from filesystem runs to structured in-memory inputs.</li><li>Added byte-stable deterministic payload generation and explicit contract-version enforcement.</li><li>Hardened contract-hash immutability, proposal immutability, and execution-mode propagation.</li><li>Fixed contract-hash overwrite, mode downgrade, schema loading, and non-deterministic archive generation.</li></ul><div class="boundary"><strong>Kernel invariant:</strong> CRI-CORE owns the deterministic <code>commit_allowed</code> result. Callers must not reconstruct or override that decision.</div></div>
      </article>

      <article class="release">
        <div class="release-head"><div class="release-title"><h3>Waveframe Labs Website <span class="version">v2.3.0</span> — Product Architecture Normalization</h3><div class="tags"><span class="tag">navigation</span><span class="tag">product hierarchy</span><span class="tag">release ledger</span></div></div><div class="meta">July 18, 2026</div></div>
        <div class="release-body"><ul><li>Normalized the Updates page to the current shared navigation, brand system, spacing, footer, and mobile behavior.</li><li>Replaced the obsolete May release snapshot with the current Ledger, Guard, Cloud, Inspector, and CRI-CORE baselines.</li><li>Aligned public architecture language with the current authority publication, enforcement, preservation, and inspection lifecycle.</li></ul></div>
      </article>
    </div>
  </section>

  <section class="section" aria-labelledby="next-title">
    <div class="eyebrow">In Progress</div>
    <h2 id="next-title">Cloud v0.4.0 deployment MVP.</h2>
    <div class="callout"><strong>This is not yet listed as a released version.</strong><p>Current work adds authenticated organization-scoped Guard preservation and retrieval, immutable preservation receipts, idempotent retries, tenant isolation, authority-bundle attachment, and interrupted-write recovery. The release target is focused on a clear deployable first-run path rather than expanding the product surface.</p></div>
  </section>
</main>

<footer>
  <div class="footer-grid">
    <div><strong>Waveframe Labs</strong><p>Deterministic execution governance for AI, automation, and software systems.</p></div>
    <div class="ft-links"><strong>Explore</strong><a href="hierarchy.html">Architecture</a><a href="tools.html">Public Tools</a><a href="compatibility.html">Compatibility</a><a href="case-studies.html">Reference Scenarios</a></div>
    <div class="ft-links"><strong>Connect</strong><a href="https://github.com/Waveframe-Labs">GitHub</a><a href="mailto:swright@waveframelabs.org">swright@waveframelabs.org</a><a href="https://orcid.org/0009-0006-6043-9295">ORCID</a></div>
  </div>
  <div class="ft-bottom"><span>&copy; <span id="year"></span> Waveframe Labs</span><span>Execution governance before production mutation</span></div>
</footer>
<script>document.getElementById('year').textContent=new Date().getFullYear();</script>
</body>
</html>