Institutional record

What changed at Waveframe Labs.

A factual record of public releases. Repository release pages remain the source for complete validation evidence, hashes, and compatibility notes.

GOVERNANCELedger v0.9.0

Current public publication layer.

RUNTIMEGuard v0.19.0

Current public SDK release.

KERNELCRI v0.14.0 GitHub

Published on PyPI and GitHub.

OPERATIONSCloud v0.6.0

Current published Cloud release; production activation is separate.

September 2026

Current release line.

Waveframe Cloud v0.6.0

Published the integrated Cloud 0.6 line with the current Ledger, Compiler, and Guard package set plus guided setup and preserved evidence. The release handoff keeps production activation separate from publication.

Read the release →

Waveframe Guard v0.19.0

Published on PyPI and GitHub. This release aligns the public SDK with Ledger 0.9.0 and Compiler 0.5.0 and adds the current repository action catalog.

Read the release →

Waveframe Ledger v0.9.0

Published the current authority-publication package line and Guard 0.19 compatibility range.

Read the release →

Contract Compiler v0.5.0

Published the new action-policy Python API while retaining the existing command-line interface for the legacy policy format.

Read the release →

CRI-CORE v0.14.0

Published strict-by-default evaluation on GitHub. PyPI publication of the matching artifacts is confirmed as of September 30.

Read the release →

Earlier release history

These entries describe the release status at the time.

Waveframe Guard v0.18.0 — Mediated execution boundary

Published the current Guard Core SDK under Apache-2.0, bounded runtime dependencies, fail-closed legacy API migration, explicit bypass/least-privilege guidance, and repository-bound mutation through repository_tool. Guard protects the wrapped callable path; it does not claim global control over alternate mutation paths.

Read the release →

Waveframe Ledger v0.8.0 — Human-confirmed translation and native v3 publication

Added an untrusted policy-translation proposal boundary in which each proposed control requires human confirmation before it can become authority. Native v3 publication binds confirmed controls, residual unsupported meaning, source/approval identity, Constraint IR, and matching receipt evidence while retaining the v2 compiled runtime payload.

Read the release →

Waveframe Cloud — v2/v3 serving and translation workflow merged in source

Cloud source work for atomic tenant publication serving and hosted translation/Console workflows merged after the v0.5.7 release. These merges are recorded as source progress, not as a new hosted release; v0.5.7 remains the latest published Cloud release.

Inspect Cloud source →

Waveframe Cloud v0.5.7 — Console Reliability

Made the hosted Console responsive and live under PostgreSQL-backed state while preserving truthful evidence states. Runtime attestations reconcile into execution dossiers without hiding ambiguity or rewriting history.

Read the release →

Contract Compiler v0.4.0 — Deterministic Target Scoping

Added literal exact/prefix target requirements to compiled contract identity. Deny precedence and fail-closed malformed-target behavior are consumed by the current Guard runtime path.

Read the release →

Current package path

Published runtime baseline.

Guard 0.19.0 depends on CRI >=0.13.0,<0.15.0, Proposal Normalizer >=0.2.0,<0.3.0, and Ledger >=0.9.0,<0.10.0. Ledger 0.9.0 requires Compiler >=0.5.0,<0.6.0.