Waveframe Labs markWaveframe Labs
Product and Release Engineering

What changed across Waveframe.

A current record of the releases that move governance from authored policy to published authority, local enforcement, durable evidence, and operational inspection.

Current Platform State

The authority-to-enforcement path is now connected.

Ledger publishes canonical authority. Guard resolves and verifies it by immutable reference. CRI-CORE produces the execution decision. Cloud preserves evidence, and Inspector explains the resulting record.

GovernanceLedger v0.5.0

Published Authority is now a stable, versioned object with bundle identity, lifecycle state, registry resolution, and publication receipts.

RuntimeGuard v0.13.0

Applications can load Ledger authority directly through an explicit name@version reference and enforce it locally.

OperationsCloud v0.3.0

The current released baseline includes provider-backed state, background jobs, deployment gates, authentication, and production rehearsal.

Release Ledger

Latest core releases.

Entries are ordered by release date. Unreleased work is shown separately and is not presented as shipped capability.

Waveframe Ledger v0.5.0 — Published Authority

authority_bundle.v1registrylifecyclepublication receipt
July 13, 2026
  • Completed transactional publication of the compiled contract, authority bundle, publication receipt, review, snapshot, manifest, and registry update.
  • Added explicit resolution through immutable authority-id@version references.
  • Added bundle hashes, lifecycle state, duplicate-identity protection, and fail-closed lifecycle validation.
  • Verified the release with 200 public-core tests.
Why it matters: approved governance now becomes a canonical authority object that downstream systems can resolve without guessing which contract or version should be trusted.

Waveframe Guard v0.13.0 — Published Authority Consumption

Guard.localresolververificationcache
July 2026
  • Added Guard.local(authority="name@x.y.z") and the shared authority resolver boundary.
  • Added canonical Ledger authority_bundle.v1 verification across registry, bundle, contract, and computed hashes.
  • Added lifecycle-aware cache revalidation so revoked or superseded authority cannot remain trusted through stale cache reuse.
  • Rejected duplicate identities, ambiguous authority sources, and non-versioned references.
  • Verified the release with 194 tests, package builds, and clean-environment installation.
Why it matters: Ledger publication and Guard enforcement now meet at one explicit authority reference.

Guard Inspector v0.2.0 — Execution Investigation Workspace

investigationdecision pipelineCloud replay
July 1, 2026
  • Reframed Inspector around execution investigation instead of raw JSON artifact intake.
  • Added present, missing, and optional decision-pipeline states.
  • Added Cloud replay package intake and a dedicated Cloud handoff path.
  • Aligned Inspector examples and artifacts with the current Guard developer interface.
Boundary: Inspector explains recorded execution evidence. It does not author policy, evaluate admissibility, or rewrite the original decision.

Waveframe Cloud v0.3.0 — Production Infrastructure Baseline

PostgreSQLobject storageworkersdeployment gates
June 23, 2026
  • Added PostgreSQL-backed structured state and S3-compatible object storage.
  • Added background jobs for replay generation, exports, impact processing, and state-index rebuilding.
  • Added authentication, organization membership, production-readiness checks, and runtime configuration reporting.
  • Completed a 16-step production-local rehearsal using PostgreSQL and MinIO.
Boundary: Cloud distributes authority and preserves operational evidence. It does not replace Guard's local execution decision.

CRI-CORE v0.13.0 — Structured Enforcement Kernel

evaluate_structureddeterminismimmutabilitycommit_allowed
May 3, 2026
  • Moved the canonical enforcement interface from filesystem runs to structured in-memory inputs.
  • Added byte-stable deterministic payload generation and explicit contract-version enforcement.
  • Hardened contract-hash immutability, proposal immutability, and execution-mode propagation.
  • Fixed contract-hash overwrite, mode downgrade, schema loading, and non-deterministic archive generation.
Kernel invariant: CRI-CORE owns the deterministic commit_allowed result. Callers must not reconstruct or override that decision.

Waveframe Labs Website v2.3.0 — Product Architecture Normalization

navigationproduct hierarchyrelease ledger
July 18, 2026
  • Normalized the Updates page to the current shared navigation, brand system, spacing, footer, and mobile behavior.
  • Replaced the obsolete May release snapshot with the current Ledger, Guard, Cloud, Inspector, and CRI-CORE baselines.
  • Aligned public architecture language with the current authority publication, enforcement, preservation, and inspection lifecycle.
In Progress

Cloud v0.4.0 deployment MVP.

This is not yet listed as a released version.

Current work adds authenticated organization-scoped Guard preservation and retrieval, immutable preservation receipts, idempotent retries, tenant isolation, authority-bundle attachment, and interrupted-write recovery. The release target is focused on a clear deployable first-run path rather than expanding the product surface.