release: v0.1.0-Release - the Sovereign AI foundation. Repaired assets, softened claims, and canonicalized versioning.

Author: anandkrshnn

CHANGELOG.md

@@ -5,39 +5,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [0.3.0] - 2026-04-14
+## [0.1.0] - 2026-04-14 - Official Release
 
-### Added
-- **Sovereign Vaults**: AES-256 encrypted storage silos with secure password-based derivation and key rotation.
+### ✨ Production Foundation
+- **Sovereign Vaults**: Multi-tenant AES-256 encrypted storage silos with secure password-based derivation.
+- **Local Permission Broker (LPB)**: Core security engine with JIT token-based authorization and 60s TTL.
 - **Governed Learning**: Added `PromotionPipeline` for candidate memory rule generation and human-in-the-loop promotion.
 - **Policy Simulation**: Backtest engine to simulate policy impact against historical episodes before activation.
-- **Cross-Platform Hardening**: Refactored core path management via `VaultContext` to support environment-aware deployment (`LOCAL_AGENT_VAULT`, `LOCAL_AGENT_SANDBOX`).
-- **Visual Architecture**: Integrated Mermaid-based security diagrams and high-fidelity demo assets.
+- **Airlock Gateway**: Zero-trust LLM isolation with automated interception of sensitive tool calls.
+- **Immutable Audit Trail**: Tamper-evident trail of all agent actions, user approvals, and security tokens.
 
-### Changed
-- **CI/CD Overhaul**: Refactored GitHub Actions for automated Docker builds and publication to `ghcr.io`.
-- **Repo Hygiene**: Streamlined repository by removing legacy `frontend/`, `requirements.txt`, and `setup.py`, canonicalizing all build logic in `pyproject.toml`.
-- **Security Posture**: Hardened LPB (Local Permission Broker) with improved resource normalization and better error handling.
-- **Onboarding**: Added `examples/getting_started.py` for immediate developer onboarding.
+### 🛠️ Infrastructure & UX
+- **Environment-Aware Core**: Full support for `LOCAL_AGENT_VAULT` and `LOCAL_AGENT_SANDBOX` for cross-platform stability.
+- **Docker-First Deployment**: Streamlined distribution via `ghcr.io` and one-liner `docker-run.sh`.
+- **Dashboard v1.0**: High-end cyber-glass UI for Command, Brain, and Compliance management.
+- **Developer Ergonomics**: Canonicalized around `pyproject.toml` with a "Getting Started" example suite.
 
 ---
 
-## [0.1.0] - 2026-04-10
-
-### Added
-- **Local Permission Broker (LPB)**: Core security engine with JIT token-based authorization.
-- **Semantic Memory Engine**: DuckDB-powered vector memory for conceptual recall.
-- **Secure Sandbox**: Path-restricted file execution environment.
-- **Audit Logging**: Immutable SQLite trail of all agent actions and user approvals.
-- **Web Dashboard**: Real-time interface for chat and permission management.
-- **CLI Interface**: Command-line tools for local interaction.
-
-### Changed
-- Initial public release and repository standardization.
-- Hardened token TTL to 60 seconds.
-- Simplified dependency chain for lightweight local-first operation.
-
----
-
-[0.3.0]: https://github.com/anandkrshnn/local-agent/releases/tag/v0.3.0
 [0.1.0]: https://github.com/anandkrshnn/local-agent/releases/tag/v0.1.0

Dockerfile

@@ -1,4 +1,4 @@
-# 🛡️ LocalAgent Sovereign AI Container (v0.3.0)
+# 🛡️ LocalAgent Sovereign AI Container (v0.1.0)
 FROM python:3.11-slim
 
 # Install system dependencies
@@ -22,7 +22,7 @@ EXPOSE 8000
 
 # Metadata
 ENV NAME="LocalAgent"
-ENV VERSION="0.3.0"
+ENV VERSION="0.1.0"
 ENV LOCAL_AGENT_VAULT="/app/vaults"
 
 # Entry point: Start the unified dashboard and security broker

README.md

@@ -1,15 +1,19 @@
-# 🛡️ LocalAgent v0.3.0 — Sovereign Local AI Agent
+# 🛡️ LocalAgent v0.1.0 — Sovereign Local AI Agent
 
-**PolicyEngine vaults. Deny-first governance. IETF PTV compliant. Zero cloud.**
+**Production foundation:** Encrypted vaults, policy engine, 
+multi-vault isolation. Built for real-world use from day one.
 
-[![Dashboard](https://github.com/anandkrshnn/local-agent/releases/download/v0.3.0/demo.gif)](https://github.com/anandkrshnn/local-agent/releases/tag/v0.3.0)
+[![Dashboard](docs/demo.webp)](https://github.com/anandkrshnn/local-agent)
 
 ## 🚀 60-second Launch
 
 **Docker (Recommended)**:
 ```bash
+# Security tip: Inspect before running
+curl -sSL https://raw.githubusercontent.com/anandkrshnn/local-agent/main/docker-run.sh | less
+
+# Run the installer
 curl -sSL https://raw.githubusercontent.com/anandkrshnn/local-agent/main/docker-run.sh | bash
-# http://localhost:8000
 ```
 
 **Docker Compose**:
@@ -23,9 +27,9 @@ docker-compose up -d
 
 1. **PolicyEngine** — Semantic deny-first policies
 2. **Airlock Gateway** — Zero-trust LLM isolation  
-3. **Encrypted Vaults** — AES-256 + rotation
-4. **Audit Trail** — Immutable SCITT receipts
-5. **Multi-Vault** — Healthcare/Finance silos
+3. **Encrypted Vaults** — AES-256 isolation
+4. **Audit Trail** — Immutable action receipts
+5. **Multi-Vault** — Healthcare/Finance contexts
 
 ## 🏗️ Architecture Overview
 
@@ -80,9 +84,9 @@ The deployment:
 [Watch Dashboard Flow (Animated)](docs/demo.webp)
 
 ## 🤝 Enterprise / Compliance
-- **IETF PTV Author** — RATS WG attested identity
-- **EU AI Act / NIST** ready policy framework
-- Private deployments: [Contact](mailto:ananda.krishnan@hotmail.com)
+- **IETF-Ready** — Designing for RATS WG attestation standards
+- **EU AI Act / NIST** — Policy system designed for risk-based governance
+- **Pilot Partners** — Seeking collaborators in healthcare and finance [Contact](mailto:ananda.krishnan@hotmail.com)
 
 ## 🙌 Community
 ⭐ Star if sovereign AI resonates  

docker-compose.yml

@@ -1,7 +1,7 @@
 version: '3.8'
 services:
   local-agent:
-    image: anandkrshnn/local-agent:v0.3.0
+    image: anandkrshnn/local-agent:v0.1.0
     container_name: local-agent
     ports:
       - "8000:8000"

docker-run.sh

@@ -1,10 +1,11 @@
 #!/bin/bash
-# LocalAgent v0.3.0 — 1-click sovereign AI
+# LocalAgent v0.1.0 — 1-click sovereign AI
 
 set -e
 
-echo "🛡️ Launching LocalAgent v0.3.0..."
-echo "Image: anandkrshnn/local-agent:v0.3.0"
+echo "🛡️ Launching LocalAgent v0.1.0..."
+DEFAULT_IMAGE="ghcr.io/anandkrshnn/local-agent:v0.1.0"
+DEFAULT_TAG="v0.1.0"
 
 # Create vaults dir
 mkdir -p ~/local-agent/vaults
@@ -15,7 +16,7 @@ docker run -d \
   -p 8000:8000 \
   -v $HOME/local-agent/vaults:/app/vaults \
   --restart unless-stopped \
-  anandkrshnn/local-agent:v0.3.0
+  anandkrshnn/local-agent:v0.1.0
 
 echo "✅ Live: http://localhost:8000"
 echo "📁 Vaults: $HOME/local-agent/vaults"

localagent/__init__.py

@@ -6,6 +6,6 @@
 from .memory import MemoryEngine
 from .config import Config
 
-__version__ = "0.3.0"
+__version__ = "0.1.0"
 
 __all__ = ["LocalAgent", "LocalPermissionBroker", "SandboxPath", "MemoryEngine", "Config"]

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "localagent"
-version = "0.3.0"
+version = "0.1.0"
 description = "A lightweight local-first AI agent with Just-in-Time Permission Broker for safe SLM tool execution"
 readme = "README.md"
 requires-python = ">=3.9"
@@ -17,8 +17,8 @@ dependencies = [
     "python-jose[cryptography]",
     "psutil",
     "jinja2",
-    "lancedb",
-    "pyarrow",
+    "lancedb>=0.5.0",
+    "pyarrow>=15.0.0",
 ]
 
 [project.scripts]

vaults/SovereignDemo/.vault_salt

@@ -0,0 +1 @@
+���p^�$�q�ĭ9��K

vaults/SovereignDemo/decision_traces.jsonl

@@ -0,0 +1,2 @@
+gAAAAABp3cFPRrsK_7b2Wd1GxrH18tH4GQx1tD08NfVsbPxwKbbyu9RtA30MudCUFQYElRdGhA68YNeg7TvxM3YMFD90YfT0kwXbLidjOkytxBzFUbdSVTj6aArYtwVtvTAIG6HLcq7TyA-D__thdsl-7lNeWV_997BcAEkeqtJ40rHs0XyJqoK4nVyGNcSDVRv08B5PhnI7O4q4-alxbfCsKjrG2dJiOY_sEnzfX2m-BIi3jS1QVSuqk46C3noutnc9KCy4ckQSSP90AeHdyUUFmLf0LWXwFHVRfO4qCfdIUJEogAdE8b1XagYQCbAjARlhH2qVfnFFhVZSQrK5mYZwYVQubAJLZsbDoezb4sN5bCM0GW52nmselFAC31jtdV-0ok1QjFyCEnj74Nna0iQAHkxb3O6WDIlcCD3Gd-5ddnbkjFYZWRMVvY22EPkG5mYLeYVDHOwa33yPR-SaB-WwQjIcd56uexrQYJ9lVg4FCnI__2isWOMI6TyMqjck_TQ-xjh2FWr5sgN-RtKUfxd0fLSGKR_P8hwVxwy6CmM2MPqV_Cq9kCP8R8LwRC8lizrvvMUVjmCEapmJ2WqCXRxExGAmuZ3Mor-Oos_DLYUfHE7O3mmm7yrG5OU4KAcnoCNWOKz963IZ5PPSGLYH1m1B0-1Y6454glkZydueW__3i2CNyQf2NaTefUjO2w60s6s_-YzS_nnnn8eWbeWxJQbqjY3CB3l4ql3CKGLHUflugGsI8_BOeCDhu--rGHYNgj8y7-hP8NHNn5J47ELwu-SbYAc45mK_8E4ZM4BbBoUn8rQvNC-8fmchXCfyfeEtxw-gyF8fUA9kpBNd0s6NVP4lMD7SrogVczi8AY4PWF5zhRUgoSID25CnUYQSlpSTPPO5a-CC65gU6w4ux_PgVqVEKNTUoGHPlr8ZPcZ5l2ScEBPuExj_Oo7BKOw-LFVcy516QnrisWMidX-DFwUqYCWCfnf3dQzXviHZ-cpnZ7OZmMuPhDJW6V6hfv8gmt8bxRMlGaTjuq_80zxWEsmbQwMzTLHOLz3TSJMxfc7IL3BejMUcLiCB8d40nkxZoCTeB-2VV7JUF2rlHgIMnELkfch8xChlgEvSt_3bnuYkuCZ0QAMtkxRiaMt_LJIM6vgfiC-b0jFGfMz3bkI2_ZejM2WAICxd-GLv89QPf4tFzjlis7vvBd1bhxwqB8Hs89MAr9HDY2NYJcMYaLNOvuEiz6DMXnrdkUfbi7K-vTLDy0wPwE2z8J2Yppjve-M1DRjeD3rM90GWZppHdkXMU145pPRPnevKcvz1JkOlJBRI6iqnYvlF3uuCLk2Tygq62JWDCf6APSuNcUizZt3H4ASr0S5oxjqmSCbCb3WRVFdbbYEG9UrvFjKCbLEA7rU5NbusRvx8OMbVvWw8DDlzfUFuJLwczdjWzjcK6T0-nKDaUtzqIbxcQjRmodJrrzDdsQqii58BzwjIEA8VeTcSUAlUdYC8JJGE4lBoYjY1x_nz9SUpbBJbpK7H7rX6Oqk34OneIs_tSMza2DvOoSFHIpiuSygQUThSflEdvXNEtWKYJ6F2caqdSH55FEHPFL2wnIAl8gFbxvzF8SndZdL1pNzh8tA_3VBIA3wzekXvrIvRYaQADXW5tlc4AsSvKBkYoDuRGVIr3k52qidjgTQkVgZkhjv6BligUVGDCP4fVKUp8U2DXUa57dnsq-Lhojaixs6AkVbhXWho-OvkfuxKxQ36Gl8MQfMGp5XhuYd56zVfFcs4gUI1I7HQseVuUll6HfKoh47BM8w-rb-kiFHK4w9Ei7yIdT2AaFsprvKNgtN_TNv8oBfBBAFIhbsRn2zxjag4OqgpgDyB-eBtAeW175DYRLx3jnPK4vmt6QGq2wefoN-aShKQJJc06-vffAtDpomJXhVxCmRAUcu1jtEa-bHiHs8a1Vj2nn4QYAJCPMWlqxEK9ldDAJF8WPvIF2z4YYVytAj65FKAj3rd3Ipiko4Od1Pw4Ajud8riSp0pgUntOjVQ24nXakAlf4D__WX3JzoBD1xn2JkbyksrSgoS3Ujf4vdcXyGNW0xTf3Dv2LUL1_uasreNUgwoqGLKClkinJ5CYxC411VNpMeVYZHrLOQArzx1sd2-q0gsNggLdkPD1Wo_k149qJdGCkj2BZgaiWKmv9BRrS6qv68sCI_ShgO-zLqtn2FzZcffRCpHwkn24VOgQcX4VmbYorJ6HEDwTLqJvqbP5NBYoJwHm_g8oijxeQyOCrvIcj4NaZpQfpoZGDv8LKDTc40t2KviEg-Bq2lf--4br3A5bo3GoYGhuyyYWtdBBhfrbZEC6tv2K6kLODK8nfAvXjW2ThE3fQ45PXSpqUbLNVcdV-5kuP2McmdXUYfbxXYzekUx85brxkvIvhtOAE2FxTQw6sC3sGqTe7ynHWFZDmnXQO1XGKxfcF70PcZEzEMnNcAvu8KhjHhOX8xs3pQCNDIs-fHKBSlTLQ1hMX3grmAyOWZepTVTNUdOQpY96zLD_OFrbvP1P6zVRtSiTTTYiJVnUDyaX6fKnykfMMS0NXYIj2plM12-iYER3tsrEU9WbuKeAA==
+gAAAAABp3cGlJX_0TObgCTIJzKl3Sz7GAsMTaFNJpgU_dlrSgWpHFns8iX4WzyreK-1EN5HKgJ6jXHXKPbCJ24Qv8Bh9mnpBc20K_19-56DMW3FD8p75ARKvw3e0jwLkl7iXA213h1Ds_covv2eE3gMadVuv4tM1BXta0B3MHk37wCbo8fj4SmtAA-Z9aAjhiii9I_KeBElWoscmkur_iRPYVhz1Zg0v2qtcsTUpOiaAcs5SMy0Vbn55HwOALT-mMQfX3CQo1r0RrN6hAk8x4vKjeKbtD7dSwc4S3mNAzlEvosqm3s5iZHWVAn9u1W7src0EaTVAe5zth7zfdUTdO_-4aWpnSbJfuHwpH0KOGtVqrZBlKmnrx0j958OckocJDn6CmpQ61PpDwsPCjNLnYIUpY1Uuct976zg_jrQtgUIRjZUCZhm2BTjX2tz9crpur9sYP9LGj90CsOQd2et6pPVyp5XYrBZjflR-SUl8tMY_s0bR0uJ09qiNWNZ-ABgqQOZiyRvNZh8DcS98vBtBRXkGTlj8ne-qms2owoQaW3-Rs1iY7VfQCGpfN8r1LLshM6JJIVq7um5Gje6QCKrdunXS2YQJKZaoIw18_rVt2ThVsvJq-9tVElbP0YMLbo0U7aF6kQxVAT3_oK1rdHr9BOBB3JW_evVmbW75919WUDZ6dgFwZz1O2abe6w3UQbbKO5MxBVGgu5Pew9XjL8tL0hhI9S4fjul-thPO4cVzZQXC-g43Wscwm1xqDKj06Y3y4z0rxkViQ1hJsmdpxrEnKdpkcMy9-Lbytw==

vaults/SovereignDemo/memory.lance/episodes.lance/_transactions/0-299764e7-0173-48e0-b877-97f04000857a.txn

@@ -0,0 +1,9 @@
+$299764e7-0173-48e0-b877-97f04000857a��#
+episode_id ���������
*string0
8%
+session_id
 ���������
*string0
8"user_id ���������
*string0
8+event_ts ���������
*timestamp:us:-0
8
%
+event_type ���������
*string0
8 actor ���������
*string0
8'content_text ���������
*string0
8'content_json ���������
*string0
8$	tool_name ���������
*string0
8'resource_ref	 ���������
*string0
8,sensitivity_label
+ ���������
*string0
8%
+provenance ���������
*string0
8-
+created_at ���������
*timestamp:us:-0
8
"!
+lance.auto_cleanup.interval20"'
+lance.auto_cleanup.older_than14days