Skip to main content

Library changes

Skulk Library is versioned separately from the portable core. Releases are tagged library-v*; versions without a tag are source previews installed from main (see README).

Unreleased​

  • Prepare Mac build 8 / Linux revision 3 from the authenticated public core 0.26 / Library 0.22 installation archive. Native signing/publication and signed apt indexes remain distinct gates. Require the new first-launch controls during native Linux qualification and use their recovery-kit entry for GUI recovery.

0.22.0​

  • Add guided first-launch choices and reusable install/find/preserve/share/recover help, retaining Library for returning users and the Horizon interface.

  • Offer sending a complete recovery kit separately from public-mirror preparation. Explain private metadata, encryption limits and sender reachability.

  • Provide copyable recipient instructions with exact saved capture identifiers; opening or copying them enrolls no keys and starts no job.

  • Explain download working space before consent and keep low-space starts disabled.

  • Refresh saved discovery results after an explicit listing update even when Activity has no new visible job. Pair with independent core 0.26.0.

  • Advance both independent native recipes to the published Library 0.21.0 and core 0.25.0 cohort. Keep runtime pins and model/source trust unchanged.

0.21.0​

  • Add Horizon backup destinations, verified complete recovery kits, separate public-copy review and finite HTTP sharing, and offline recipient handoff.

  • Start Find with complete preservation selections and offer explicitly reviewed alternate routes from followed sources for the exact signed capture. Keep model keys, connection permissions and private receiving separate.

  • Preserve original public identities with omitted defaults, Unicode backup paths and correct previous-page navigation. Prevent repeated More clicks while the requested page is loading.

  • Pair independent desktop installation with public core 0.25.0. Native package input pins and signing/publication remain separate from this Python release.

  • Advance the optional Core-backed preview to the verified companion-recovery and model-description host revision. The immutable installer checksum stays unchanged; existing preview data and separate runtime/code permissions remain.

  • Explain required repository-code permission accurately for Skulk recovery and point to standalone files-only recovery when that permission is not desired. Keep the separate code/provenance gates. Unselected backup storage no longer implies that a model was successfully recovered.

  • Explain a missing or size-conflicting signed companion while keeping its listing browsable and its download disabled. Preserve the Horizon interface, independent trust decisions and receive-only defaults.

0.20.0​

  • Apply the Sovereign Horizon design across Find, Library, Activity, reviews and every Core-backed area: starry backdrop and glass panel, pill navigation, Sovereign logo, amber primary actions and explanatory popovers. The companion warning keeps its full meaning in the "Companion file" popover. API calls, confirmations, consent and review steps are unchanged.

0.19.0​

  • Show readable uses, declared inputs and outputs in Find, Library and shared Core-host model information. Image understanding appears alongside text use; video understanding, video generation, speech directions and document-search models remain distinct. Older hosts keep task-based descriptions.
  • Explain unlisted image companions and incomplete file-version claims without treating descriptions, automated interpretations or repository inventories as runtime qualification or verified download completeness.
  • Keep additional automated interpretations in attributed, unverified notes; main capability labels use declared cards and structured source evidence.
  • Preserve the source of capability information and unknown metadata. Pair the independent desktop profile with public core 0.24.0; native packaging and Core host adoption remain separate from this Python/UI release.

0.18.0​

  • Render optional Core-host card descriptions and saved-copy metadata in Library; show each source listing’s declared purposes in Find without merging its claims with signed cards. Older hosts keep working with honest missing-data states.

  • Recognize code generation, visual question answering and reranking in source listings. Explain that source descriptions do not establish registry trust.

  • Put model purpose and preserved descriptions before technical identity in the independent Find and Library screens. Add local saved-model search, everyday purpose filters, source/license/context details and honest missing-data states.

  • Group matching descriptions on each catalog page while keeping file variants, exact card reviews and consent separate. Count model versions explicitly.

  • Explain digital fingerprints and verification keys beside their exact values. Add contextual help usable by hover, keyboard and touch, and explain recovery kits, restored folders, storage sizes and advanced download allowances.

  • Translate active stages, terminal states and unknown errors into readable guidance; remove authoring notes from accessible logo descriptions. Shared identity/help components also apply to Skulk Library. Core-host metadata adoption and native/public package publication remain separate deliveries.

0.17.0​

  • Add independent source/cache review, authenticated updates, offline attributed search and signed model-detail inspection in Sovereign's Find models area.
  • Require a separate original capture-key decision before Download & preserve. Keep source-update, metadata and payload connection permissions separate; no new serving, router, runtime execution or global key enrollment starts.
  • Preserve complete companion closure, original envelopes/cards and public source-key candidates through private PMF custody, recovery kits and restore.
  • Fence delayed source responses after membership changes and dismissal. Keep newer navigation and trust decisions authoritative while durable jobs persist.
  • Apply the supplied Sovereign branding to the independent app and Skulk Library. Include native icon assets in the Mac recipe; native public delivery is separate.
  • Pair the independent desktop profile with core 0.22.0. Keep the existing Core-backed and managed interfaces with their separate compatible Core pin.

0.16.0​

  • Add independent foxlight-sovereign with Find models, Library and Activity. Start with authenticated public catalog browsing; keep search local/offline. Review complete mapped selections before private download/preservation.
  • Open complete recovery kits, show exact capture keys/thresholds and restore files without Core or a registry. Save a kit with one action and native download dialog; reopen directly into Library once copies exist. Preserve the existing Core-backed launcher and managed adapter.
  • Add a self-contained Mac source-preview shell, native file dialogs and safe owner shutdown. Disable runtime bytecode writes inside the sealed bundle. This does not by itself publish a notarized Mac app or an APT package.
  • Include the public core wheel and hash-locked requirements-desktop.lock in v2 installation archives. Default installation remains the Core client; the explicitly selected desktop profile installs both verified public wheels with no private SDK, Python source build, runtime service, model trust or sharing.

0.15.0​

  • Check a pending mirror copy's local bytes from Library, Guided first launch and Sharing, using its original accepted model authority and current policy.
  • Observe durable progress and Stop after client loss. Retry an ambiguous submission as the same check; another check names an exact terminal receipt.
  • Keep pin/block and deletion choices, clear sharing restart permission, and receive no replacement bytes or new trust. Incomplete copies stay pending.
  • Offer the existing recovery-kit journey only after retained custody and check completion. Preserve original envelopes, card extensions, companions and notices.
  • Negotiate pending recovery separately from retained-kit support, so older hosts keep their existing controls. Include mirror cases in SDK-free package CI.
  • Pin compatible Core 446079c2417f1b8ef5bef0934e605b73654e4e47. Source-fed intake without a retained original wrapper remains a separate durability gap. This GUI requires compatible Core; standalone preservation remains Skulk-free.

0.14.0​

  • Recover retained mirror copies from Library, including first launch and loss of the original import or copy receipt. Review complete signed member metadata.
  • Prepare a separate recovery kit as a durable host job, reopen its outcome, and stream the exact sealed file with HEAD/range/If-Range support.
  • Keep preparation separate from sharing. Retry the same explicit preparation after a lost response without creating another kit; preparing another kit requires another operator decision.
  • Confirm removal of one preparation's kit files separately from retained-model removal. No automatic cleanup, eviction or new trust grant is introduced.
  • Keep earlier preparations accessible for their own download and cleanup after another preparation, including failed replacements, pagination and loss of the original import or retained-model metadata.
  • Require the existing blocked, unpinned and stopped model state before offering mirror-copy removal, and explain the separate blocking step before deletion.
  • Look up the exact retained identity before reintake, including removed records beyond the displayed page. Negotiate the new recovery contract separately; older hosts retain existing sharing and Stop controls.
  • Pin integrated Core 246fe15cc8702ba7037bb967db6cf80675bc1ea5. The GUI still needs compatible Core; standalone preservation does not require Skulk.

0.13.0​

  • Manage separate retained public copies from Sharing: explicit resource settings, HTTP/IPFS/BitTorrent choices, complete member-term review and durable jobs.
  • Keep Start, Stop and expiring restart permission separate. Observe the actual controller after reopening Library; Stop remains available through stale or failed receipts and while another intake cancellation is pending.
  • Add pin, block, retry and exact confirmed removal controls. Keep unavailable storage distinct from an empty mirror; no automatic eviction or trust grants.
  • Check versioned Core authority/lifecycle schemas and complete review separately, preserving existing Stop when a host lacks the new intake review endpoint.
  • Pin the accepted Core source for public-copy review and persistent ownership. Preserve original cards, companions and signed provenance; direct public PMF mirror transport and retained-copy recipient export remain separate work.

0.12.0​

  • Follow authenticated sources through an explicitly selected I2P HTTP proxy; saved source refreshes and model details bind the exact retained local policy.
  • Receive through I2P with separate model-key/exact-copy and network consent. Resume shows the original proxy and keeps the same job, partials and allowance.
  • Check actual Core schemas before offering I2P controls; refuse unsupported I2P-only references and mixed grants without direct fallback or payload sharing.
  • Pin the compatible Core with retained receiving-policy previews. Keep the public Library launcher SDK-optional and standalone preservation Skulk-free.
  • Document the functional pilot and its unqualified public privacy/performance boundaries. No router setup or application-wide anonymity mode is implied.

0.11.0​

  • Include a hash-locked public installation archive and exact source evidence. Local release installs can reuse the authenticated cohort for separate Core preview setup after checking retained wheel and actual installed bytes.

  • Share an exact public copy through a finite Core-owned peer session and send one .foxhandoff file. Download remains available after reload or Stop.

  • Import model/source files with reviewable contact suggestions, preserving original signatures and separate model, source, code and network decisions.

  • Keep explicit cache cleanup, retained archives and no restart replay; preserve HTTP invitation compatibility with older Core. Standalone tools need no Skulk.

0.10.0 (source preview)​

  • Guide verified peer software setup: Library can install the pinned Kubo runtime through Core, and offers explicit repair after the runtime is lost.

0.9.0 (source preview)​

  • Connect Library and Guided to reviewed peer discovery and receiving: .foxpeer sources, starting contacts, .foxpeer-model invitations and resumable receives.

0.8.0 (source preview)​

  • Add source following, Sources & updates, offline search and reviewed model downloads from followed sources.

0.7.0 (source preview)​

  • Preserve in Portable Model Format automatically; Check, recovery kits and Restore detect PMF and legacy copies without a format selector.

0.6.0​

  • Add reviewed local/mounted-folder backup storage, a durable default destination, per-copy availability, the pinned isolated Core preview installer and --check.

0.5.0​

  • Add Publish, Share with someone, Receive shared model and download-resume review.

0.4.1​

  • Fix navigation out of public import; add Activity review and explicit cleanup of stopped sharing/import work. Saved copies, keys, kits and metainfo remain.

0.4.0​

  • Add public-only signed bundle import, bounded HTTP mirrors and opt-in BitTorrent sharing through Core-owned jobs, with metainfo and public-key downloads.

0.3.0​

  • Make the local launcher publicly installable without the managed SDK, and add explicit cleanup of unused stopped-restore files.

0.2.0​

  • Add recovery kit export/download and complete restore, including on a fresh Core.

0.1.0​

  • Initial Library capability preview: Guided setup, Library and Activity over Core's durable preservation jobs.