Open Abstractions
Evidence
A useful result names the source revision, environment, caller, provider, action, and observable outcome. Coverage turns those records into current capability verdicts.
The release notes list the attached packages, checksums, signing state and package verification.
One shared runtime now brings durable jobs and downloads, AI inference, service-held credentials, application presence and operator controls together. Download 0.2.0 or read the release verification report.
Both per-user and machine installation passed on x64, including upgrade from 0.1.7, reinstall, failed-upgrade rollback, startup in a fresh session, crash recovery and removal. The MSI is unsigned. ARM64 is cross-built and has no hardware installation evidence.
A disposable Ubuntu account installed the runtime under its systemd user manager, downloaded and verified bytes, observed the completed job and removed the installation while retaining user data. Installation and removal without a user manager also passed. ARM64 installation remains untested.
The universal package is signed, notarised and stapled. Local launchd lifecycle checks passed separately. Protected service calls still lack the required caller proof; this release makes no macOS capability-readiness claim. The final signed package still needs end-user installation qualification.
The packaging candidate and final release workflow passed. All five downloaded packages matched SHA256SUMS. Each capability's language checks retain their own scope in coverage.
A coding-agent integration exercised chat through OA's mediated native provider route, including tool use, operation ownership, cancellation, lost-reply reconciliation, restart, audit attribution, and revoked-rights refusal.
A closed image editor was activated through OA, announced readiness from its own process, bound actions to the current workflow, previewed a change, applied it separately, read it back, and refused stale context.
The image-editor adopter submits retained download jobs, observes them across reconnects, and can use the service-selected shared storage backend. Replacement and restart paths have focused evidence.
Focused checks cover permission decisions for named programs, provider and application visibility, permission to open apps, revisioned configuration, log reading and observation, credential metadata, and structured diagnostic results.
Capability, language, and platform cells carry the reviewed current verdict and its public evidence route where available.
Contracts, generated clients, runtime composition, focused tests, and source adopters make the checked boundary inspectable.
ComfyUI is a node-based image generation editor. Its adopter shows durable download, storage, logging, application presence, and workflow interaction integration points.
Dated transcripts preserve older cross-language, transfer, identity, and lifecycle observations. Their scope belongs to the recorded revision.