Zayin/Ekklesia
3
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases 8 Wiki Activity

8 Releases 8 Tags

RSS Feed
  • v0.2.3 9e01679fcb
    Compare

    Ekklesia v0.2.3 — Native Verifier Hardening
    CI / verify (push) Successful in 1m8s
    Details
    CI / infrastructure-smoke (push) Successful in 28s
    Details
    CI / migration-smoke (push) Successful in 1m56s
    Details
    CI / package-release (push) Successful in 37s
    Details
    CI / image-build (push) Successful in 25s
    Details
    CI / deploy-smoke (same-origin) (push) Successful in 49s
    Details
    CI / deploy-smoke (split) (push) Successful in 1m22s
    Details
    CI / package-publication (push) Successful in 50s
    Details
    Pre-Release

    Zayin_Admin released this 2026-10-10 00:10:51 +00:00 | 7 commits to main since this release

    Ekklesia v0.2.3 fixes native Module Package verification in hardened environments.

    Highlights

    • Adds a dedicated executable verifier scratch location for native runtime probes.
    • Keeps general /tmp storage mounted noexec.
    • Preserves the hardened verifier boundary: non-root, read-only root filesystem, dropped capabilities, no unnecessary network access, and bounded ephemeral scratch.
    • Fixes verification of native Node addons such as sharp/libvips without weakening package verification.
    • Adds explicit verifier scratch configuration for supported hardened deployments.

    Compatibility

    There are no intentional breaking changes.

    • Module Package format remains v1.
    • Module manifest remains v8.
    • Database ABI remains v1.
    • Existing ^0.2.0 platform and module SDK compatibility ranges remain valid.

    Package train

    All public @ekklesia/* module-development packages are published as 0.2.3.

    Downloads