2026-08-26
v0.17.5
Two routes built the same payload, and only one of them signed
An image opened from the file tree reported that it could not be served from the current workspace. A list of callers is what missed the second caller.
2 posts
Blog
What broke, and what
the kernel actually does
The changelog lives in the repository. This is for the rest: the container faults, the kernel behaviours we had to measure, and the design arguments behind a refusal.
one page, newest first
2026-08-26
v0.17.1
The workspace moved after three processes were already confined to it
A migration that is correct on a host is a split brain in a container. The order of two startup steps is the whole bug.