Changelog
These are the development releases before the first wave. Every one is signed and published; aromba update moves a server between them. Security fixes get their own line, always.
v0.1.61 24 September 2026
- A dashboard at aro.mba/app. Sign in with the Telegram account your server is paired to, and every page is a link away: what is on the machine, its health over a day, its jobs, its receipts, what it did, what it raised, its skills, what it set aside, and what the Warden will and will not do. It shows what the server said and works nothing out for itself — two opinions about one machine is one of them wrong.
- Share a link. One button turns what is on your server, or its week, into a page anybody can open, with an image sized for wherever you post it. Every name, path and domain stays on the server: an app is drawn as "app 2". It is a snapshot, so it does not update, and one tap takes it down for good.
- A status page at aro.mba/status: whether the relay is carrying messages, since when, and how many servers are connected. It also says what it cannot tell you, because it runs on the machine it reports on. Either way your server carries on — chores run, watchers watch, and the chat queues and arrives in order.
v0.1.48 23 September 2026
- Voice. Send a voice message and this server answers it: whisper runs on the machine, in a cage with no network, and nothing you say leaves it — no account anywhere, no key, no request. Offered once, the first time you send one. 145 MB, and it says so before it fetches anything.
- Security: a write the Warden makes was not recorded in its own integrity baseline, so the next start read its state file as changed behind its back and locked the server down — every chore refused, every update refused. Installing the voice skill was enough to trigger it.
v0.1.46 23 September 2026
- Security: a skill's assistant tool, and the transcription, ran in a cage that did not hide /run — where the Warden's own socket is. Nothing could reach it, because the cage's seccomp filter refuses Unix sockets outright, but the folder should not have been there. One list now builds what every cage hides.
- A capability skill keeps its program as root, not as the unprivileged half that downloaded it.
v0.1.43 23 September 2026
- Skills: a catalog at aro.mba/skills, signed with the release key. Chores for a stack, runbooks the assistant reads, tools it can call, and bundles that install a whole stack with one tap. Every skill shows its weight and what it may write before it installs.
- The relay's own token is fenced, so nothing on the server can read it.
v0.1.37 23 September 2026
- The assistant answers "why is the site down". It reads the unit's journal, the container's log and the process on the port, says what it found, and puts the fix on a button. It proposes; a tap runs it. A typical question costs under a cent.
- A question it can answer from what it already has costs nothing and says so.
v0.1.35 23 September 2026
- A filesystem out of inodes refuses every write while df shows it half empty. The watcher, the scan and the assistant all read that now, and the alert says which it is.
v0.1.11 22 September 2026
- /status names the model that answers, once a key is set.
v0.1.10 22 September 2026
- Security: the cage loads a seccomp filter that refuses Unix sockets outright, so no chore can reach a daemon's socket even if one were left visible. Every shipped chore runs under it in the test suite.
v0.1.9 22 September 2026
- The end of a security review of the Warden, twenty-five rounds: each round is its own release, and the last three closed how an update reads the unprivileged half's files, what a rollback touches when it cannot roll back, and how a folder of root's is handed to its owner.