ThirdKeyAI/Symbiont: v1.20.0 — local models, no-key evaluation, Helm chart, h2 DoS fix

Résumé fourni par la source

Adoption release. Evaluating Symbiont no longer requires a paid API key, and the first commands in the getting-started guide no longer break in CI or bury you in output. Security h2 upgraded to 0.4.19 — RUSTSEC-2026-0258, unbounded empty DATA frames. A remote peer could hold an HTTP/2 connection open sending empty DATA frames without bound, a denial-of-service vector on any surface the runtime serves. Release-binary signatures are now verified against a fully anchored cosign identity — the workflow file at a tag or main ref. The previous unanchored substring would have been satisfied by a certificate from any workflow in the repo, or from a similarly-named repo. Patched nanoid (GHSA-2v37-7h3g-55p8), dompurify (GHSA-55q2-fjhq-7xh7), postcss, js-yaml and brace-expansion in the bundled UIs. Added Local models work. Point OPENAI_BASE_URL at any OpenAI-compatible server — Ollama, vLLM, LM Studio, llama.cpp — and run an agent with no cloud key: export OPENAI_API_KEY=ollama export OPENAI_BASE_URL=http://localhost:11434/v1 export CHAT_MODEL=llama3.1 symbi run assistant --input '{"query":"hello"}' Two guards had to give way. reject_ssrf_url was applied to the operator's own base URL, and — less obviously — the HTTP client installed an SSRF-filtering DNS resolver, so even after the URL check was dropped 127.0.0.1 worked while localhost still failed at resolve time. The guard remains on every path where a destination is attacker-influenced (ToolClad HTTP backends, SchemaPin key discovery); only operator configuration is exempt, since it sits at the same trust level as the API key beside it. symbi dsl --check validates a .symbi file in one line and sets the exit code, so it can gate CI. Previously the advertised "Validate" step printed 164 lines of AST with no verdict. A Helm chart at deploy/helm/symbi. Policies mount from a ConfigMap whose checksum rolls the pods on edit; probes hit /api/v1/health/live and /api/v1/health/ready; the pod runs non-root with a read-only root filesystem. Charts were previously enterprise-only. Two offline examples — examples/policy-denial (the Cedar gate deciding allow/deny, and why the empty state is fail-closed) and examples/governed-tool (a .clad.toml refusing out-of-set and malformed arguments before a command exists). Both run with no API key. Changed symbi init no longer panics without a terminal. A non-TTY stdin implies --no-interact, so the guide's first command works in Dockerfiles, CI steps and piped shells instead of aborting with a Rust backtrace. The README and getting-started guide lead with the paths that need no API key. Mirrored into all five translations. Removed — breaking for library consumers The VectorDatabase trait, merged into VectorDb. Two identical traits (modulo health_check) covered the same job and every backend implemented both, with the VectorDb impls being pure forwarding shims. Nothing consumed dyn VectorDatabase. If you imported symbi_runtime::context::VectorDatabase, switch to VectorDb — same methods plus health_check. The DSL emit statement and on event handlers. Both parsed but terminated in stubs: emit discarded its payload and an on handler's body never executed, because nothing dispatches events. They appeared in neither the DSL spec, the docs, nor the published tree-sitter grammar. emit and on are no longer keywords and are usable as identifiers. The shell's /exec and /verify commands, which returned "not yet connected". Deprecated CustomDeliveryHandler / register_custom_handler. No implementation or caller exists, so DeliveryChannel::Custom always misses. Slated for removal. Install cargo install symbi # or docker pull ghcr.io/thirdkeyai/symbi:v1.20.0 Full changelog: https://github.com/ThirdKeyAI/Symbiont/blob/main/CHANGELOG.md

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.