From 1fbc585252d69329c37ee990f3496b18a85f660d Mon Sep 17 00:00:00 2001 From: REPPL <77722411+REPPL@users.noreply.github.com> Date: Sat, 12 Sep 2026 05:51:15 +0100 Subject: [PATCH 1/2] docs: cut 0.6.0 Rolls the [Unreleased] entries into a dated heading, on the 0.5.0 precedent. This cut is what makes the documented install work again: install.sh on main hands over to `gropius install` inside the bundle it downloaded, and the published 0.5.0 binary predates that verb, so the one-line install refuses with the version-mismatch sentence until a release carrying the lifecycle verbs is published. The cut also ships the update verb, `gropius config show`, the panel's advertise control, and the checksum-scope security fix in both the bootstrap and the verb. Assisted-by: Claude:claude-fable-5-1 Claude-Session: https://claude.ai/code/session_01RooZgUESQnVnievtn48pHo --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 726ff566..d42d57a6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,8 @@ GitHub release notes. ## [Unreleased] +## [0.6.0] - 2026-09-12 + ### Changed - **The one-line installer hands over to the binary it just verified, and does From b754490e523cf2dc048b5a8d3d3c23ec39752580 Mon Sep 17 00:00:00 2001 From: REPPL <77722411+REPPL@users.noreply.github.com> Date: Sat, 12 Sep 2026 05:54:36 +0100 Subject: [PATCH 2/2] docs: the README names the update and config show verbs The docs-currency review before this cut found the feature list still describing four self-management verbs while the release ships six: `gropius update` and `gropius config show` were documented on the lifecycle pages and in the changelog but not on the front page. The two US spellings of notarised in prose are corrected to British English on the same pass. Assisted-by: Claude:claude-fable-5-1 Claude-Session: https://claude.ai/code/session_01RooZgUESQnVnievtn48pHo --- README.md | 28 +++++++++++++++++----------- 1 file changed, 17 insertions(+), 11 deletions(-) diff --git a/README.md b/README.md index 4fddc6f0..fd61aafc 100644 --- a/README.md +++ b/README.md @@ -30,7 +30,7 @@ leaves the models you downloaded. ## Status Experimental. Runs and is tested end-to-end on macOS 26 / Apple Silicon. -Cross-machine LAN use works; TLS and notarized distribution are not yet included. +Cross-machine LAN use works; TLS and notarised distribution are not yet included. ## Features @@ -94,15 +94,21 @@ Cross-machine LAN use works; TLS and notarized distribution are not yet included announced over Bonjour, what the request log writes down, and what is recorded and for how long — and says where Gropius's own view stops ([what each line is read from](docs/posture-reference.md)). -- **It installs, repairs, removes and diagnoses itself** — `gropius install` - does the provisioning in the foreground and, run again, repairs what is - missing rather than reinstalling what is not. `gropius uninstall` removes the - app, the runtime, the settings and the firewall entry every hand-written - instruction forgets, and leaves the models you downloaded with their size and - the flag that removes them too. `gropius doctor` separates what it verified - from what it could only observe — the firewall entry is never a verdict — and - says outright that Local Network Privacy cannot be determined from here, - rather than guessing it ([how to](docs/lifecycle.md), +- **It installs, updates, repairs, removes and diagnoses itself** — + `gropius install` does the provisioning in the foreground and, run again, + repairs what is missing rather than reinstalling what is not. + `gropius update` fetches the current release, verifies it against the + published checksums, swaps it in and reports two facts under two labels — + the version installed and the version this Mac is serving — saying plainly + when the second cannot be known rather than printing the first in its place. + `gropius uninstall` removes the app, the runtime, the settings and the + firewall entry every hand-written instruction forgets, and leaves the models + you downloaded with their size and the flag that removes them too. + `gropius doctor` separates what it verified from what it could only observe + — the firewall entry is never a verdict — and says outright that Local + Network Privacy cannot be determined from here, rather than guessing it. + `gropius config show` prints every setting in force, with the API key and + the HuggingFace token masked ([how to](docs/lifecycle.md), [reference](docs/lifecycle-reference.md)). - **Multi-account** — other user accounts on the same Mac share one copy of each model on disk and on the GPU. The models are shared; each account keeps its @@ -166,7 +172,7 @@ gh attestation verify Gropius.app.zip --repo intentdriven/Gropius ``` There is no offline signing key; building from source is the escape hatch. The -binaries are ad-hoc signed, not notarized; because the installer has verified +binaries are ad-hoc signed, not notarised; because the installer has verified the download, it clears the Gatekeeper quarantine so it launches without a prompt. The MLX runtime installs while `gropius install` runs, in the terminal and with a proportion (a few minutes); a launch from the Finder finishes what