hmm-model-v1 v0.8.3

medium risk

weave-os/routerJul 13, 2026 → Jul 16, 20263 days between releases

What's New

v0.8.3 introduces SOP engine, Wasm host, and security hardening.

Breaking Changes

  • Correction of prebuilts channel set to lean supported set

New Features

  • SOP engine with typed step contracts and daemon maintenance ticks
  • WebAssembly plugin host (wasmtime component model) for tools
  • Git forge channel supporting GitHub and Gitea
  • Self-contained desktop app as Tauri sidecar
  • MCP gains resources-as-context and named-prompt rendering

Improvements

  • Security hardening includes SSRF fixes and constant-time token comparison
  • Dependency bumps clearing vulnerabilities
  • Cost tracking gains task-attributed usage ledger and offline pricing catalog

Bug Fixes

  • Multiple SSRF gaps closed
  • Path-traversal fixes
  • Signing-key leak prevention

Upgrade Notes

Update prebuilts channel configuration to the lean supported set. The router artifact is replaced by the SOP engine and Wasm host, requiring updated configuration for step contracts. MCP context rendering now supports resources and named prompts.

The Two Releases

hmm-model-v1
Pre-release

HMM frozen model v1

Jul 13, 2026· 3 months ago

This release introduces a portable, frozen HMM router artifact designed for the companion policy sidecar. Built with the google/gemini-embedding-2 model (3072 dimensions), it is a runtime-only artifact optimized for the self-hostable HMM sidecar PR.

Full release notes
v0.8.3

v0.8.3

Jul 16, 2026· 3 months ago

v0.8.3 introduces the SOP engine, a WebAssembly plugin host, and a Git forge channel, alongside significant security hardening and a return of the self-contained desktop app.

Full release notes