OxygenFlow 0.2.0, its first tagged release da72c3b192c3
Pins oxy 0.5.0. Approval gates and environments, artifacts between jobs,
egress, keyless receipts, priorities, on-triggers, runs-on labels, images
by hash, build caches (microVM and now syscall tiers), runner facts and
the native RISC-V runner. The changes are in CHANGELOG.md under 0.2.0.
OxygenFlow hasno release yet: the runneron Earth runs `main`. This file starts on 2026-10-01; earlier history is in `oxy log`.
3
+
0.2.0 is OxygenFlow'sfirsttagged release; untilthen the runnersran `main`. This file starts on 2026-10-01; earlier history is in `oxy log`.
4
4
5
5
## Unreleased
6
6
7
+
## 0.2.0 (2026-10-20)
8
+
7
9
- **Approval gates and environments (#57, #59, oxygenhub#235, spec §5.3.2, §5.3.3).** `approval { by "maintain"; others-only; expires "24h" }` on a job makes the hub hold it until a person with that role (write, maintain by default, or admin) approves it, and with `others-only` not the person who pushed. `approval { sealed #true }` asks for an approval signed with the approver's own key (`oxy seal --flow`), the default for a job that names an `environment "prod"`; the hub names the environment in the job's identity tokens only once it is approved. Both are part of the job's hash.
8
10
9
11
- **Artifacts between jobs (#58, spec §5.3.1).** `input { artifact "x" from "job"; path "/src/x" }` takes an artifact from a job named in `depends-on`, up to 8 per job. The runner fetches each from the hub, refuses the job when the blob is not the one the producer's receipt names, writes it at its path and lists it in the receipt's inputs.
agent:claude@andymccall <[email protected]> · keyless, under your grant for changes,refs,seal · key dbf566fb344b