KnowledgeOS Workbench v0.1.1

KnowledgeOS Workbench v0.1.1

This is a patch release for the packaged macOS Workbench app.

What changed

• Hardened the local Workbench preview bridge: workbench-preview now refuses non-loopback hosts such as 0.0.0.0 and only permits loopback hosts (127.0.0.1, ::1, or localhost).
• Rebuilt the bundled KnowledgeOS kernel inside the macOS app so the downloadable app contains the patched CLI boundary.
• Updated release documentation and validation baseline to match the current test suite.

Security boundary

• Workbench remains monitoring/viewing only.
• The bridge is local-only on 127.0.0.1.
• No Raw Shell, model execution, or project mutation endpoint is exposed.

Validation

• 66 unit tests passing.
• 30 guardrail checkpoints passing.
• Workbench smoke and diagnose checks passing.
• Packaged app CLI verified to reject non-loopback preview hosts.
• macOS app code signature verification passed.

macOS note

This build is ad-hoc signed and not notarized. On first launch, macOS may require right-clicking the app and choosing Open.

KnowledgeOS Workbench v0.1.0

KnowledgeOS Workbench v0.1.0

First packaged macOS desktop release for KnowledgeOS Workbench.

Download

• KnowledgeOS-Workbench-0.1.0-arm64.dmg for normal Apple Silicon installation.
• KnowledgeOS-Workbench-0.1.0-arm64.zip for direct app extraction.
• SHA256SUMS.txt for checksum verification.

Boundary

Workbench is a monitoring and inspection app:

• Bundles the KnowledgeOS kernel.
• Starts a local read-only bridge on 127.0.0.1 with an ephemeral port.
• Shows routes, receipts, runs, evidence, workspace state, and knowledge entrypoints.
• Does not expose Raw Shell, model execution, prompt launch, or project mutation endpoints.

macOS Signing Note

This v0.1.0 build is ad-hoc signed and not notarized with an Apple Developer ID. On macOS, use Right click -> Open the first time if Gatekeeper warns about an unidentified developer.