Project releases, commits and company announcements from Reuven Cohen (rUv) and Cognitum One.
— Project releases
Over four days Ruflo moved onto Claude Code's new mods API. Version 3.50 made it an opt-in mod with in-process routing and a live swarm pane, 3.51 added a one-command /ruflo console and turned the mods on by default in new projects, and the 3.52 plugin release on October 5 closed the guard bypasses found in an overnight test run.
— Project releases
Three merged RuView fixes between September 30 and October 4 tighten when the sensing server reports anything. Stale nodes no longer inflate room counts, a breathing signal can no longer be mistaken for a confident 120 BPM heart rate, and vital-sign numbers are now published only with fresh, calibrated evidence that exactly one person is present.
— Project releases
Ruflo 3.51.1 on October 2 fixes a hook that recognised a denied shell command but exited with a code Claude Code treats as non-blocking, so the command could still run. The same release pins credential-bearing MCP tools to their configured HTTPS destination. Two days earlier, @claude-flow/plugins 3.0.1 fixed SQL injection in the RuVector graph SQL builders.
— Project releases
The RuView npm toolkit 0.9.1, merged and published on October 2, adds a Claude Code mod that opens a /ruview pane beside the conversation with node health, a CSI waterfall and a radar view. It also adds a spectrum capture option and a token-authenticated HTTP mode for its MCP server.
— Experimental
RESEARCH PRE-RELEASE. Merged on September 30, RuView's BFI research tools add strict decoding, capture runners and bounded training for WiFi beamforming feedback. The decoder matched an independent oracle on every retained report, but the holdout set was never scored and no gait, identity or state-of-the-art claim is made.
— Experimental
PRE-RELEASE. RuView firmware 0.8.13, published September 29 from an unmerged pull request, adds a watchdog that restarts sensing when data stops flowing and fixes a timing mismatch that dropped about a quarter of collected CSI. The measurements come from one ESP32-C6 board with deliberately triggered faults.
— Project releases
@ruvector/kge, published to npm on September 28 from RuVector PR #1057, trains knowledge-graph embeddings locally and answers which entity most plausibly completes a fact. It ships a CLI, a TypeScript API and a localhost server, with a native addon and a WASM fallback. We installed it and ran its first commands.
— Project releases
The browser build of RuVector accepted a request for an HNSW index but quietly used exact flat search, because the core library disables its native HNSW in WebAssembly. Pull request #1035, merged September 27, adds a portable in-browser graph index and reports which backend is actually running. It shipped as @ruvector/wasm 0.2.0.
— Project releases
Two merged RuView firmware fixes landed on September 26 and 27. The first gives 8 MB boards the storage partition their logger needed and removes the logger from 4 MB builds, which the release notes say made a physical ESP32-C6 image 43,056 bytes smaller and ended a boot error. The second restores native USB onboarding on the ESP32-C6.
— Project releases
MetaHarness 0.4.17, released September 26, closes a set of security and correctness findings. One is the overnight-review finding filed as issue #326: the MCP scan treated a deny rule for the harmless .env.example file as protecting the real .env secrets file. That fix is now merged and published.
— Project releases
On Windows machines without a global agent-browser install, Ruflo's browser MCP tools fell back to npx through the command shell, so text supplied to the tools could be read as shell syntax. Release 3.46.1 on September 26 starts the process directly with an argument list and fails closed. It closes a week that also shipped four feature and fix releases, summarised here.
— Project releases
ruPet is a new public repository released on September 22. Version 1.0.0 is an animated desktop pet in the v2 pet format; version 1.1.0, the same afternoon, adds an optional $rupet skill and prompts that can use Ruflo memory and routing when those tools are available. The pet itself is artwork only and runs no code.
— Project releases
A pull request merged on September 20 adds an optional evaluation boundary to the automated improvement loop. Evaluations produce verifiable receipts, missing observations return an inconclusive result rather than a pass, and the evaluation is explicitly denied any authority to merge or deploy.
— Experimental
A pull request merged on September 20 adds a reproducible command-line laboratory that runs Bell and CHSH protocols against the bundled quantum simulator, binds every run into a hash-linked evidence chain, and rejects synthetic evidence when a run claims to be a replay of captured data.
— Project releases
A new public repository appeared on September 17 and reached its current shape on September 18. MCP Studio is a web playground and a working Model Context Protocol server in one project, with twelve read-only tools, eight resources, five dashboard templates and a protocol test suite covering thirty assertions.
— Project releases
A memory search in smart mode was putting an internal fusion score into the field named similarity, so a result whose real relevance was 0.8 could be displayed as 0.03. The September 17 release puts the raw relevance back in similarity, moves the fusion score to its own field and adds fourteen regression tests.
— Project releases
Importing part of the router pulled in a native binding as a side effect, and on some Windows machines that binding cannot load, so the process died before doing anything. The September 16 patch release loads it only when a local model is actually run, and closes a backlog of smaller fixes.
— Project releases
A September 16 commit makes a compiled minimum-cut package an optional dependency. The existing implementation stays the default and the fallback, because fuzzing it against brute force over 3,844 random graphs found no mismatches. What the native package adds is capability, not a correction.
— Project releases
A sensing system is only trustworthy if a calibration cannot be quietly reused somewhere it does not apply. A merged pull request on September 16 binds calibration receipts to process, session, room and model identity, and refuses to finish a calibration until every requested node has contributed.
— Project releases
rultra is a Raspberry Pi 5 sensor box in Rust that refuses to call a device working until someone has actually observed it working. A September 13 commit adds an MCP server exposing ruv:// resources and an end-to-end suite, so an agent can read the box's honest self-assessment.
— Project releases
A clean room open source implementation of the Claude Code CLI: async generator agent loop, 25 tools, four MCP transports, six permission modes, hooks and sessions. Nightly releases track the upstream version it mirrors.
— Project releases
The federation relay refuses any event signed by someone other than the connection that authenticated. ChatGPT Federation had no key of its own, so it could read the federation but never publish into it. A merged pull request on September 12 gives it a key, its own authenticated connection and three narrow tools.
— Experimental
rultra is hardware work in the open: sensors, a live console and deployment that proves it restarted. The newest commit adds an HC-SR04 range finder plus an ADR on the difference between a repeatable reading and a correct one.
— Project releases
Keeping up with two hundred public repositories by reading push notifications does not work. A September 12 commit on the ruvnet entrypoint adds a provenance-aware change feed, and follow-up commits on September 14 expose how fresh the underlying snapshot actually is.
— Tutorials
The ruvnet profile repository now ships a Claude Code plugin marketplace, installable skills and a read only CLI and MCP companion, so a newcomer can reach the stack without cloning eight repositories first.
— Project releases
The v2 rewrite replaces model driven shell execution with a deterministic local planner. It turns a small deployment specification into Docker, Kubernetes and CI files, shows exactly what changes, and never touches your cluster.
— Project releases
Agentic Reports turns a pile of documents into an extractive report where every passage carries its source, capture time and content hash. A September 11 commit revived the project around verified citations, a six tool MCP server and a local CLI.
— Project releases
A 2023 prompt collection is now runnable software. Every one of the original 39 prompts has a typed agent template, an installable skill and its own MCP builder, with the original text preserved for provenance.
— Project releases
Project scaffolding is a quiet security hole: templates that run code during generation. Dynamo v2 shows the exact files first, verifies a template fingerprint, then writes the project without running template scripts or downloading code.
— Project releases
Quantization is usually sold as free speed. A September 11 commit turns ONNX Agent into a qualification pipeline that measures both halves of the claim: numerical parity against an independent reference, and an actual measured latency improvement gate.
— Project releases
A September 11 commit rebuilds Reflective Engineer as an evidence review console. Import an experiment report, replay its quality, safety, cost, latency and regression checks in the browser, a CLI or an MCP host, and get the same verdict from all three.
— Project releases
RuView turns ordinary WiFi into a presence and spatial sensing system with no cameras. Release v2655 lands secure USB onboarding on the main firmware and fixes the ESP32-C6 console receive path.
— Project releases
A name is only useful if someone can prove they control it. The September 10 revival gives Agent Name Service real Ed25519 bindings with a pinned issuer and expiry, a SQLite registry with durable revocation, and audience-bound single-use challenges.
— Project releases
No API key, no remote model, no semantic claim it cannot support. The September 10 revival gives Agentic Search deterministic BM25 ranking, SHA-256 citations of the original source text, and an MCP surface with real limits.
— Project releases
The September 10 revival replaces an old prototype with a smaller authenticated application: record, review the transcript, send, hear the answer. It also tells you to revoke the provider credential that the original browser source carried.
— Project releases
A September 10 revival separates fetching from rendering and disables scripts and networking in the browser step. Auto Browser v2 does not log in, does not submit forms, and does not act on instructions found in a page.
— Project releases
A September 10 revival turns Federated MCP into a bounded reader for public RuFlo federation activity. It reads x.ruv.io through the official SDK, marks everything it returns as untrusted observation, and cannot publish, mint invites or hold an admin token.
— Project releases
Guardrail is a small, bounded policy checker for structured data, revived as a v2 alpha with a local CLI, MCP tools and a policy resource. Missing fields deny; present but falsy values stay valid.
— Project releases
The September 10 revival replaces a speculative prompt language with something narrower and checkable: a typed JSON specification compiles into an exact set of messages with a deterministic SHA-256, and user content never leaves the user role.
— Experimental
QuDAG is a quantum resistant, decentralised network for autonomous agents. The v2 preview hardens the crypto and DAG paths, adds Ruflo federation and evidence gates, and disables unauthenticated network MCP serving.
— Experimental
ruDevolution turns a minified npm bundle back into readable modules. A September change secures validation, adds witnesses, restores standalone builds and speeds up renaming.
— Project releases
Ruflo gives Claude Code a coordination layer: swarms, routing and memory that survives between sessions. Release 3.41.2 fixes a bug where the automatic memory curator could overwrite a hand written index, plus daemon consent and sibling disclosure fixes.
— Project releases
The September 10 revival rebuilds Ultrasonic around authenticated records and a persistent replay ledger, and draws a hard line the old code did not have: received data stays data. It never runs commands and never touches a speaker or microphone.
— Experimental
LatentMesh coordinates agents over LoRa, radio, Bluetooth, WiFi or plain audio. The September work adds a native runtime slice and fail closed calibration qualification — and the 0.2.0 release is an honest record of an idea that did not work.
— Experimental
rGi is a perpetual agentic runtime built on the RuV stack in Rust, WebAssembly and TypeScript. Two September 8 commits laid the foundation: governed execution, grounded adaptation and durable evaluation gates.
— Experimental
Dream Machine runs one honest repository evolution cycle per night and never merges by itself. A September change makes the witness re-verify the evidence read set immediately before promotion, closing the gap between measuring and deciding.
— Experimental
ruClip is a control plane for running a company where the employees are agents. A September fix closes a time of check to time of use race that allowed nonce replay against actor credentials and human identity attestations.
— Project releases
WorldGraph models a physical space as a typed, provenance tracked graph and ships an AI agent that helps you build one. September 6 commits added bounded Gaussian capture playback with native provenance and validation.
— Project releases
MidStream analyses LLM output in flight rather than after the fact. A September change adds the aidefence-core Rust crate over shared pattern packs, with pack driven prompt injection detection for tool invocation and exfiltration URLs.
— Experimental
A Mixture of Experts model contains many expert networks. MoE Foundry measures which experts a workload actually uses, keeps a selected group per layer, and exports a smaller model to test — with a CLI, an MCP server and a published validation receipt.
— Project releases
RuForecast is privacy governed multivariate time series forecasting in Rust. Release v0.2.0 adds governance verification and spend enforcement so a forecasting run cannot quietly bill an external provider.
— Cognitum
Cognitum One added six advisors spanning cloud, product, capital, AI talent, growth and healthcare. They join the founding advisory group named in June.
— Project releases
ruv-drone coordinates cooperative UAV fleets above the per vehicle autopilot: formation keeping, Raft consensus and a hard flight safety boundary. A September 2 commit wires RuForecast in as a predictive advisory.
— Tutorials
SPARC was a way of working: specification, pseudocode, architecture, refinement, completion. Version 1.0 makes the five phases executable in TypeScript with deterministic gates, signed receipts, npm skills and both local and remote MCP transports.
— Project releases
RuField is an open specification for camera free multimodal field sensing across WiFi, radar and acoustics. An August 25 commit landed UltrasonicReplayAdapter, the first adapter that plugs a real modality into the spec.
— Project releases
RVM is a runtime built for agents rather than for processes. Release 1.7.0 adds the ruv:// context namespace with a deliberate separation: resolving a name grants nothing, and the right to act arrives separately as a capability handle.
— Experimental
OpenAVO is the project home for the open MetaHarness implementation of an Autonomous Variation Operator. The agent gets room to experiment; the harness keeps permissions, budgets, invariants, promotion, rollback and evidence.
— Experimental
Autogenous converts runtime failures into verified, reversible software adaptations. The radio-moe 0.3.1 release checkpoints an adapter that turns authorized Cognitum Spaces state into bounded observations, rejecting raw sensing fields outright.
— Project releases
Reasoning models emit their working alongside the answer. This Rust and WebAssembly library separates the two channels inflight, collapses repetition loops and normalises whitespace across three provider stream formats.
— Project releases
This library hides a key verifiable watermark in a model's own word choices and detects it later, with no extra tokens. An August 16 commit added inflight analysis: an online detector that works on a live stream.
— Project releases
MetaHarness mints a custom agent harness for any repository. Release 0.4.4 is the first release entry since 0.1.3 and covers roughly two months of shipped work, with every claim traceable to a pull request number.
— Experimental
The same physics that lets WiFi detect presence lets a neighbour do it to you. WiFi Veil is a first release of compliant waveform controls that degrade unauthorised sensing without jamming anything.
— Project releases
WiFi sensing pipelines are usually shell scripts and patched firmware. rvCSI is the hardware abstracted runtime underneath them. An August 2 commit removed implicit unwraps and dead code across the workspace.
— Project releases
This Rust and WASM solver exposes sublinear algorithms as MCP tools with no install. An August 2 commit fixed 17 NaN induced panics and pulled in npm and wasm-pack security updates.
— Project releases
AgentDB is persistent memory for agents on top of the RuVector engine. The alpha.20 release ships the governed embedding identity work and a 41 tool MCP surface you can register with one command.
— Project releases
Agentic-Flow orchestrates self learning agents with a large MCP tool surface. A July fix shipped the AgentDB CLI dependency surface, following governed MetaHarness promotion and MCP profiles.
— Project releases
RuVector is a vector and graph database that keeps learning from how it is queried. Release 0.2.40 makes the MetaHarness, Darwin and Flywheel control plane reachable from the npm SDK, the CLI and an MCP server, with pinned dependencies.
— Project releases
AgentiCow branches a vector memory in about half a millisecond regardless of base size, so parallel agents can work on isolated copies. A late June change added native approximate search across the branch boundary.
— Tutorials
Most READMEs are written by people who already understand the project for people who already understand the project. Repo Explainer builds a visual explainer page instead, and a late June commit wired the full pipeline together.
— Project releases
Text search cannot read a scanned table or a chart. rupixel screenshots each page and searches the pictures. A late June commit replaced every stub with real MiniLM embeddings and a live in browser demo.
— Experimental
PhotonLayer is a deterministic optical AI front end in pure Rust, where a learned phase mask compresses light before any electronics are involved. A June 18 commit trained a multi plane diffractive cascade end to end.
— Tutorials
ruqu ships a WASM quantum kernel with three commands you can run without installing anything: a GHZ state vector simulation, Grover search and QAOA MaxCut on a ring.
— Cognitum
Cognitum One named its founding advisory team and investors, drawn from enterprise software and silicon leadership, as it brought sovereign agentic AI to enterprise infrastructure.
— Project releases
SAFLA is a self aware feedback loop architecture with an MCP integration for Claude Code. Its most recent substantive change is unglamorous and correct: replace MD5 with SHA-256, fix argument injection and remove a tracked environment file.
— Project releases
ruLake is a cache coherent vector execution fabric that sits in front of a vector store and returns a cryptographic receipt with every answer. The node-v2.2.0 release is the packaged Node path into it.