Releases, tags and versions
A release is a claim. It says this version exists, this is what changed, and this is what it was tried against. The rule in every repository here is that a claim in a release note has something behind it in the repository that you can run yourself.
Version numbers and tags
Section titled “Version numbers and tags”The convention is semantic versioning, MAJOR.MINOR.PATCH. Patch for a fix
that leaves behaviour alone, minor for something added while existing commands
keep working, major for a change that breaks what you depend on. Tags carry the
version with a v prefix, and in molo the tag is what publishes: CI builds the
macOS .app and .dmg, the Windows executable and the Android APK on every
push, then attaches all three to a release on a v* tag.
A licence change is a version boundary and gets recorded as one. Plancia is GPL-3.0-or-later today, and its README states that versions up to 0.2.0 were MIT and stay MIT, so anyone who took an earlier copy knows where they stand.
What goes in the notes
Section titled “What goes in the notes”Four things: what changed, what breaks, what was checked, and what the release does not promise. The fourth is the one usually left out, so here it is in practice, from the repositories themselves.
- Molo’s builds are unsigned.
packaging/sign_and_notarize.shperforms the whole Developer ID flow, and it has not been run end to end, because this machine has no certificate. - Molo’s Windows executable and Android APK compile in CI and have never been run on real hardware. Only the macOS build has been launched and used for a full download.
- Molo verifies the yt-dlp wheel it fetches against the sha256 PyPI publishes. That catches a truncated or corrupted download, the same protection pip gives over HTTPS. It is no signature and would not stop a compromised release.
- claude-codex-bridge supports the Claude Code
2.1.*and Codex0.146.*session formats, and every target write is gated on the version.--allow-unsupported-versionrelaxes the source read gate alone. A note that omits those version prefixes is incomplete, since the tool refuses to run outside them.
If a release claims a check, the check is in the repository
Section titled “If a release claims a check, the check is in the repository”Under a name you can type, on your own machine, before you trust the build.
| repository | command | what it runs |
|---|---|---|
| plancia | python3 tools/prova.py |
eighty two checks in about ten seconds, against a throwaway archive that never touches yours |
| rada | python3 tools/prova.py |
seventy checks in a couple of seconds, no model and no real memory allocated, including a four hundred round adversarial simulation of the fairness rules |
| argano | pytest and node --test web/lib/*.test.mjs |
samples built with ffmpeg, broken, repaired and compared against the originals, with frame counts required to match exactly |
| claude-codex-bridge | python3 tools/verify-drift.py --json |
a live probe of both CLIs, run before a release or an upgrade |
Plancia’s suite also runs in CI, in the prova.yml workflow, and contributors
turn it on before every push with git config core.hooksPath .githooks. How a
plancia release is cut is written down in docs/RILASCIO.md. Molo enforces its
one hard limit with a test, so a patch carrying circumvention code fails CI
before it reaches anyone’s inbox. The drift probe in claude-codex-bridge
consumes two Claude calls and one Codex call and removes only the probe sessions
it created, so it runs manually and weekly on a private macOS runner, while
standard CI validates its non-networked command surface and never spends quota.
The scorecard
Section titled “The scorecard”Synced 2026-08-04, eleven repositories.
| standard | state |
|---|---|
| README | 11 of 11 |
| licence | 11 of 11, eight MIT and three GPL-3.0 |
| description | 11 of 11 |
| contributing guide | 2 of 11, molo and claude-codex-bridge |
| pull request template | 1 of 11, molo |
| code of conduct | 1 of 11, molo |
| issue template | 0 of 11 |
| community health score | molo 100, claude-codex-bridge 71, the other nine 42 |
| stars | 0, across all eleven |
The gap is left visible. Everything a release depends on, a README, a licence and a description, is in place across all eleven. Molo is the only repository carrying the full set of community files. The templates that make an incoming contribution cheaper are missing from nine, and that is the next thing on the list.