Cohesix 1.1.0-beta

Cohesix 1.1.0-beta turns the seL4 Queen and host tools into a more complete edge-AI operating workflow. Admit native work, follow its Worker and host evidence, inspect the outcome, and recover an interrupted operation under the same identity. CUDA, training and serving still run in the host’s native environment; the Pi remains the control plane.

What improved since 1.0.0-beta

• SwarmUI has been completely redesigned as a native workbench. Guided connections, reviewed operation forms, namespace browsing, tickets and policy, recovery, artifacts and evidence now sit alongside the live Hive view. Its run story and evidence ribbon distinguish declared, admitted, executed and verified work. Offline signed replay is visibly read-only; profiles store no credentials. See the workbench guide.
• Native CUDA jobs have accountable outcomes. Scoped tickets and leases bind a Worker, host executor, exact inputs and outputs. Recipes can reconcile lost replies without blindly dispatching a second effect, and a native refusal cannot become a success. See GPU nodes.
• Private LoRA journeys reach a release decision. Native adapter import and training feed evaluation, canary, promotion and verified rollback. A failed canary leaves the requested candidate unreleased and CI failed, even when rollback restores the previous service. See the LoRA guide.
• CLI, Python, CI and packaging share the selected contracts. The portable wheel, host tools, examples and generated QEMU/Pi profiles support the same bounded authority and evidence path. QEMU and Pi select matching 512-entry, non-evicting Queen intent capacity. Existing Mac launchd, native network discovery and read-only endpoint-compliance providers are enabled by default where their enrolled native dependencies are available. See adoption and CI workflows.

Measured qualification

One measured 120-minute Pi 4 GENET, Mac and Linux AArch64 NVIDIA operator run completed 24 CUDA outputs and four LoRA journeys, including failed-canary and rollback cases. At the pre-release runtime checkpoint, QEMU pressure observed 256/256 READY Workers: 43,099 successful operations without error at medium load, then 61,166 successes and 19 bounded buffer-full refusals among 61,185 high-load attempts (0.00031053, within the unchanged 0.01 budget). The later Pi static-address handoff correction passed focused tests and fresh SD-image network checks. These are control-plane measurements, not GPU speedups. The M27g record retains the attempts, source/image identities, failures and proof limits. Fresh Wi-Fi DHCP operation was verified on the release image; a new 10-cold/ 10-warm Wi-Fi repeatability series was not run on that image. Release A makes no new Wi-Fi reliability or performance claim from that functional boot. The final packaged SD image contains the same 27 files as the image written and read back on a card, but its raw FAT bytes differ and were not independently read back from physical media.

Install and upgrade

Extract each archive fresh and verify its manifest using the quickstart. Keep the Mac HVF and Linux KVM guests with their matching bundles. On macOS 26.6.2, Homebrew QEMU 11.0.3 aborts this guest before boot; select the validated QEMU 10.1.0 HVF/GIC build with QEMU_BIN as described in the Mac toolchain guide. Back up Pi settings and evidence before writing the raw SD image: installation replaces the whole card. Configure fresh credentials and tickets against the packaged contracts rather than copying old authority state.

Jetson is the current reference for the Linux AArch64 NVIDIA host contract; Macs without NVIDIA hardware have no native CUDA claim. The target Workers govern jobs but do not run CUDA, NVML or PEFT inside seL4. AWS/UEFI and later provider and agent-protocol work are outside 1.1.0-beta. The 1.0.0-beta notes remain available for comparison.