Skip to content

korvid v0.3.0

v0.3.0 makes destructive-operation previews materially more informative while preserving korvid's approval and fail-closed audit boundaries.

Highlights

Graph-derived blast radius

Write confirmations can now include bounded dependency and dependent context from korvid's resource graph. The preview keeps incomplete-evidence warnings visible instead of presenting partial graph data as certainty.

Scale-down impact previews

Deployment, StatefulSet and ReplicaSet scale-down requests show bounded controller and routing context before approval. The preview does not predict which exact Pod Kubernetes will remove.

Pod resize impact previews

In-place pod resize requests summarize the affected containers and resource changes alongside relevant graph context before approval.

Node maintenance impact previews

Cordon confirmations explain the node's local scheduling effect. Drain adds a Pod eviction plan and, where available, bounded workload graph context and disruption considerations.

MCP follow demonstration

The README now includes a short recording of GitHub Copilot CLI using korvid's read-only MCP tools while the TUI follows from pods to logs and Helm releases.

Install or upgrade

Install the full feature set:

uv tool install 'korvid[all]==0.3.0'

Reinstall or expand extras explicitly:

pipx install --force 'korvid[all]==0.3.0'

Base TUI only:

uv tool install 'korvid==0.3.0'

Compatibility

  • Python 3.11, 3.12 and 3.13 are supported.
  • No intentional breaking configuration or provider/plugin API changes.
  • Existing local configuration, audit records and retained state remain in their documented locations.

Safety posture

  • Cluster reads and diagnostics remain read-only.
  • Every cluster write still requires an operator approval keystroke.
  • Every executed write still uses fail-closed audit logging: if the audit entry cannot be recorded, the mutation is blocked.
  • External MCP clients receive read and UI-drive tools; optional write proposals still require review and approval in the TUI.

Verify

The GitHub Release publishes the wheel, source distribution, checksums, SBOM, offline bundles and provenance attestations produced from the tagged commit:

set -eu
gh release download v0.3.0 --dir dist/v0.3.0
gh attestation verify dist/v0.3.0/korvid-0.3.0-py3-none-any.whl \
  --repo hellices/korvid
gh attestation verify dist/v0.3.0/SHA256SUMS --repo hellices/korvid
(cd dist/v0.3.0 && shasum --algorithm 256 --check SHA256SUMS)

Known limits

  • Impact previews are bounded and can report incomplete evidence when RBAC or unavailable resource kinds prevent a complete graph.
  • Performance qualification and remaining scale limits are documented in docs/performance.md.
  • MCP log results are not credential-pattern masked by korvid; the connected external client owns its model and data boundary.