• v1.17.0 5fc0382bc1

    ChatTLLX v1.17.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 4m15s
    Container images / Build temporary amd64 candidates (push) Successful in 18m37s
    Container images / Smoke-test App candidate (push) Successful in 58s
    Container images / Smoke-test Whisper candidate (push) Successful in 42s
    Container images / Publish immutable amd64 candidates (push) Successful in 54s
    Release / Verify and publish release (push) Successful in 1m29s
    Stable

    Ghost released this 2026-09-25 09:04:24 +00:00 | 23 commits to main since this release

    Added

    • Add encrypted, versioned per-chat and optional per-user document workspaces with isolated Linux,
      coding, testing, PDF, DOCX, and XLSX tooling.
    • Add optional Proxmox API sandboxes with an encrypted ownership journal, authenticated TLS guest
      agent, one-way warm-pool assignment, per-chat continuity, idle stop, retention, and recovery.
    • Add a guided Administration assistant for the signed, secret-free Agent-Ready LXC image, including
      release downloads, verification commands, one-time enrollment import, sealing, and preflight.
    • Add reproducible Agent-Ready image metadata, package inventory, SPDX SBOM, checksums, minisign
      signatures, disposable-worker builds, and checksum-verified Forgejo publication.

    Changed

    • Keep assigned chat containers across idle periods, application restarts, and confirmed command
      resets instead of returning them to the warm pool or silently replacing them.
    • Present sandbox lifecycle and resource details in a compact status control beside the chat title.

    Fixed

    • Refresh the sandbox indicator when the initial chat finishes loading and while a chat remains open.
    • Preserve the same chat container after cancelled or failed guest commands; quarantine an
      unconfirmed reset rather than assigning a different container.
    • Improve settings overflow, branch-comparison readability, and branch review lifecycle behavior.

    Security

    • Separate Proxmox and guest TLS trust, keep all sandbox credentials write-only, and restrict each
      CA to its matching HTTPS peer.
    • Require journal, hostname, description, VMID, node, unprivileged mode, and container policy to
      agree before ChatTLLX starts, stops, executes in, or deletes a sandbox.
    Downloads