AIC follows a predictable but security-focused release workflow.
- Bug fixes
- Documentation updates
- Small improvements
- No breaking changes
- New modules
- New APIs
- Backwards-compatible improvements
- Breaking API changes
- Large architectural changes
- Security model updates
Opened as:
-
GitHub Issue +
release-proposaltag -
Must describe:
- Changes
- Compatibility impact
- Security implications
- Migration notes
-
PR must target
devbranch. -
All new modules require:
- Unit tests
- Integration tests
- Security review
- Architecture review
- Code review by module maintainers
- Security review by core maintainers
- Documentation review
-
Create tag:
vX.Y.Z-rc1 -
Run:
- Simulation tests
- Introspection stability tests
- Rollback behavior tests
- Plugin compatibility checks
-
Publish to GitHub releases (prerelease)
-
Merge to
main -
Tag:
vX.Y.Z -
Publish:
- Release notes
- Migration guide (if needed)
- Updated architecture diagrams
- Only for critical security issues
- Must bypass normal feature reviews
- Requires unanimous maintainer approval
- Minor versions supported for 18 months
- Major versions supported for 3 years
- Security-critical core receives extended support