cid eba5e91f17465c7500fb980b2df97365457fe0f280b59d5515ec576c7c823a7a · original · open access · via openalex
Title: IAmSoThirsty/Project-AI: Project-AI v0.0.3 - P1 Offline-First Local Authors: Jeremy Karrick Venue: Zenodo (CERN European Organization for Nuclear Research) Year: 2026 Canonical: doi:10.5281/zenodo.20111246 URL: https://doi.org/10.5281/zenodo.20111246 Collector: openalex OA: true ABSTRACT Project-AI Release v0.0.1 Container Images All images are published to ghcr.io/iamsothirsty/: project-ai-api:v0.0.1 project-ai-docs-portal:v0.0.1 project-ai-proof-portal:v0.0.1 project-ai-swr:v0.0.1 project-ai-atlas:v0.0.1 project-ai-arbiter-rlp:v0.0.1 project-ai-genesis:v0.0.1 Deployment Update your Helm values: image: registry: ghcr.io/iamsothirsty tag: v0.0.1 pullPolicy: IfNotPresent Then deploy: helm upgrade --install project-ai ./helm/project-ai \ -f helm/values.prod.yaml \ --set image.tag=v0.0.1 Verification All images include: A cosign keyless signature (Sigstore/Fulcio, via GitHub Actions OIDC — no long-lived key is stored anywhere). Verify with: cosign verify \ --certificate-identity-regexp '^https://github.com/IAmSoThirsty/Project-AI/\.github/workflows/publish\.yaml@.*$' \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ ghcr.io/iamsothirsty/project-ai- :v0.0.1 Buildx-generated SLSA provenance and Software Bill of Materials (SBOM) attestations (provenance: mode=max, sbom: true) — informational, attached to the image manifest, not independently cosign-signed. Daily Trivy scan results (.github/workflows/image-scan.yaml) once this tag's image has been pulled by that scheduled workflow.