Local-only 0.3.0rc13 · evidence updated August 20, 2026

RC13 is the private beta candidate. Public release remains gated.

TentaClaw runs as a local child process over MCP stdio and exposes exactly six focused Poppy tools without placing the Poppy key in the client or model.

Exact candidate identity

Version	`0.3.0rc13`
Draft source PR	savage-content/tentaclaw-mcp#21
Reviewed head	`c78d0cbecd999f027059ba93864a45899666d5ea`
Candidate ZIP SHA-256	`9651fab6e10272fb5a6d766bcd04ff12fb76929dcf2162fe000da993b1f1fd8e`
Seven-subject digest	`fd711b43ab9ddf9bc63ca218a34e9a9df3ece37e3cb5edc5e3736f523194d303`

Product boundary

Required

Local MCP stdio only
Six policy-enforced Poppy tools
Protected local credential
Exact approved board/chat pairs
Fixed outbound Poppy origin

Not in TentaClaw

Hosted HTTP MCP
OAuth or shared bearer layer
Cloud credential store
VPS, container, tunnel, or daemon
Shared multi-user service

Completed candidate evidence

Gate	Result
Tests	501 passed; 38 skipped
Dependency audits	No known Python or npm vulnerabilities reported
Reproducibility	Four builds reproduced all seven artifacts byte for byte
Source review	Draft PR exact-head CI passed
Repository boundary	Private repository; no tag or public release created

Candidate contents

tentaclaw_mcp-0.3.0rc13-py3-none-any.whl
tentaclaw_mcp-0.3.0rc13.tar.gz
Runtime and bootstrap CycloneDX SBOMs
SHA256SUMS
tentaclaw-mcp-0.3.0rc13-release.zip and companion digest

The artifact is private candidate evidence. It is not a public download authorization.

Remaining gates

Approve and merge draft PR #21 without changing the candidate
Complete live Poppy and exact supported-client acceptance
Complete clean-machine verification
Create a signed tag and release provenance from the approved source
Require independent GitHub attestation verification and explicit final public-release approval

Current decision: private beta

Approved testers may receive the checksum-bound RC13 candidate privately. No public tag, package publication, or public release is authorized.