This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryUpdates Stats, What's Next, and default across a mixed release.
Full changelog
Phase 2 of the v1.0.0 Roadmap
Privacy-Preserving Record Linkage
Match records across organizations without sharing raw data. Two modes:
Trusted Third Party (default): Both parties compute bloom filters locally, send them to a coordinator who computes similarity and returns cluster IDs.
SMC (Secure Multi-Party Computation): Secret-shared dice similarity where only match/no-match bits are revealed. No party sees the other's bloom filters.
# Party A and B each have their own CSV
goldenmatch pprl link \
--file-a hospital_a.csv \
--file-b hospital_b.csv \
--fields first_name,last_name,dob,zip \
--security high \
--output clusters.csv
Bloom Filter Security Levels
| Level | Filter Size | Hash Functions | Features |
|-------|------------|----------------|----------|
| standard | 512 bits | 20 | Basic CLK |
| high | 1024 bits | 30 | + per-field HMAC salting |
| paranoid | 2048 bits | 40 | + balanced padding + trigrams |
Stats
- 894 tests passing (19 new, 0 regressions)
- CI green on Python 3.11/3.12/3.13
Install / Upgrade
pip install --upgrade goldenmatch
pip install goldenmatch[pprl] # for SMC protocol (optional)
What's Next
- v1.0.0: API freeze, production-stable release
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About GoldenMatch
All releases →Related context
Related tools
Earlier breaking changes
- v3.1.0 `GOLDENMATCH_FRAME=polars` now requires the `[polars]` extra; raises error without it.
- vgoldencheck-v3.0.0 `inferred_type` emits neutral dtype vocabulary (str/int/uint/float/date/datetime/bool/other) instead of raw Polars dtypes.
- vgoldencheck-v3.0.0 'inferred_type' now emits a neutral dtype vocabulary instead of raw Polars dtype strings.
- vgoldencheck-v3.0.0 `scan_file`, `scan_dataframe`, and CLI `check` now run without Polars, using Arrow-native pyarrow.Table.
- v3.0.0 Result frames now return pyarrow.Table instead of Polars DataFrame.
Beta — feedback welcome: [email protected]