llmff v0.8.0

Release-candidate train start and API-freeze release. From this tag onward,
new public surface is blocked unless it is required to fix a v1.0 blocker.
Compatibility work should harden the documented contracts instead of expanding
scope.

Supported Install

After the v0.8.0 tag is published:

cargo install --git https://github.com/syndicalt/llmff --tag v0.8.0 llmff

Included Since v0.1.6

• llmff doctor checks concrete local prerequisites: binary version, writable
  run directories, plugin validation, API-key environment wiring without
  printing secrets, and optional release trust manifest presence.
• Failure diagnostics now have a checked failure-mode matrix covering stderr
  anchors, exit codes, retry recommendations, event presence, and run-directory
  result behavior.
• Deterministic stages are split into focused modules while preserving the
  public execution contract.
• Adoption docs now include a decision guide, cookbook, pre-1.0 migration
  checklist, and canonical supervisor pattern.
• Plugin support now includes a copyable protocol version 1 template with
  stage, backend, sampler, and tool-transport capabilities.
• Provider support tiers are evidence-backed as documented only,
  mock-inspectable, opt-in smoke ready, or live-smoke verified. No provider is
  live-smoke verified until a real smoke result is recorded.
• The Python subprocess supervisor, batch supervisor, Node.js streaming supervisor,
  agent runner adoption guide, OpenTelemetry bridge, ecosystem readiness, and
  Release preflight remain part of the release contract.
• The release preflight is the local gate for this release candidate tag.

API Freeze

v0.8.0 starts the v1.0 release candidate train. Public CLI flags, manifest
fields, plugin protocol behavior, trace/event schemas, run-directory artifacts,
and documented Rust library exports should change only for compatibility fixes,
security fixes, or blockers found during the v1.0 compatibility review.

Packaged Artifacts

Release-tag CI is expected to publish:

• Linux x86_64 .tar.gz archive, .deb package, and Arch PKGBUILD plus
  llmff-0.8.0-arch.SRCINFO metadata.
• macOS Apple Silicon and Intel .tar.gz archives and unsigned .pkg
  installers.
• Windows x86_64 unsigned .zip archive and unsigned MSI installer.
• Adjacent SHA-256 checksums and llmff-0.8.0-release-trust.json.

Manual workflow dispatch keeps generated files as Actions artifacts instead of
GitHub Release assets.

Known Limitations

• This is a pipeline runner, not a native inference kernel, model converter,
  serving platform, scheduler, memory system, autonomous planner, or full agent
  framework.
• Windows and macOS native artifacts are unsigned in this release.
• Package-manager distribution through Homebrew, winget, Scoop, apt
  repositories, or an official AUR package remains parked until maintainers
  decide those channels are support-ready.
• Authenticode signing, Apple Developer ID signing, and notarization remain
  deferred paid distribution tracks.
• Live provider smoke jobs remain opt-in and require maintainers to configure
  secrets and runner expectations explicitly.

Verification

Release preflight should pass before tagging. The install smoke applies after
the tag is pushed:

scripts/release-preflight.sh v0.8.0
scripts/smoke-install.sh --git https://github.com/syndicalt/llmff --tag v0.8.0