All twenty-one framework crates share one exact version. PBOC v1alpha1, native/OCI deployment, and the Rust Cloudflare application runtime join G1, G2, and OpenSDK at preview stability.
Exact bundle verification and host capability admission fail before upload.
Rolling and rollback checks bind application, epoch, state schema, sequence, and the exact release chain.
The same seven-case corpus passes a least-privilege OCI image and a real Cloudflare Worker edge.
All nineteen framework crates share one exact version. The CLI, G1 native runtime, G2 data contracts, and OpenSDK preview now move together while G3 remains explicitly unreleased.
pliego-router, pliego-runtime, and pliego-sdk are public at 0.1.0-preview.1. G1 is complete, while the complete CLI remains 0.0.2 and that tagged release contains neither G2 nor G3.
Bounded HTTP/1.1 and HTTP/2 transport with connection admission, slow-peer deadlines, graceful drain, and overload behavior.
Complete, ordered, and async-boundary SSR with route-owned complete and streamed layouts under one output budget.
Structured completion events and operator-enabled OTel exclude request values and isolate operator callback panics.
The ASVS 5.0 ownership map, real-socket adversarial corpus, fixed-load RSS harness, CodeQL, fuzzing, Chromium, and package reconstruction passed.
OpenSDK build/browser/tooling is public preview; its server plane and governance decisions remain pending.