object-storage on SOW

Coordinated Publication Decision

Fri, 14 Aug 2026 00:00:00 +0000

Decision finalized for SOW 0.4.0

An earlier version of this record proposed an rclone executor, publish --dry-run, and a separate sow audit command. None of those surfaces shipped in 0.4.0. SOW has no rclone dependency, publish has no --dry-run, and sow audit is not a command.

This page preserves the decision boundary so a historical proposal cannot be mistaken for the current product. The normative behavior is documented in sow publish and Publication & Recovery.

Publication & Recovery

Sat, 08 Aug 2026 00:00:00 +0000

Building and publishing are separate state transitions. A build produces a target-neutral Generation. Publication applies that Generation to one provider prefix and records enough evidence to recover without guessing.

Ownership split

Repository-scoped	Target-prefix-scoped
Package Object	Publication Attempt
Desired and Built state	Applied Checkpoint
Generation and Changeset	Remote inventory
Retained payload/metadata references	Grace and deletion evidence

The split prevents a successful filesystem publication from being treated as proof about R2, and prevents one target’s partial attempt from contaminating another target.

Platforms & Integrations

Mon, 01 Jan 0001 00:00:00 +0000

This page defines the environments SOW ships for, the storage semantics it requires, and the exact scope of its automated integrations. Repository generation happens inside the SOW binary; a real package manager remains the final check for a deployed repository.

Release targets

Operating system	`amd64`	`arm64`	Artifact
Linux	yes	yes	archive, RPM, DEB
macOS	yes	yes	archive
Windows	no	no	not supported

Release binaries use CGO_ENABLED=0 and require no language runtime. The 0.4.0 artifacts were built with Go 1.27.0; the source module requires Go 1.27.0 or newer. Archives include README.md, CHANGELOG.md, and the Apache-2.0 LICENSE; Linux packages install the same license with the binary. Use sow version to print the product version, target OS/architecture, and build toolchain.

sow publish

Mon, 01 Jan 0001 00:00:00 +0000

sow publish delivers one Repository’s current Built Generation to a named target from the targets: map in sow.yml. The target binds its Repository and provider; the command does not accept --repo or --dist.

Synopsis

sow publish TARGET [--abort | --rebind] [-C|--workdir DIR] [-T|--timeout DUR | -N|--no-wait] [--json]

Flag	Meaning	Default
`--abort`	Abandon a reconciled attempt that has not reached durable commit intent	false
`--rebind`	Confirm and record permitted target name/public endpoint/cache-TTL changes	false
`-C, --workdir DIR`	Workspace discovery start directory	current directory
`-T, --timeout DUR`	Maximum Repository-lock wait; `0` waits indefinitely	`0`
`-N, --no-wait`	Fail immediately when the lock is held	false
`--json`	Emit the `sow.cli/v1` envelope	false

TARGET must name a configured filesystem or r2 publication target. --abort and --rebind are mutually exclusive.