- First published production baseline: soma-control measured at 5.152 MiB idle RSS on linux/arm64 (commit de4f858)
- New footprint page at /en/footprint with full methodology, measurement conditions, and reproduce-it script
- Home page comparison table updated: design-target language replaced with measured figure + link for soma-control rows
First measured baseline — soma-control
The footprint page at /en/footprint records the first production-baseline measurement for soma-control (IAM + Vault + Flags + Licensing in one Rust binary):
| Metric |
Value |
| Idle RSS (median) |
5.152 MiB |
| Startup time |
0.282 s |
| Light-load RSS |
5.18 MiB |
| CPU idle (median) |
0.00% |
| Binary size |
47.7 MB |
| Docker image size |
52.6 MB |
Measured on linux/arm64 in Docker Desktop on Apple Silicon (Darwin 25.6.0), with Postgres 17 and Redis 7 in the same Docker network. Commit: de4f858 (SOMA-Control). Full conditions and a reproduce-it shell script are published on the footprint page.
Home page update
The comparison table on the home page previously read "design target: a few tens of MB" for the soma-iam, soma-vault, and soma-flags rows. Those rows now link to the measured figure at /en/footprint. Design-target language is retained for suites not yet measured (soma-analytics, soma-observe, soma-notify).
- soma-schema 0.4.0 published to crates.io — manifest-ordered Postgres migration runner with SHA-256 drift detection and advisory locking
- soma-control: IAM (216 routes, 52 migrations), Vault (46 routes, 8 migrations), Flags (42 routes), Licensing (37 routes) all feature-complete
- soma-observe and soma-analytics servers shipped with MCP server interfaces for LLM agent tooling
- soma-audit-server: hash-chained audit log with HMAC-SHA256 chain integrity and Ed25519 seal/verify
- soma-infra: 14 feature-gated modules, 100% rustls, no OpenSSL, published as shared backend plumbing for all suites
- soma-ui: a growing catalog of typed Leptos components (as of v0.4.0)
soma-schema 0.4.0
First public crates.io release of the SOMA migration runner. Key properties:
- Manifest-ordered execution:
migration-order.yaml is the canonical source of truth; the runner refuses to proceed if the order file is incomplete or contradicts the applied history.
- SHA-256 checksum on both UP and DOWN sections — drift in a DOWN migration is detected before any rollback, protecting against silent schema divergence.
- Postgres advisory lock: safe for concurrent binary restarts; only one migration run proceeds at a time per database.
- Dual-mode: embeds in server binaries as a library (runs migrations at startup) or runs as a standalone CLI.
soma-control — feature-complete control plane
The IAM, Vault, Flags, and Licensing modules are functionally complete and self-hostable. All four Leptos WASM dashboards (30 / 15 / 10 / 11 pages) are embedded in the soma-control binary via rust-embed. Pure-Rust cryptography throughout: AES-256-GCM, ECDSA P-256, Argon2id, HKDF-SHA256, AES-KW. #![forbid(unsafe_code)] on every server crate.
SOMA-Insights servers shipped
soma-observe, soma-analytics, and soma-audit-server each have production-grade implementations with migrations, tests, and MCP server interfaces. soma-observe exposes query_metrics, query_logs, query_traces, and get_service_map for LLM agent tooling. soma-analytics compiles YAML metric models to type-safe SQL and exposes list_cubes and run_query for AI agents.
soma-infra 14-module baseline
The shared backend plumbing library covers: db (Postgres pool), crypto (AES-GCM, Argon2, HKDF, HMAC, SHA256), cache (Redis), storage-s3/azure/fs, llm (Anthropic client), push, email (Postmark), kg (pgvector), otlp, iam-client, signal, config. Every dependency is optional and feature-gated — a service pulling only crypto and Postgres links zero LLM or storage code.