# ITWorx ModelForge v1.1.1

v1.1.1 is a production fix-forward patch for the v1.1.0 Node Agent NVIDIA blocker. The v1.1.0
API, web application and schema `20260828_0022` remain compatible and unchanged in contract.

## Fixed

- The Node Agent no longer uses Alpine/musl. It uses a digest-pinned Debian trixie-slim/glibc
  runtime compatible with the host NVIDIA libraries injected by NVIDIA Container Toolkit.
- NVIDIA-configured nodes validate NVML, non-empty accelerator inventory and matching GPU
  telemetry before enrollment or publication. Failure is typed and fail-closed.

## Production impact

The v1.1.0 API, web application and database were valid, but its published Alpine/musl Node Agent
could not load GPU Node's glibc-linked `libnvidia-ml.so.1`. Production therefore retained the known-good
v1.0.0 Debian Node Agent until this fix-forward release.

## Compatibility

| Contract | v1.1.1 |
| --- | --- |
| Database schema | `20260828_0022` (no migration from v1.1.0) |
| Agent protocol | `1` |
| API | v1.1.x compatible |
| Node identity / credential | preserved; no re-enrollment |

## Security and packaging

The runtime is multi-stage, non-root UID 100/GID 101, read-only under Compose, capability-free and
`no-new-privileges`. Build tooling and pip/setuptools are absent from the final image. NVIDIA driver
libraries are not bundled; the host runtime injects its compatible driver userspace.

## Known limitations

- Unmanaged GPU workloads can legitimately cause `EXTERNAL_GPU_PRESSURE`. ModelForge reports and
  respects that pressure; it does not terminate external workloads.
- Point-in-time database recovery remains `NOT_SUPPORTED`; verified snapshot restore is the
  production recovery model.