AURA Harness — a runtime coat for agent loops: audit, policy, and compliance export.
v0.3.4 packages everything merged since v0.3.3. The headline is the reference ToolHost epic (#12): a host-agnostic membrane coat you wrap around real skill runtimes without replacing the loop inside. Manifest rules merge at bind, Monitor and Break observer presets watch the spine, ingress bind context lands on registration events, OTel exports promoted principal attributes, and the sequencer can skip steps conditionally with when.
On top of that coat, this release adds CLI and docs depth — hash-chain verification, audit report display, agent and config management, flat runnable examples, an integrations index, and a first-run onboarding guide.
Experimental (alpha). API may change before 1.0.
Install
pip install aura-harness==0.3.4Optional Skillware integration:
pip install "aura-harness[skillware]==0.3.4"From source:
git clone https://github.com/ARPAHLS/aura.git
cd aura
git checkout v0.3.4
pip install -e ".[dev]"Reference ToolHost coat (#12)
- ToolHost protocol and SkillwareHost reference adapter — wrap execute()-style runtimes through egress policy
- Skill manifest merge at bind — session rules enriched from skill manifest at registration
- Monitor observer preset — after-call analytics on the spine
- Break observer preset — alerts on repeated tool intents
- Ingress bind enrichment — host bind context on skill registration events
- OTel promoted attributes — agent ref, policy version, principal, and skill id on spans
- Sequencer
when— conditional step skip with skipped-step events on the spine - Capstone guide — end-to-end mock → live → Ollama path in one doc
- Examples 05–08 — skill tour, sequencer chain, observer presets, emit-only loose coat
- Integrations — Skillware adapter index, registry loader, mock/live reference scripts, cloud body loops (OpenAI, Anthropic, Gemini)
[integrations]extra — optional deps for skillware, ollama, and cloud providers
CLI & audit receipts
- Hash-chain verification for exported JSONL sessions
- Human-readable audit reports, JSON output for CI
- Agent profile editing, merged config display, persisted project and storage paths
- Interactive splash, grouped help, splash polish on Windows Terminal
aura verify chain path/to/session.jsonlaura report showaura report show --jsonDocs & examples
- Onboarding guide — posture → identity → body → approve → receipt
- Session close and export — audit reports, export commands, receipt review in using-aura.md
- Flat examples layout (#21) — runnable scripts at repo root with a single README index
- Docs sync — INDEX, ROADMAP, integration guides aligned with epic closure
CI & quality
- Reusable test workflow (#17) — PR CI and PyPI publish share the same lint/test gate
- Python 3.10–3.13 matrix on Ubuntu (#10)
- Core test gaps closed (#4) — tamper detection, compare fields, constraint matrix
- Warn-only pip-audit in CI (#11)
Changed
- Example 06 compress step skips when scan reports unsafe (sequencer
when) - Agent registry keeps ref/alias maps consistent when agent ref changes
- Optional persisted project directory in global config
Links
Full diff: v0.3.3...v0.3.4
Contributors
@rosspeili @DebayanSen96 @evgenyponomarev @bladedancer-chronicle3 @frobel0520