Skip to content

Releases: Amaljeevs/agentguard

Release list

AgentGuard v0.2.1 - Language-Neutral Authorization API & Auto-Configuration

AgentGuard v0.2.1 - Language-Neutral Authorization API & Auto-Configuration Latest
Latest

Choose a tag to compare

View all tags
@Amaljeevs Amaljeevs released this 12 Oct 13:07
v0.2.1
13da912

AgentGuard 0.2.1

Additions and Enhancements

  • Spring Web Auto-Configuration: Added AgentGuardWebAutoConfiguration in �gentguard-spring-web with AutoConfiguration.imports for Spring Boot 3 autoconfiguration of POST /v1/authorize.
  • SPIFFE Workload SVIDs: Added SpiffeAgentIdentityResolver supporting zero-trust workload identity tokens.
  • Entra ID & Keycloak Claim Mappings: Direct mapping for oid, �zp, �ppid, id, and Keycloak
    esource_access roles.
  • Comprehensive Adversarial Suite: 32-test security matrix covering privilege escalation, forged claims, approval tampering, replay attacks, and expired credentials.
  • Interactive Simulator Parity: Updated code files explorer with �gentguard-spring-web support and added Mermaid architecture diagram to README.
Assets 2
Loading

AgentGuard v0.2.0 - Production-Grade AI Agent Authorization & Governance

AgentGuard v0.2.0 - Production-Grade AI Agent Authorization & Governance

Choose a tag to compare

View all tags
@Amaljeevs Amaljeevs released this 12 Oct 12:49
v0.2.0
d60b6aa

AgentGuard 0.2.0

Key Highlights

  • Verified Agent Identity: Never trust agentId/roles from payload bodies. Added AgentIdentityResolver, JwtClaimsAgentIdentityResolver supporting Keycloak and Entra ID claims, and SpiffeAgentIdentityResolver for workload SVIDs.
  • Action-Bound Human Approval: New �gentguard-approval module binding human approvals to cryptographic SHA-256 request hashes, with full APPROVAL_REQUIRED -> APPROVED / DENIED / EXPIRED -> CONSUMED lifecycle and single-use execution guarantees.
  • Secure Delegation: Enforce child permissions ? parent permissions, ancestor identity lookups, cycle detection, maximum delegation depth, and validity bounds.
  • Policy Engine Hardening: Deterministic policy evaluation, policy revision hashes, risk levels, rule IDs, and trace IDs.
  • Spring AI Integration: �gentguard-spring-ai module providing GuardedToolCallback to guard LLM tool calls.
  • Language-Neutral Authorization API: �gentguard-spring-web adapter exposing POST /v1/authorize with auto-configuration.
  • Sanitized Audit Evidence: Parameter sanitization masking secrets, recording hashes and execution provenance.
  • Comprehensive Adversarial Suite: Verified against privilege escalation, identity forging, approval tampering, replay attacks, and expired credentials.
Loading