AgentCollab v1.1.0

Minor release of AgentCollab — the cryptographically verifiable collaboration protocol for AI agents. Additive changes only; a conforming v1.0.x agent behaves correctly under v1.1.0.

Protocol identity

AgentCollab/1.1.0#sha256:c262d661c6455de7

Full bundle root and per-file hashes: PROTOCOL_MANIFEST.yaml, signed by the maintainer (SSH signature, namespace agentcollab-manifest).

Out-of-band anchor: patrickmccanna.net/agentcollab — key fingerprint, machine-readable allowed_signers, and verification instructions from a domain this repository does not control.

Changed from v1.0.1

• Schemas are normative. The spec now references schemas/ as the machine-checkable expression of every labeled block (bin/agentcollab-lint.py is the reference validator). Spec text governs on conflict; schemas live outside the hashed bundle so tooling can evolve without a release.
• Fork rules are normative (Handshake §3): a modified bundle must change the AgentCollab name prefix and ship its own trust store and out-of-band anchor. Version precedence (§6) is now explicitly scoped to the verifier's own pinned trust store — a higher-version bundle signed by any other key cannot win a mismatch. Governance, key rotation, and succession policy: GOVERNANCE.md.
• Scripts renamed to bin/agentcollab-id.sh / bin/agentcollab-verify.sh / bin/agentcollab-lint.py, resolving the acronym collision with the Agent Communication Protocol. The old acp-* names keep working as compatibility aliases.
• INVENTORY protocol-line format fixed: the template now mandates <exact output of bin/agentcollab-id.sh> [L2] — field starts with the exact script output, level in brackets, any annotation after a dash. Found by the live conformance reference run, where the old placeholder invited free-text annotation.

Verify this release

git clone --branch v1.1.0 https://github.com/CaptainMcCrank/AgentCollab
cd AgentCollab
./bin/agentcollab-verify.sh   # expect: VERIFIED [L2] AgentCollab/1.1.0#sha256:c262d661c6455de7
./tests/run-tests.sh          # expect: RESULT pass=10 fail=0

Mixed-version deployments: Handshake §6 governs — v1.1.0, carrying a valid maintainer signature, supersedes v1.0.x once both parties can verify it.

License: Apache-2.0

AgentCollab v1.0.1

Patch release of AgentCollab — a cryptographically verifiable collaboration protocol for AI agents sharing a project: handoff envelopes, inventory-before-edit, conflict negotiation, specialist delegation, and a hash-manifest handshake that lets two agents prove they are operating under the same, unmodified rules.

Protocol identity

AgentCollab/1.0.1#sha256:ecce17042a867fe9

Full bundle root and per-file SHA-256 hashes: PROTOCOL_MANIFEST.yaml, signed by the maintainer (detached SSH signature, namespace agentcollab-manifest).

Maintainer signing key

Out-of-band anchor: patrickmccanna.net/agentcollab — serves this fingerprint, a machine-readable allowed_signers file, and verification instructions from a domain this repository does not control.

Pin this fingerprint from a source other than the repo itself — that is what makes L2 verification mean "unmodified from upstream" (see Handshake.md §7):

ED25519 SHA256:QzsA94AxteAb+u4NZXUuZltfXT6JOhdkALs3onZqF2U  (patrickmccanna@gmail.com)

Verify this release

git clone --branch v1.0.1 https://github.com/CaptainMcCrank/AgentCollab
cd AgentCollab
./bin/acp-verify.sh          # expect: VERIFIED [L2] AgentCollab/1.0.1#sha256:ecce17042a867fe9
./tests/run-tests.sh         # expect: RESULT pass=10 fail=0

Changed from v1.0.0: Handshake.md §7 now names the out-of-band key anchor (patrickmccanna.net/agentcollab) inside the signed bundle itself. No normative behavior changes. As with any bundle edit, the protocol ID changed; §C.5/§6 mismatch resolution governs mixed-version encounters (higher signed version wins).

What's in the release

• protocol/Agent_Collaboration_Protocol.md — the core spec: CONTEXT-HANDOFF envelopes, INVENTORY-first receivers, CONFLICT/RECONCILE negotiation, DELEGATE
• protocol/Handshake.md — the agreement mechanism: bundle root computation, protocol ID, verification levels L0/L1/L2, mismatch resolution, signing, release procedure
• protocol/Agent_Charter.md — the minimal per-agent declaration the protocol arbitrates between
• bin/acp-id.sh, bin/acp-verify.sh — POSIX reference implementation (deps: sha256sum, ssh-keygen)
• adapters/ — integration-profile template for binding the tool-agnostic interfaces (work tracker, session log, …) to your stack
• tests/ — fixture suite proving the verifier rejects tampered docs, forged manifests, stale and untrusted signatures

The handshake proves integrity and authenticity of the rules — it cannot prove a model followed them. Every mechanism is labeled honestly (shell-enforced / instructed-only / deployment-enforceable) in the spec.

License: Apache-2.0

AgentCollab v1.0.0

First public release of AgentCollab — a cryptographically verifiable collaboration protocol for AI agents sharing a project: handoff envelopes, inventory-before-edit, conflict negotiation, specialist delegation, and a hash-manifest handshake that lets two agents prove they are operating under the same, unmodified rules.

Protocol identity

AgentCollab/1.0.0#sha256:c031fa97e660faac

Full bundle root and per-file SHA-256 hashes: PROTOCOL_MANIFEST.yaml, signed by the maintainer (detached SSH signature, namespace agentcollab-manifest).

Maintainer signing key

Out-of-band anchor: patrickmccanna.net/agentcollab — serves this fingerprint, a machine-readable allowed_signers file, and verification instructions from a domain this repository does not control.

Pin this fingerprint from a source other than the repo itself — that is what makes L2 verification mean "unmodified from upstream" (see Handshake.md §7):

ED25519 SHA256:QzsA94AxteAb+u4NZXUuZltfXT6JOhdkALs3onZqF2U  (patrickmccanna@gmail.com)

Verify this release

git clone --branch v1.0.0 https://github.com/CaptainMcCrank/AgentCollab
cd AgentCollab
./bin/acp-verify.sh          # expect: VERIFIED [L2] AgentCollab/1.0.0#sha256:c031fa97e660faac
./tests/run-tests.sh         # expect: RESULT pass=10 fail=0

What's in the release

• protocol/Agent_Collaboration_Protocol.md — the core spec: CONTEXT-HANDOFF envelopes, INVENTORY-first receivers, CONFLICT/RECONCILE negotiation, DELEGATE
• protocol/Handshake.md — the agreement mechanism: bundle root computation, protocol ID, verification levels L0/L1/L2, mismatch resolution, signing, release procedure
• protocol/Agent_Charter.md — the minimal per-agent declaration the protocol arbitrates between
• bin/acp-id.sh, bin/acp-verify.sh — POSIX reference implementation (deps: sha256sum, ssh-keygen)
• adapters/ — integration-profile template for binding the tool-agnostic interfaces (work tracker, session log, …) to your stack
• tests/ — fixture suite proving the verifier rejects tampered docs, forged manifests, stale and untrusted signatures

The handshake proves integrity and authenticity of the rules — it cannot prove a model followed them. Every mechanism is labeled honestly (shell-enforced / instructed-only / deployment-enforceable) in the spec.

License: Apache-2.0