Skip to content

llmAntidote v3.2.0

Choose a tag to compare

View all tags
@GroveMinting GroveMinting released this 11 Oct 02:47
· 7 commits to main since this release
v3.2.0
0a52a15
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A hardening release driven by the live-review findings against v3.1.0 (docs/IMPROVEMENT_LIST.md). Validated end-to-end against a running Hermes v0.21.6 install.

Highlights

  • Fail closed on the enforced model route: an unobserved or empty model string is no longer treated as admitted. New admission.model_route_unobserved vs admission.model_route_mismatch, plus admission_require_route_observation (default true).
  • Oversized arguments are refused (input.arguments_exceed_scan_limit); the whole bounded text is scanned so a pattern hidden mid-payload is caught. Cap configurable via max_scan_bytes.
  • Content vs intent: write_file/patch content is no longer scanned for egress patterns; writes into sensitive roots carry access.sensitive_root_write.
  • Capability-scoped taint (taint_scope: egress | egress_persist_shell (default) | all), so a secret read no longer blocks harmless local reads/writes.
  • Real Hermes tool surface: new persist capability (memory/skills/scheduled jobs), vision/browser-vault egress, a maintained inventory fixture, and capabilities.py as the single name/family source shared with audit.
  • Exact correlation: pending/taint keyed by Hermes' tool_call_id; session/task ids are no longer merged; id-less sessions use a per-instance sentinel; pending_ttl_minutes bounds orphaned reservations.
  • Ledger trust root: fleet ledger trust|allow-signer|revoke-signer|rotate-signer with legacy pin auto-migration.
  • Trusted plain-HTTP evaluation endpoints can pin host:port.

Testing & tooling

  • Real-Hermes end-to-end hook harness for standalone and enforced modes, wired into CI.
  • Hypothesis property tests; oversized/unknown-key/trusted-host regression tests.
  • mypy, coverage floor (80% branch), pip-audit, and ruff S in CI; Python 3.13 added.

Verification

  • pytest: 179 passed; coverage 82% (branch).
  • ruff check . and mypy: clean.
  • pip-audit -r requirements.txt: no known vulnerabilities.
  • CI matrix (3.11/3.12/3.13), manifest validation, and the Hermes e2e job all green.

Compatibility

  • Python 3.11+; Hermes Agent 0.21.x.
  • Existing deployments upgrade in place; the legacy ledger signer pin migrates automatically.

Full details in CHANGELOG.md.

Assets 2
Loading