Skip to content

llmAntidote v3.2.3

Choose a tag to compare

View all tags
@GroveMinting GroveMinting released this 11 Oct 18:39
· 4 commits to main since this release
v3.2.3
2070999
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Catalog-readiness pass for submission to the Hermes plugin catalog. No behavior change to the runtime policy.

Changes

  • Dependency policy: cryptography>=42 → cryptography>=42,<51 in pyproject.toml and requirements.txt (bounded ceiling; still co-installs with Hermes' pinned 50.0.1).
  • Credentials: the evaluation CLI now resolves its API key through Hermes' secret scope (agent.secret_scope.get_secret) when running inside Hermes, falls back to the named environment variable only in the standalone entry point, and fails closed if a scoped read raises.
  • Disclosure: README gains a Disclosure section (network, reads outside own data, generated private keys, SQLite storage; no shell/subprocess/telemetry) and documents the three caution security-scan findings as detection regexes, not behavior.
  • docs/CATALOG_SUBMISSION.md: ready plugin-catalog/llm-antidote.yaml entry, validation commands, and rule-13 PR disclosure text.
  • mypy override for the optional agent.* import.

Verification

  • hermes plugins doctor . --ci — pass.
  • hermes plugins validate . --install-deps — pass in a clean environment (caution only).
  • pytest: 192 passed; coverage 81.8% (branch).
  • ruff check . and mypy: clean; pip-audit -r requirements.txt: no known vulnerabilities.
  • CI matrix (3.11/3.12/3.13), manifest validation, and the real-Hermes e2e job (standalone + enforced) all green.

Compatibility

  • Drop-in upgrade from 3.2.2. Python 3.11+; Hermes Agent 0.21.x.

Full details in CHANGELOG.md.

Assets 2
Loading