HandoffProbe v0.2.0 is a release-quality and product-coherence release for defensive A2A 1.0 → MCP 2026-07-28 handoff-security testing.
Highlights
- Exactly 22 stable attacks: 12 P0 and 10 P1
- Stable CLI:
test,list,explain,--version,--help - Report schema remains
1 - Deterministic exit semantics remain
0 / 1 / 2 / 3 - Reusable source-backed GitHub Action remains supported
- Narrower npm package boundary for the stable release build
- Phase 9 crossing-corpus work remains research/conformance tooling and is not a new public CLI/API surface
- Node.js requirement remains
>=24 <25
Install
npm install --save-dev --save-exact handoffprobe@0.2.0One-shot execution:
npm exec --yes --package=handoffprobe@0.2.0 -- handoffprobe --version
npm exec --yes --package=handoffprobe@0.2.0 -- handoffprobe test --target securePublication verification
- npm package:
handoffprobe@0.2.0 - Package files:
287 - npm shasum:
dcc638b0b8542306f112fe1c4375df632eb12db5 - npm integrity:
sha512-7Yt9XEfsR+hPY4nCfvc3WH7tHkLE/7p6+HSMmo9cg7mxY6Q2JZWSPUXVJ2hOQ9peADFORmBBvSiOqAYlNzqA7w== - SHA-256:
1d6e438182a4ecbf3c0dae00df7ad92ead40ad8fca8c6a99e7374048c04391d4 - Immutable release commit:
b0fc2a8abe1df36e526536d714418a9842be2f77
Clean external installation and execution were verified after publication, including all 22 stable attacks against the bundled secure target.
Full technical release notes are available in docs/V0_2_0_RELEASE_NOTES.md.
Commercial support
HandoffProbe remains free and open source under Apache-2.0.
Teams applying HandoffProbe to real agent systems can work with Heaviside Solutions on authorized Handoff Security Assessments, custom adapters and integrations, private organization-specific test packs, and technical onboarding or enterprise support.
Need help testing a real agent handoff? https://heaviside-solutions.com/kontakt