Skip to content

FreshCtx 0.15.0

Choose a tag to compare

View all tags
@bhooshanvarma bhooshanvarma released this 09 Sep 17:03
v0.15.0
e08f98e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

FreshCtx 0.15.0 strengthens A2A-to-MCP execution boundaries with action-intent integrity, replay protection, and bounded fail-closed availability controls.

Added

  • Privacy-bounded A2A action-intent commitments using a domain-separated digest, without copying raw MCP tool arguments into receipts or audit records.
  • Atomic single-use delegation stores for process-local and cross-process SQLite replay protection, including concurrent-use coverage.
  • Bounded retries for temporary UNVERIFIABLE validation outcomes and an optional circuit breaker that continues to fail closed.
  • A monotonic evidence-version example covering the ABA case where a value changes and later returns to its original representation.

Compatibility and scope

  • Existing 0.14 A2A receipts remain readable. Intent and replay enforcement activate when the receiver configures the corresponding resolver and store.
  • Freshness, delegation integrity, action-intent integrity, replay protection, provenance, authorization, and availability remain separate claims.
  • Parent and root correlation IDs remain audit links; they are not chain-wide security anchors or revocation controls.

Install

python -m pip install 'freshctx[a2a-mcp]==0.15.0'

PyPI: https://pypi.org/project/freshctx/0.15.0/

Assets 2
Loading