Skip to content

v0.8.0 — regulatory-logic pass, conformity artifacts, MCP contract, hardening

Choose a tag to compare

View all tags
@JKasteele JKasteele released this 26 Aug 19:25
· 49 commits to main since this release
v0.8.0
89d0045
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A review-driven correctness, testing and hardening release. Full details in CHANGELOG.md.

Highlights

  • Three new report types (18 total): EU Declaration of Conformity (Art. 47 + Annex V), EU-database registration data sheet (Art. 49 + Annex VIII), and a GPAI obligations report (Art. 53–55) with copyright-policy and training-content-summary templates.
  • Regulatory-logic correctness: Art. 2 scope exemptions (military, scientific R&D, pre-market, personal use) each cited by paragraph; provider vs. deployer obligation split filtered on role; GPAI open-source carve-out (Art. 53(2)); GPAI-aware applicability dates; Art. 4 AI literacy surfaced as a baseline obligation.
  • MCP surface: scan_repository tool, report-by-id, and a confirmed flag on save_assessment that turns human-in-the-loop into an enforced contract.
  • Hardening: report free-text sanitised before Markdown interpolation; DEMO_MODE enforced server-side; atomic storage writes; no more Google Fonts fetch (privacy).
  • Testing: four new test suites (CLI, MCP, LLM service, storage), five new golden-set cases, coverage in CI, a Windows matrix entry and a Docker smoke test — 167 tests total.
  • Release automation: tag-triggered PyPI Trusted Publishing workflow (this release exercises it for the first time).

The live demo runs this version.

Assets 2
Loading