agentcert-bench-v0.5.1

Five-repetition AgentCert Bench artifacts produced from the checked-in signed study. See SHA256SUMS and the embedded release manifest.

agentcert-bench-v0.5.0

Five-repetition AgentCert Bench artifacts produced from the checked-in signed study. See SHA256SUMS and the embedded release manifest.

AgentCert v0.7.2

Zero-to-Evidence Guided Onboarding

• Run
  px agentcert@latest try --template workflow from an empty directory without an agent repo, model key, browser, or external system.
• Choose sample, real-agent integration, or existing-evidence upload in Hosted onboarding.
• Use the public getting-started guide at https://agentcert.app/docs.
• Synthetic samples remain explicitly reported-strength and cannot establish CURRENT assurance.

Validated through clean public npm installation, schema and artifact checks, 168 targeted tests, all repository CI jobs, and desktop/mobile route checks.

AgentCert v0.7.1

AgentCert v0.7.1

This patch makes the Customer-owned Browser Adapter starter work through the
documented two-command npx path in a clean directory.

• Generated starters are dependency-free configuration modules.
• The CLI's bundled runtime constructs and certifies the adapter kit.
• Starters generated by v0.7.0 that export browserAdapterKit remain supported.
• A regression test imports the generated starter without a local package
  installation.

No Hosted API, evidence schema, or enforcement semantics changed.

AgentCert v0.7.0

AgentCert v0.7.0

AgentCert v0.7.0 completes the first narrow action-assurance protocol from
declared capability through controlled browser execution and independently
verified outcome.

Changes

• Adds universal capability manifests, normalized action semantics, five
  reference capability packs, coverage accounting, and reviewed corrections.
• Adds immutable action mandates, policy decisions, outcome attestations, and
  signed action-assurance receipts.
• Adds registered browser runtime identities, short-lived one-time execution
  grants, signed runtime claims, replay protection, and central evidence
  classification.
• Ships a sandbox-only Customer-owned Browser Adapter Kit with exact origin,
  action, operation, and resource allowlists; separated write/read
  credentials; independent outcome probes; target-audit reconciliation; and a
  deterministic conformance command.
• Adds TypeScript SDK methods for runtime identity and execution-grant
  lifecycle operations.
• Serializes PostgreSQL migrations and records each applied file with an
  immutable SHA-256 checksum.

Database upgrade

The Hosted control plane applies migrations 022-024 inside a transaction under
a PostgreSQL advisory lock. On the first ledger-aware startup, existing
idempotent migrations are replayed and recorded; later startups skip recorded
files and reject checksum drift.

The rollback rehearsal is an application rollback, not a destructive schema
rollback: the v0.6.3 control plane can run its production acceptance suite
against the v0.7.0 schema while the new tables remain intact. Do not drop the
022-024 evidence tables during rollback.

Public packages

npx agentcert@0.7.0 --help
npx agentcert@0.7.0 browser-adapter init
npx agentcert@0.7.0 browser-adapter certify --adapter ./agentcert.browser-adapter.mjs
npm install agentcert-sdk@0.5.0

Dependency review

The release has no known critical or high-severity production dependency
advisories. @agentcert/mcp-adapter retains two npm-audit moderate findings
from @hono/node-server through MCP SDK 1.29.0. The affected Windows
serve-static path is not imported or exposed by AgentCert's stdio adapter.
Downgrading to MCP SDK 1.24.3 was rejected because that version carries known
high-severity shared-transport data-leak and ReDoS advisories.

See the two-hour browser adapter onboarding
and browser enforcement boundary.

AgentCert v0.5.4

7-Day Agent Action Assurance Review

• Adds fixed-scope engagements for one customer, agent version, sandbox workflow, expected outcome, and seven-day deadline.
• Locks the evaluation plan and binds a baseline, remediation items, and one distinct retest.
• Issues RELEASE, RELEASE_WITH_CONTROLS, or BLOCK with a signed delivery packet.
• Records time from integration start to first valid evidence.
• Publishes the controlled action runtime through agentcert-sdk/runtime; agentcert-sdk@0.3.1 is available on npm with AgentCert-named APIs and legacy aliases.
• Sets the public offer to $5,000 for one workflow and one retest, private by default.

AgentCert assurance evidence is scoped evidence, not a guarantee or official certification.

AgentCert v0.5.3

AgentCert v0.5.3

AgentCert v0.5.3 moves the public product and hosted CLI connection surface to
the canonical https://agentcert.app domain.

Changes

• Uses https://agentcert.app as the CLI's default Hosted Control Plane.
• Updates npm package metadata and package documentation.
• Updates GitHub production workflows and generated reference-repo workflows.
• Updates product, workspace, evidence, and immutable archive links.
• Keeps the generated Render hostname as deployment infrastructure rather than
  a user-facing product URL.

Upgrade

npx agentcert@0.5.3 --help
npx agentcert connect --project your-project-id

Existing named connections continue to work. Re-run agentcert connect only
if an existing connection should move from the generated Render hostname to
the canonical domain.

AgentCert v0.5.2

AgentCert v0.5.2

AgentCert v0.5.2 makes the external path from an empty repository to retained Hosted evidence observable and repeatable.

Highlights

• Hosted projects can be created, renamed, and switched without changing stable project IDs or slugs.
• Onboarding tracks three real milestones: project key created, CLI authenticated, and first evidence received.
• npx agentcert init --template ... supports browser, coding, MCP, workflow, and data agents.
• Structured API errors include recovery guidance and request IDs.
• Pilot feedback records stage, category, outcome, bounded context, and failure reason without accepting arbitrary secret-bearing payloads.
• Governance aggregates 7/30/90-day project cohorts into conversion, median onboarding time, failure reasons, and a portable agentcert.pilot_funnel.v0.1 report.
• CI installs the packed CLI into an empty repository, validates all five templates, uploads evidence, and checks project isolation.
• Threat-model, tenant-isolation, and backup/restore guardrails are documented and tested.

Install

npx agentcert@0.5.2 init --template browser --subject my-agent

Choose browser, coding, mcp, workflow, or data. Hosted usage starts at agentcert-control-plane.onrender.com/app.

Boundaries

The generic coding, workflow, and data templates establish an event/action envelope boundary; they do not automatically observe every internal model step. Backup/restore automation includes destructive-target guardrails, but a real drill still requires a separate disposable database.

AgentCert v0.5.0

Real Vendor Acceptance v0.5

• Protected manual GitHub Action for one real Stripe sandbox PaymentIntent read.
• Independent pre-upload redaction gate, CLI validation, and final artifact scan.
• Production Control Plane retention with historical status, score, schema, policy, and latency comparison.
• Hosted Sandbox certifications health and regression view.
• Public �gentcert sandbox upload-report command for validated sandbox reports.

The Stripe workflow remains read-only, sandbox-only, and requires a restricted
k_test_ key plus environment approval. It does not certify key permissions, Stripe controls, live mode, or write operations.

See docs/real-vendor-acceptance.md for setup.

AgentCert v0.4.0

Bounded Vendor Sandbox Egress v0.4

AgentCert can now collect one narrowly bounded read-only observation from an official Stripe sandbox and retain a redacted assurance report.

Added

• npx agentcert sandbox stripe-readonly --payment-intent pi_... [--push]
• exact Stripe HTTPS origin, GET, and PaymentIntent resource route allowlists
• 5-second request timeout and 10-request/minute process-local cap
• credential-free request audit and agentcert.sandbox_vendor_egress.v0.4 JSON Schema
• Hosted Sandbox certifications policy and request outcome view

Security boundary

The Stripe key is read only from STRIPE_RESTRICTED_TEST_KEY. AgentCert does not retain the key, Authorization header, raw response, vendor error body, client_secret, metadata, or customer data. This release does not permit Stripe writes or production access.

See the setup and evidence boundary guide.