Skip to content

AgentCert v0.4.0

Choose a tag to compare

View all tags
@Kakarottoooo Kakarottoooo released this 16 Jul 06:27
v0.4.0
5235f8c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bounded Vendor Sandbox Egress v0.4

AgentCert can now collect one narrowly bounded read-only observation from an official Stripe sandbox and retain a redacted assurance report.

Added

  • npx agentcert sandbox stripe-readonly --payment-intent pi_... [--push]
  • exact Stripe HTTPS origin, GET, and PaymentIntent resource route allowlists
  • 5-second request timeout and 10-request/minute process-local cap
  • credential-free request audit and agentcert.sandbox_vendor_egress.v0.4 JSON Schema
  • Hosted Sandbox certifications policy and request outcome view

Security boundary

The Stripe key is read only from STRIPE_RESTRICTED_TEST_KEY. AgentCert does not retain the key, Authorization header, raw response, vendor error body, client_secret, metadata, or customer data. This release does not permit Stripe writes or production access.

See the setup and evidence boundary guide.

Assets 2
Loading