Python mcop py-v3.3.0

Python mcop py-v3.3.0 — published to PyPI via Trusted Publishing (OIDC, automatic Sigstore provenance).

• PyPI: https://pypi.org/project/mcop/
• Framework release notes: see the corresponding v* framework Release for the full feature set.

Attached assets: CycloneDX SBOMs covering the framework workspace and the @kullailabs/mcop-core package, generated by pnpm sbom and validated against the upstream CycloneDX schema (pnpm sbom:validate).

What's Changed

• ci(npm): clear NODE_AUTH_TOKEN sentinel so OIDC trusted publishing wins by @Kuonirad in #561
• ci(npm): strip _authToken from .npmrc so OIDC trusted publishing wins by @Kuonirad in #562
• ci(npm): unset NODE_AUTH_TOKEN (not just empty-string) to trigger OIDC by @Kuonirad in #563
• ci(npm): use env -u NODE_AUTH_TOKEN to bulletproof OIDC trigger by @Kuonirad in #564
• ci(npm): pass --provenance explicitly to trigger OIDC trusted publishing by @Kuonirad in #565
• ci(npm): run publish with --loglevel=verbose + cat debug log on failure by @Kuonirad in #566
• ci(npm): pin SBOM-step setup-project to Node 24 (don't downgrade npm to 10.x) by @Kuonirad in #567
• chore(release): @kullailabs/mcop-core 0.2.1 (OIDC trusted-publishing validation) by @Kuonirad in #568
• docs(examples): expand case studies, ONNX/GPU demos, and UAP MCP reference by @Kuonirad in #569
• docs(audit): archive 2026-05-01 master audit, add remediation tracker + Lighthouse CI by @Kuonirad in #570
• Update MCOP frontend testing skill for example smoke checks by @Kuonirad in #571
• fix: stabilize task chunker progress under coverage by @Kuonirad in #572
• chore(repo): remove regressed package-lock.json + reconcile second 2026-05-01 audit by @Kuonirad in #573
• ci: SHA-pin remaining mutable-tag actions (cypress + stale-branch cleanup) by @Kuonirad in #574
• test(parity): add TS↔TS triad parity guardian for src/core vs packages/core/src by @Kuonirad in #575
• chore(npmrc): enable strict-peer-dependencies by @Kuonirad in #576
• chore(audit): apply comprehensive audit remediation (2026-05-01) by @Kuonirad in #578
• chore(audit): apply comprehensive audit remediation (2026-05-01) (#57… by @Kuonirad in #581
• chore(audit): part 2 remediation — CI flake fix, Freepik tests, stale… by @Kuonirad in #583
• refactor(hud): unify VSI compute path; close audit finding MEDIUM-1 by @Kuonirad in #582
• docs(readme): premium hero layout with architecture diagram and triad… by @Kuonirad in #584
• feat(docs): add premium SVG architecture diagram for README by @Kuonirad in #585
• feat: cinematic $500M production homepage — 5 premium SVG assets + rewritten README by @Kuonirad in #586
• feat: visual overhaul v2 — cinematic homepage renders correctly on GitHub by @Kuonirad in #587
• feat: cinematic README overhaul - 500M production budget aesthetic by @Kuonirad in #588
• feat(video): long-form video orchestrator + MemoryPack/Direct Forcing reference by @Kuonirad in #589
• feat(vsi): deepened predictive coaching engine (v3) by @Kuonirad in #590
• feat: apply MCOP audit setup and resonance remediations by @Kuonirad in #591
• fix: support browser-safe trace ids by @Kuonirad in #592
• test: add audit property fuzz coverage by @Kuonirad in #593
• feat: add triad observability hooks by @Kuonirad in #594
• Update MCOP frontend testing skill for observability checks by @Kuonirad in #595
• Update frontend testing skill for Dialectical Studio runtime proof by @Kuonirad in #596
• v2.2.1 hardening — floor 0.65 + adaptiveThreshold + curiosityBonus by @Kuonirad in #597
• feat(arcagi3): MCOP-instrumented ARC-AGI-3 agent with Grok strategy by @Kuonirad in #598
• feat(ci): manually-triggered ARC-AGI-3 agent workflow by @Kuonirad in #599
• feat(arcagi3): map-then-exploit Grok strategy with frame diffs by @Kuonirad in #600
• Claude/arcagi3 mapping strategy by @Kuonirad in #601
• fix(arcagi3): handle ndarray frames in JSON serialisation by @Kuonirad in #602
• fix(arcagi3): handle list-of-ndarray frames (follow-up to #602) by @Kuonirad in #603
• fix(arcagi3): resolve available_actions via value->member scan by @Kuonirad in #604
• chore(arcagi3): log resolved Grok model and parse-fail fallbacks by @Kuonirad in #605
• fix(arcagi3): snap-to-allowed retry + clearer mapping-grok parse logs by @Kuonirad in #606
• fix(arcagi3): soften system prompt to dodge Grok-4 safety filter by @Kuonirad in #607
• fix(arcagi3): swap default Grok model to fast variant, flush partial result on cancellation by @Kuonirad in #608
• ci(arcagi3-run): wire grok_model input + preserve partial result on cancel by @Kuonirad in #609
• feat(arcagi3): per-step INFO log and stuck-detector for action loops by @Kuonirad in #610
• chore(ci): bump the actions group with 2 updates by @dependabot[bot] in #611
• chore(ci): bump actions/setup-python from 5.6.0 to 6.2.0 by @dependabot[bot] in #612
• chore(deps): bump the development group with 2 updates by @dependabot[bot] in #614
• chore(ci): bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #615
• chore(ci): bump softprops/action-gh-release from 2.6.2 to 3.0.0 by @dependabot[bot] in #616
• ci(release-drafter): bump to v7.2.1 + drop redundant pull_request trigger by @Kuonirad in #617
• feat(arcagi3): inject last-N action history into Grok prompt by @Kuonirad in #618
• benchmark: v2.0 schema — quality + latency, 20 new tasks, playbook, comparative study by @Kuonirad in #619
• Add regulated provenance adapter (FHIR & ISO20022 mappings) by @Kuonirad in #621
• Initial etch: Grok + WebGPU integration spec by @Kuonirad in #622
• Fix npm PostCSS audit advisory by @Kuonirad in #623
• Eudaimonic Bloom v2.3.0 — UniversalEncoder, ResonantRecentQuery, SelfHealingDimension, and EudaimonicEtch by @Kuonirad in #624
• Introduce Positive-Building features: UniversalEncoder, portable SHA-256, growth ledger, eudaimonic etch, and tests by @Kuonirad in #625
• Add portable SHA-256 + NovaNeoWeb, PositiveResonance growth ledger, Eudaimonic etches, low-memory mode, and supporting tests/docs by @Kuonirad in #626
• Default ARC runs to Grok 4.3 and enable low-memory MCOP profile by @Kuonirad in #627
• Improve ARC-AGI-3 run observability and budget by @Kuonirad in #628
• Grok: inject Merkle-stigmergy history into completions by @Kuonirad in #629
• Add NOVA-EVOLVE meta tuner by @Kuonirad in #630
• Promote mapping_grok profile; Grok adapter: model mappings, retries & pipeline hooks; add ARC‑EVO benchmark by @Kuonirad in #631
• Add CUDA accelerator provenance layer by @Kuonirad in #632
• Add accelerator abstraction with CUDA provider, CPU fallback, and provenance integration by @Kuonirad in #633
• feat(hardware): Φ1 in-process op-sharded CUDA layer with verifiedDevice gate by @Kuonirad in #634
• feat(bench): Φ2 cuda-graph harness with deterministic Merkle baseline by @Kuonirad in #635
• feat(hardware): Φ3 cascade all 6 op-sharded kernels with per-op stream knob by @Kuonirad in #636
• feat(hardware): Φ4 verifiedDevice gate hardening (1k-step soak + BaseAdapter wiring) by @Kuonirad in #637
• feat(hardware): Φ5 adaptive default-on via runtime CUDA probe by @Kuonirad in #638
• Update testing-frontend skill: add Φ1–Φ5 CUDA hardware-layer runtime smoke pattern by @Kuonirad in #639
• feat(arcagi3): HolographicShadowStrategy — goal-only perception, wall learning, oscillation novelty by @Kuonirad in #640
• feat(arcagi3): online goal-colour discovery + forward-model planner in HolographicShadowStrategy by @Kuonirad in #641
• feat(examples): Zyphra Cloud chat-completion via OpenAI SDK by @Kuonirad in #642
• feat(arcagi3): holographic-shadow v2 — centroid-thresholded movement, debug etches, per-state novelty by @Kuonirad in #643
• Add testing-arcagi3-strategy SKILL for ARC-AGI-3 agent testing by @Kuonirad in #644
• feat(arcagi3): wire HolographicShadowStrategy into run_arcagi3_agent CLI by @Kuonirad in #645
• Update arcagi3-run.yml by @Kuonirad in #646
• fix(arcagi3): holographic — track player centroid (not goal) + online player-colour auto-discovery by @Kuonirad in #647
• feat(arcagi3): holographic — online goal-directional bias via cosine(action drift, player→goal) by @Kuonirad in #648
• feat(arcagi3): holographic — goal-BFS planner over learned per-position wall map by @Kuonirad in #649
• Update testing-arcagi3-strategy SKILL: add debug_goal_bfs to closed-set vocabulary by @Kuonirad in #650
• feat(showcase): cinematic Three.js prototype at /showcase by @Kuonirad in #651
• Add Grok image generation adapter by @Kuonirad in #652
• Add due-diligence register and registry telemetry (docs + script + test) by @Kuonirad in #653
• Add decentralized agent coordination docs, registry telemetry script, and due-diligence register by @Kuonirad in #654
• Feat/grok image adapter ts by @Kuonirad in #655
• fix(arcagi3): add --goal-color/--player-color CLI args + HOLOGRAPHIC_… by @Kuonirad in #656
• fix(ci): upgrade actions to Node.js 24 runtime (checkout v5, upload-a… by @Kuonirad in #657
• fix(ci): fix YAML indentation error in goal_color input block by @Kuonirad in #658
• chore: close phase-2 good-first-issues batch (#544-553) by @Kuonirad in #659
• fix(security): bump fast-uri override to ^3.1.2 (GHSA-v39h-62p7-jpjc) by @Kuonirad in #660
• feat(docs): Phase 1 — Logical Efficacy Escalation (discoverability amplification, v2.4) by @Kuonirad in #661
• feat(benchmark): Phase 2 — externalised reproducible benchmark bundle… by @Kuonirad in #662
• feat(integrations): Phase 4 — ecosystem integration deepening (effica… by @Kuonirad in #664
• chore(deps): bump nbconvert from 7.16.4 to 7.17.1 in /examples/reproducible-benchmark in the pip group across 1 directory by @dependabot[bot] in #663
• docs(audit): add complete meta-audit report 2026-05-10 by @Kuonirad in #665
• feat(grounding): automated evidence retrieval + Guardian meta-reasoner (min 0.70) by @Kuonirad in #666
• docs(audit): triage 47 dormant branches (response to 2026-05-11 audit) by @Kuonirad in #667
• chore(license): MIT carve-out for ecosystem integration shims by @Kuonirad in #668
• chore: stale-branch cleanup fix + Phase 4 upstream PR kit by @Kuonirad in #669
• feat(preprint): one-command fill flow for arXiv submission (Phase 2) by @Kuonirad in #670
• chore(deps): bump the production group with 3 updates by @dependabot[bot] in #672
• chore(deps): bump the development group across 1 directory with 4 updates by @dependabot[bot] in #671
• feat(adapters): Qwen / DashScope MCOP adapter (Integration #6) — 1:1 Grok parity by @Kuonirad in #673
• docs(qwen): stamp captured live DashScope Merkle artefact into integration doc by @Kuonirad in #674
• feat(arcagi3): add Qwen-backed QwenStrategy + MappingQwenStrategy by @Kuonirad in #675
• Update testing-arcagi3-strategy skill with Qwen strategies + live test recipe by @Kuonirad in #676
• feat(adapters): multi-provider Grok-vs-Qwen entropy router + Qwen3 catalog expansion by @Kuonirad in #677
• fix(ci): fix YAML indentation in goal_color input block by @Kuonirad in #678
• chore(audit): add May 2026 remediation guardrails (audit ledger, workflow & PR checks, release playbook) by @Kuonirad in #679
• fix(security): upgrade Next.js 16.2.6 → 15.3.3 to resolve 11 HIGH/MODERATE Dependabot alerts by @Kuonirad in #680
• Fix package stigmergy parity drift by @Kuonirad in #681
• Codex/fix library divergence by @Kuonirad in #682
• Fix Dependabot systeminformation alerts by @Kuonirad in #683
• docs(readme): v2.3 CUDA Hardware Layer — flip roadmap row + add Φ1–Φ5… by @Kuonirad in #684
• ci(audit): add CI-ready claim/version/license/proof audit harness by @Kuonirad in #685
• Add AGENTS.md with Cursor Cloud development instructions by @Kuonirad in #686
• Cursor/audit remediation foundation e38a by @Kuonirad in #687
• Cursor/audit v2 remediation ba98 by @Kuonirad in #688
• security: fix OpenSSF Scorecard alerts (token permissions + pinned deps) by @Kuonirad in #689
• fix(ci): repair regressions from #689 in arcagi3 + benchmark lockfiles by @Kuonirad in #691
• chore(deps): bump the pip group across 1 directory with 3 updates by @dependabot[bot] in #690
• docs: update AGENTS.md with Cloud Agent environment setup improvements by @Kuonirad in #692
• test: cover benchmark task upload flow by @cursor[bot] in #693
• Document trust substrate roadmap by @Kuonirad in #695
• Cursor/provenance roadmap 8705 by @Kuonirad in #698
• feat: stigmergic trust substrate — CUDA productionization + cluster mode + hosted provenance ledger by @Kuonirad in #697
• docs: formalize stigmergic substrate roadmap by @Kuonirad in #694
• fix: drop cuda_server/ + src/core/cluster* superseded by PR #697 (resolves CI on #696) by @Kuonirad in #696
• chore(security): resolve open OpenSSF Scorecard alerts (Pinned-Deps, Fuzzing, BranchProtection) by @Kuonirad in #699
• docs(readme): add OpenSSF Best Practices and Scorecard badges by @Kuonirad in #701
• chore(ci): bump the actions group with 4 updates by @dependabot[bot] in #700
• fix(deps): bump cookie >=0.7.0 and tmp >=0.2.4 via pnpm overrides by @Kuonirad in #702
• fix(security): resolve all open Dependabot alerts — brace-expansion + ws by @Kuonirad in #703
• feat(homepage): land motion-glass design handoff as /homepage + docs by @Kuonirad in #704
• fix(homepage): use crypto.getRandomValues for decorative hex strings by @Kuonirad in #705
• feat(core): add first-class eudaimonic scoring ledger primitives by @Kuonirad in #706
• fix(security): resolve three CodeQL security-extended alerts by @Kuonirad in #708
• feat(v2.4): proteome layer + LS20 ARC scaffold + CUDA-substrate CI smoke by @Kuonirad in #709
• docs(v2.4): refresh README + landing page for proteome layer + LS20 scaffold by @Kuonirad in #710
• feat(core): Drift Sentinel Kernel — first-class MCOP module by @Kuonirad in #711
• Claude/wonderful euler yt y5a by @Kuonirad in #712
• chore(security): close open Scorecard alerts (#30, #38) + harden supply-chain config by @Kuonirad in #713
• chore(security): pin qs >=6.15.2 + tame Dependabot major-bump noise by @Kuonirad in #725
• chore(docker-ledger): bump node from 22.22.2-slim to 22.22.3-slim in /services/ledger by @dependabot[bot] in #726
• chore(ci): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #728
• chore(docker-examples): bump node from 22.22.2-bookworm-slim to 22.22.3-bookworm-slim in /examples/reproducible-benchmark by @dependabot[bot] in #727
• Codex/audit gap integrations by @Kuonirad in #729
• docs: refresh README production surface by @Kuonirad in #730
• feat: Bidirectional Grok-MCOP Organelle Host Integration + Production Fixes by @Kuonirad in #731
• docs: surface bidirectional Grok-MCOP organelle host in README + landing page by @Kuonirad in #732
• docs: organelle-host polish — deep-doc link, mermaid diagram, examples row, advanced Redis snippet, landing Try-it block, OG alt refresh by @Kuonirad in #734
• chore(images): Optimize repository images via ImgBot (306.05kb → 293.90kb, -3.97%) by @imgbot[bot] in #733
• fix(ci): unbreak arcagi3-run workflow and refresh stale metadata by @Kuonirad in #735
• [codex] docs: frame positive impact as recursive observable by @Kuonirad in #736
• Add falsification-first onboarding and self-audit scaffolding by @Kuonirad in #737
• feat(audit): operational + falsifiable positive-impact recursion (Phases 1–2) by @Kuonirad in #738
• feat(audit): falsifiable positive-impact recursion — verifier + CI gate (Phase 2) by @Kuonirad in #740
• feat(audit): substrate-driven verification quality (Phase 3) by @Kuonirad in #741
• docs: activate native GitHub surfaces by @Kuonirad in #742
• [codex] close positive measurement loop by @Kuonirad in #743
• [codex] refresh positive metric badges by @Kuonirad in #744
• [codex] promote positive impact proof in README by @Kuonirad in #745
• [codex] make coverage badge authentic by @Kuonirad in #746
• chore(ci): bump release-drafter/release-drafter from 7.3.0 to 7.3.1 in the actions group by @dependabot[bot] in #747
• chore(deps): bump the development group with 5 updates by @dependabot[bot] in #748
• feat(audit): Integrate PARP v1.0 — Phoenix Audit & Remediation Protocol + L0 Baseline by @Kuonirad in #750
• fix(ci): scope positive-resonance-ledger contents:write to the measure job (PARP CS #48) by @Kuonirad in #751
• fix(ci): justify and document the 6 informational TokenPermissionsID alerts (PARP CS #9, #10, #44, #45, #46, #47) by @Kuonirad in #752
• fix(docs): hedge overclaim'd "production-ready / production-grade" language (PARP L3 claim drift) by @Kuonirad in #753
• fix(audit): tighten audit:claims pattern exclusions to resolve PARP L3 false-positive WARNs by @Kuonirad in #754
• [codex] add v2.4 release readiness artifacts by @Kuonirad in #755
• feat(cuda): Merkle-rooted model manifest + PoUW receipts by @Kuonirad in #756
• feat(cuda): in-process PoUW receipt emission + server manifest advertisement by @Kuonirad in #757
• feat(adapters): add VeilBridgeGrokClient for primary local Grok build (veil + bridge) by @Kuonirad in #758
• Relicense from BUSL 1.1 to Apache License 2.0 by @Kuonirad in #759
• docs: add 12-month roadmap with quarterly outlook by @Kuonirad in #760
• fix(deps): remediate tmp path traversal (Dependabot #122) + add official Anthropic SDK Claude client by @Kuonirad in #761
• docs(readme): fix broken anchor and route every badge to a real page by @Kuonirad in #762
• chore: add technical-debt tracking artifacts (P0) by @Kuonirad in #763
• fix(audit): align claim-audit + license drift to Apache-2.0 relicense (PARP L3) by @Kuonirad in #764
• feat(organelle): Canonical prompt builder + richer Grok adapter integration (middle path) by @Kuonirad in #765
• feat(proteome): infuse ThermoTruth free-energy layer behind MCOP_ENAB… by @Kuonirad in #766
• docs: refresh README + landing page (Apache-2.0, Node 22, ThermoTruth) by @Kuonirad in #767
• docs: Grok Build TUI as Production MCOP Organelle Host (deep bidirectional integration) by @Kuonirad in #768
• [codex] integrate Grok organelle prompt builder and README validation by @Kuonirad in #769
• feat(efficacy): pre-registered, multi-rater, held-out efficacy program by @Kuonirad in #770
• feat(control): close the fast control loop the kernels sketch (advance #2) by @Kuonirad in #771
• feat(stigmergy): temporal pheromone dynamics — evaporation + reinforcement (advance #3) by @Kuonirad in #772
• feat(organelle): Grok Build TUI + MCOP-2.0 live fusion + independently reproduced benchmark snapshot by @Kuonirad in #773
• feat(hardware): hot-path unification — one provenance-attached accelerator boundary by @Kuonirad in #774
• feat(conformance): conformance spec + approved-changeset provenance gate (advance #4) by @Kuonirad in #775
• ci(conformance): enforce conformance suite + approved-changeset gate as required checks by @Kuonirad in #776
• fix(ci): trigger container publish on v* tag push by @Kuonirad in #777

New Contributors

• @cursor[bot] made their first contribution in #693
• @imgbot[bot] made their first contribution in #733

Full Changelog: v2.2.1...py-v3.3.0