Zeus 1.0.0a8

Zeus 1.0.0a8

Added

• Minimal zeus tui control tower approval loop for pending approvals, grants, replay approvals, and chain health.
• zeus approve --parked ... --remember for bounded remembered approvals.
• OpenClaw relay bridge for flushing externally resolved parked approvals to exec.approval.resolve.

Fixed

• Shared parked approval resolution across CLI/TUI/cockpit-ready surfaces.
• Hard-risk parked actions cannot be converted into remembered grants.
• Invalid narrowed-path approvals no longer consume pending parked actions.

Verification

• .venv/bin/python -m ruff check . passed.
• .venv/bin/python -m pytest -q passed: 298 tests.
• .venv/bin/pip install -e . --no-deps succeeded.
• zeus-agent 1.0.0a8 reported through the installed console script.
• Private live-host evidence remained local-only: Hermes hard-egress/segmented/TUI rehearsal passed, and OpenClaw openclaw@2026.6.6 pin smoke resolved to commit 8c802aa.

v1.0.0-alpha.7

Fixed

• Treat Hermes module help probes as read-only diagnostics instead of high-risk unknown execution.
• Serialize evidence ledger appends so concurrent replay checks cannot race on seq or prev_hash.

Evidence

• .venv/bin/python -m pytest: 292 passed.
• ruff clean.
• Hermes R13 segmented dogfood: 21/21 pass, host-tool fall-through 0, proxy secret findings 0, chain_ok=true.

Note

• OpenClaw remains blocked on a real pinned host before any 95% control claim.

Zeus v1.0.0-alpha.3 — dogfood hardening

Fixed

• Treat sensitive filesystem reads as governed actions: .env, private-key, cloud credential, SSH, and secret-like paths now force an ASK before content can be exposed through fs.read.
• Extended Hermes and proxy tool mapping for web aliases such as web_extract, fetch_url, extract_url, and browser_navigate so they resolve to web.fetch instead of falling through to conservative host.tool.*.
• Reduced dogfood false positives for read-only diagnostics: path-qualified Python binaries, versioned python3.x, safe python -m pip read-only commands, and Zeus module probes now classify as read-only when appropriate.

Added

• zeus status now separates standing grants, replay authorizations, approval queue state, and the operator inbox so active authority is not confused with resolved approval history.
• Replay authorization rows are queryable from the control-plane store for status and cockpit surfaces.

Evidence

• ruff clean.
• Product test suite passed without private live-host eval files: .venv/bin/python -m pytest --ignore=tests/test_live_host_eval_tree.py passed: 1915 tests.
• Editable install smoke passed: zeus-agent 1.0.0a3.
• Fresh zeus status smoke rendered grant_inventory, approval_queue, and operator_inbox.

Private live-host eval scaffolding is intentionally not included in this release.

Zeus v1.0.0-alpha.1 — governance control plane

Zeus is re-founded as a local-first governance control plane for AI agents: the host agent (Claude Code live today; hermes-agent and OpenClaw adapters contract-frozen) keeps doing the work, and Zeus decides, records, approves, and blocks at four gates. Versioning resets to v1.0.0-alpha.N — from here, a major version is only earned when a pinned real host passes the conformance suite at ≥95% with a 7-day zero-bypass soak measured outside Zeus.

Highlights

• Decision API v1 — decide() / record(): decision-only judgement, a receipt for every decision (including DENY), outcomes bound back by caused_by in a hash-chained ledger.
• The four gates — Claude Code hooks (live), LLM proxy /v1 (budget 429, streamed tool_call interception, wallet, secret-hygiene modes count|redact|block|ask), MCP gateway (quarantine, rug-pull re-quarantine, injection taint), zeusd Decision API (HMAC pairing, hermes blocking hook, OpenClaw exec approval relay), egress ring (boundary-before-policy, key-only-at-egress, srt profile emission).
• Final-action receipt contract — what the host is told equals what the ledger says; boundary violations and explainability are decided inside decide(), pinned by a receipt-coherence conformance suite; approvals TTL fail-closed; once-grants burn durably at every gate.
• Governance UX — plain-language consequence cards (KO), graded approvals (once / session / narrower), policy packs + NL rules (governed changes), weekly digest with a dead-man switch, novelty escalation, loop governance.
• Cognition organs, default-OFF — raw-free memory candidates (poisoned ones can never be promoted), skill quarantine with hash pinning.
• Korean docs — README.ko.md, CONNECTING.ko.md, docs/ko.md reading guide.

Evidence (deterministic local, not production proof)

• 1881 tests passed, 88 frozen conformance scenarios, ruff clean
• Byte-level proof that raw secrets never reach candidate storage

Honest boundary

Conformance is synthetic (simulated hosts). No claim of: pinned real-host parity (gates v2/v3), OS-level egress enforcement (srt wrapper is the next milestone), hosted SaaS, browser automation, or third-party validation. /v1 binds loopback by default; non-loopback requires issued tokens. Pre-refoundation tags (v0.x–v6.x, including the legacy v1.0.0/rc line) are a different product line kept as history.

See CHANGELOG.md for the full entry and CONNECTING.md to plug a host in.

Zeus Agent v6.0.0

v6.0.0 - Higher-Order Zeus Agent OS

• Adds Higher-Order Agent OS runtime aggregating persona, Objective Compiler Workflow, governed live connectors, TUI cockpit contract, recursive improvement review, plugin skeleton, remote sandbox contract, tenant/auth contract, eval dashboard contract, persistent audit contract, and public production boundary.
• Adds zeus higher-order-agent-os and ZeusAgent.higher_order_agent_os(...).
• Keeps remote sandbox, multi-user hosted mode, unattended execution, unrestricted production live execution, and automatic memory promotion disabled by default.

Validation:

• PYTHONPATH=src python3 -m pytest -q -> 1504 passed
• python3 -m compileall -q src tests -> passed
• git diff --check -> passed
• python3 -m build -> built sdist and wheel

Zeus Agent v5.8.0

v5.8.0 - Governed Live Connector Platform

• Adds Governed Live Connector Platform runtime for provider, MCP, gateway, and local sandbox connector preflight.
• Extends governed live registry/trust for MCP local smoke, gateway loopback smoke, and local sandbox local smoke while preserving provider compatibility refs.
• Adds zeus governed-live-connectors and ZeusAgent.governed_live_connectors(...).

Validation:

• PYTHONPATH=src python3 -m pytest -q -> 1499 passed
• python3 -m compileall -q src tests -> passed
• git diff --check -> passed
• python3 -m build -> built sdist and wheel

Zeus Agent v5.5.0

v5.5.0 - Objective Compiler + Dynamic Workflow Runtime

• Adds Objective Compiler Workflow runtime for compiling goals into intent frames, focused interview questions, ObjectiveRun records, workflow DAGs, authority requirements, and evidence plans.
• Adds zeus objective-compile-workflow and ZeusAgent.objective_compile_workflow(...).
• Extends release-gated ULW program toward v5.8.0 and v6.0.0.

Validation:

• PYTHONPATH=src python3 -m pytest -q -> 1494 passed
• python3 -m compileall -q src tests -> passed
• git diff --check -> passed
• python3 -m build -> built sdist and wheel

Zeus Agent v5.0.0

Zeus Agent v5.0.0

Productized Zeus Live Platform Beta checkpoint.

Added

• Live Platform Beta runtime aggregating Zeus persona/status, setup cockpit, ObjectiveRun, Governed Live Slice authority UX, CLI/Python surfaces, operator journey commands, and public beta boundary.
• live-platform-beta CLI command with status, operator-demo, and public-boundary scenarios.
• ZeusAgent.live_platform_beta(...) Python facade.
• Release-gated ULW v5.0.0 checkpoint fields for productized live platform beta, objective-to-live beta journey, authority UX beta, and public beta boundary readiness.

Evidence

• PYTHONPATH=src python3 -m pytest -q -> 1490 passed.
• python3 -m compileall -q src tests -> passed.
• git diff --check -> passed.
• python3 -m build -> built zeus_agent-5.0.0.tar.gz and zeus_agent-5.0.0-py3-none-any.whl.
• Source-path CLI smoke for live platform beta status/operator-demo/public-boundary -> passed.

Boundary

v5.0.0 is a governed local beta platform surface. It is installable and usable for persona/status inspection, objective run lifecycle, authority UX, operator journey mapping, and public production-live boundary checks. It still does not enable unrestricted production external provider, MCP, gateway, browser, terminal, sandbox, or remote network execution by default.

Zeus Agent v4.5.0

Zeus Agent v4.5.0

Governed Live Slice + Authority UX checkpoint.

Added

• Governed Live Slice runtime that wraps the existing governed live dispatcher with operator-facing missing-requirement UX.
• governed-live-slice CLI command.
• ZeusAgent.governed_live_slice(...) Python facade.
• Release-gated ULW v4.5.0 checkpoint fields for authority UX, live preflight requirement map, trusted loopback smoke, and governed live slice readiness.

Evidence

• PYTHONPATH=src python3 -m pytest -q -> 1485 passed.
• python3 -m compileall -q src tests -> passed.
• git diff --check -> passed.
• python3 -m build -> built zeus_agent-4.5.0.tar.gz and zeus_agent-4.5.0-py3-none-any.whl.
• Source-path CLI smoke for missing authority UX and trusted local loopback smoke -> passed.

Boundary

The trusted local loopback smoke can pass through broker evidence, but production external provider, MCP, gateway, browser, terminal, sandbox, and remote network execution remain disabled by default.

Zeus Agent v4.1.0

Zeus Agent v4.1.0

Objective Execution Spine checkpoint.

Added

• ObjectiveRun runtime for persisted local objective runs with goal contracts, current plans, evidence records, and evidence-based completion summaries.
• objective-start, objective-status, and objective-export CLI commands.
• Python library facade methods for objective start/status/export.
• Release-gated ULW v4.1.0 checkpoint fields for ObjectiveRun runtime/store/CLI and completion evidence bridge readiness.

Evidence

• PYTHONPATH=src python3 -m pytest -q -> 1480 passed.
• python3 -m compileall -q src tests -> passed.
• git diff --check -> passed.
• python3 -m build -> built zeus_agent-4.1.0.tar.gz and zeus_agent-4.1.0-py3-none-any.whl.
• Source-path CLI smoke for objective start/status/export -> passed.

Boundary

Production live execution remains disabled by default. ObjectiveRun records governed local objective state and evidence obligations; it does not authorize provider, MCP, gateway, browser, terminal, sandbox, or remote network handlers by itself.