Skip to content

Signet v0.9.0 - MCP Proxy and Signed Trace Correlation

Choose a tag to compare

@willamhou willamhou released this 13 Apr 09:43
· 90 commits to main since this release

Added

Signed Trace Correlation

  • signet-core: trace_id and parent_receipt_id optional fields on Action — link receipts across multi-step agent workflows
  • signet-core: Both fields are included in the signed payload (tampering invalidates signature)
  • signet-core: sign(), sign_bilateral(), sign_authorized() all propagate trace fields from Action
  • signet-core: audit::append() serializes trace fields when present (omitted when None — backward compatible)
  • @signet-auth/core: trace_id?: string and parent_receipt_id?: string on ActionInput TypeScript interface
  • signet-auth (Python): trace_id and parent_receipt_id kwargs on sign(), sign_hash_only(), SigningAgent.sign()
  • signet-auth (Python): receipt.trace_id and receipt.parent_receipt_id accessors on PyReceipt

Tests

  • Rust: 6 trace-specific tests (sign with trace_id, parent_receipt_id, combined, tampering detection, audit roundtrip)
  • Python: 9 trace tests — roundtrip, signature scope, absent-when-None, multi-step workflow chain
  • TypeScript: 5 trace tests — trace_id/parent_receipt_id in receipt, tampering invalidation, workflow chain
  • 495 total tests passing (213 Rust core + 40 CLI + 214 Python + 28 TypeScript)