Skip to content

v0.1.1 — Phase 1 launch (PRD-19 opt-in decision capture)

Choose a tag to compare

View all tags
@oabolade oabolade released this 17 Jun 06:38
· 9 commits to main since this release
v0.1.1
ac1bdd5

First public release. pip install rootsign[langgraph] (or [crewai]) on Python 3.11–3.14.

📦 PyPI: https://pypi.org/project/rootsign/0.1.1/
📖 README: https://github.com/Providex-AI/rootsign#readme

Highlights

  • Opt-in decision capture (ADR-008). Set ROOTSIGN_CAPTURE_DECISIONS=true and call ctx.record_decision(...) to record the agent's reasoning before a tool call. The next Action is linked via decision_id. Out-of-chain by design — verify_chain is unchanged. Tunable persistence depth via ROOTSIGN_REASONING_DEPTH (minimal / summary / full).
  • SDK_VERSION from importlib.metadata. Single source of truth — no more hand-pinned drift across decorator.py / session.py.
  • Pre-launch security hardening (already in 0.1.0.dev):
    • HiTL approval context now passes the redacted input to the operator-facing context_presented field — raw PII no longer persists on timeout.
    • Redaction depth limit fails closed — subtrees past MAX_REDACTION_DEPTH return [REDACTED] instead of passing raw data through.
    • verify_session_local uses compute_action_self_hash (matches the store), so real exported chains no longer falsely report TAMPERED on record #1.

What's in the box

Surface Shipping
@rootsign.trace decorator ✅
LangGraph integration (wrap_tools) ✅
CrewAI integration (wrap_crewai_tools) — tested against 0.28 / 0.40 / 1.x ✅
Hash chain + rootsign verify <session-id> CLI ✅
Local JSONL verification (rootsign verify --local) ✅
PII redaction (StandardPIIConfig / FinancialPIIConfig / HealthcarePIIConfig) ✅
Human-in-the-loop checkpoint (require_approval=True) + rootsign approve CLI ✅
Opt-in decision capture (PRD-19 / ADR-008) ✅
rootsign-admin operator CLI (start-db, init, status) ✅

Architecture pointers

  • docs/adr/ADR-001 — canonical hash spec (frozen)
  • docs/adr/ADR-002 — ingest failure isolation
  • docs/adr/ADR-006 — redaction contract
  • docs/adr/ADR-007 — HiTL checkpoint design
  • docs/adr/ADR-008 — decision capture out-of-chain pattern (PRD-19)

Coming next (Phase 2)

  • HttpIngestClient + hosted compliance dashboard — drop-in replacement for LocalIngestClient
  • Browser-based HiTL approval (no CLI required)
  • AutoGen integration

—

Apache-2.0. Issues and PRs welcome at https://github.com/Providex-AI/rootsign/issues.

Assets 2
Loading