AgentTrust v2.1.0 - Enterprise Zero-Trust Hardening, Subprocess Isolation & PQC Keyring

🚀 AgentTrust v2.1.0 - Enterprise Zero-Trust AI Security Gateway

🛡️ What's New in v2.1.0

• Anti-TOCTOU Egress Proxy Socket Pinning: Direct socket binding to pre-verified IPv4/IPv6 addresses, eliminating Time-of-Check to Time-of-Use (TOCTOU) DNS rebinding attacks targeting cloud metadata (169.254.169.254) and private RFC 1918 subnets.
• Dual-Containment Hardened Subprocess Sandbox: Untrusted scripts execute in unprivileged child processes with frozen prototypes (Object.freeze(Object.prototype)), sterile process environments (env: {}), 64MB memory limits, and a 1MB output buffer ceiling.
• ACID Serialized Write Queue for SQLite: Asynchronous FIFO write dispatch with exponential backoff retry and 10-second busy timeout in WAL mode, handling high-concurrency bursts without SQLITE_BUSY lock contention.
• NIST FIPS 204 ML-DSA Post-Quantum Keyring: Persistent AES-256-GCM envelope-encrypted key storage in SQLite, automated key rotation (rotateKey), and historical signature verification.
• Comprehensive Adversarial Fuzzing Battery: 9 property-based fuzzing tests covering Unicode zero-width evasion, homoglyphs, AST SQL verb parsing, and semilattice monotonicity axioms.
• Automated Verification: 148 automated security tests passing across 19 test suites (100% green in 4.73s). Zero mocks or simulated math.