Skip to content

GraphSmith v0.4.0 — Extended-Control Hardening

Latest
Latest

Choose a tag to compare

View all tags
@pjpoulose pjpoulose released this 25 Jul 03:30
v0.4.0
b1df2f8

Extended-control hardening. v0.4.0 turns the deferred review gaps into enforced, recomputed controls, and teaches the GSA verifier to check them: every run-time claim a bundle makes is recomputed from its own evidence and fails closed on any lie (D5). Evidence, not certification.

What's new

  • Capability conformance (R1) — per-skill fs / model / subprocess / network grants; requested ⊆ granted; attested only when enforced (D1).
  • Side-effect receipts (R2) — external effects reconcile against adapter receipts; an evidence-less "success" is never vouched for.
  • Signer lifecycle + recall (R3) — revoked signers and recalled bundles fail closed; a rotated key resolves only to a live successor.
  • Secret / PII redaction (R4) — an exported trace carrying an unredacted secret or PII fails closed, against a 17-format recall gate.
  • SBOM + build provenance (R5) — SBOM digest + provenance recomputed against actual artifact hashes; this release publishes to npm with build provenance.
  • Policy-as-code (R8) — versioned enterprise-safe profiles; a required control counts only when enforced.
  • GSA §9.11 — the verifier recomputes all five run-time controls from a bundle's own evidence; a v0.3.0 bundle verifies unchanged.
  • graphsmith verify CLI — a fail-closed verifier bin from the graphsmith-skill package for CI / enterprise.
  • Independent Assurance program — docs/ASSURANCE.md.

Assurance

Every control built by one model family and adversarially reviewed by ≥2 non-Anthropic families (Mistral, DeepSeek, Qwen); the orchestrator re-ran every suite and audited zero-finding results for rubber-stamping. Real defects found + fixed include a leaky R4 redaction battery (missed AWS/JWT/Google/Stripe keys, tokens, phone PII) and two regex-brittleness bugs; a tester's inverted harness that scored missed leaks as passes was caught and rejected. Closed by the v0.4.0 gauntlet: 395 scenarios, all HOLD, 0 BREAK (v0.3.0 gauntlet still green at 286); GSA conformance 14/14.

Full notes: docs/releases/v0.4.0.md. Reviewed, not certified — this attests tested behavior, not fitness for any purpose.

Assets 2
Loading