Shards-Kernel v0.1.3

Shards-Kernel v0.1.3

Security and concurrency stabilisation for the self-hosted AI-agent authorisation and audit library.

• SK-002: reject signed-permit parameter omissions, unexpected fields, nested type mismatches and mutable-permit substitution; match exact effective tool arguments.
• SK-001: bounded single-flight admission, audited busy denials and synchronized evidence snapshots.
• Operator halt: explicitly distinguish queued (HTTP 202, nonterminal) from confirmed HALTED (HTTP 200); audit in-flight outcomes before finalisation.
• Verify Python 3.9–3.15 CI, local multi-process E2E, PostgreSQL test integration, clean installed-wheel security probes and release checks before publication.
• Retain the signed local reference operator for narrowly scoped echo/add tools; local official MCP v2 agent integration requires Python 3.11+.

Supported boundary: local, self-hosted reference control plane and Python library integrating trusted tool handlers; not an OS sandbox, remote MCP gateway, trading executor, or guarantee of exactly-once external effects.
Migration: previously published v0.1.2 does not enforce the corrected parameter and concurrency boundaries. Permit issuers must sign the exact effective parameters including handler defaults.

Includes independently checksummed Python wheel and source distribution.