Signetry Admission v0.5.0 — Apache-2.0, core@v0.8.0

Changed — licensing (open core)

• This Action is now open source under Apache-2.0. A real LICENSE file is in
  the repo root. The previous "All Rights Reserved" notice is withdrawn: you may
  use, fork, modify, distribute, and commercialize this Action, including in
  commercial and closed-source products, with no permission needed.
• Signetry moved to an open-core model: the whole integration surface (this
  Action, the editor/agent plugins, the pre-commit guard, the eval suite) is
  Apache-2.0, while the engine
  signetry-core is source-available under
  BUSL-1.1 and converts to Apache-2.0 on 2030-08-31. See
  LICENSING.md.
• The CLA is unchanged and still required. Open core needs relicensing rights
  so a contribution made here can later move into the engine; signing takes away
  none of the rights Apache-2.0 grants you. CLA.md, CONTRIBUTING.md,
  CONTRIBUTORS.md, and the docs were rewritten to say so accurately.
• The CLA's fallback licence grant is now non-exclusive. It previously granted the
  Owner an exclusive licence where copyright assignment is not permitted by law, which
  would have stripped contributors of the right to use their own contribution — directly
  contradicting the rights the LICENSE grants everyone. The CLA text is now identical
  across all Signetry repositories (bar the engine/integration licence wording) so the
  legal terms cannot drift per-repo again. See CLA.md §2–3.

Changed

• Default signetry-core install pinned to
  git+https://github.com/Signetry/core@v0.8.0 (was @v0.6.0 as of v0.4.0; an
  intermediate bump to @v0.7.0 landed on main and was never recorded here).
  v0.8.0 brings the receipt conformance spec + suite, the policy registry
  (signetry policies, signetry init --policy), and placeholder-provenance
  reporting, following the signetry-core v0.8.0 release.
• The advisory reviewer workflow installs signetry-reviewer@v0.3.0 (was @v0.2.0),
  following the signetry-reviewer v0.3.0 release.
• @v1 moved to this release.

Fixed

• MARKETPLACE.md advertised an exact pin that was two releases stale. The
  Marketplace listing told readers to "Pin @v1 (moving) or @v0.2.0 (exact)" long
  after v0.3.1 and v0.4.0 shipped, so anyone following it verbatim pinned an
  Action that predates the rename. It now names the current release.

Signetry Admission v0.4.0

Rebrand to Signetry Admission — Seal every agent's PR with proof.

Breaking: installs signetry-core@v0.6.0, uses SIGNETRY_* env vars, and the input umbra-version is now signetry-version.

- uses: Signetry/action@v1
  with: { min-authority: "1" }

Umbra Admission v0.3.1

Changed

• Default umbra-core install pinned to git+https://github.com/bkd-dotcom/umbra-core@v0.5.4
  (was @v0.5.3) following the umbra-core v0.5.4 source-available release.
• The umbra-version input is documented as a source version tag (umbra-core
  is source-available and installed from its source repo, not PyPI).
• The advisory reviewer workflow installs umbra-reviewer@v0.1.1 from source.
• @v1 moved to this release. No functional change to the admission pipeline.

Umbra Admission v0.3.0 — All Rights Reserved; installs umbra-core from source

Licensing: this Action is now All Rights Reserved (MIT removed) — not open source. Contributions are under a copyright-assignment agreement.

Distribution fix: installs umbra-core from its source repo (git+https://github.com/bkd-dotcom/umbra-core@v0.5.3) instead of PyPI (umbra-core was removed from PyPI). This keeps @v1 working; older tags that used pip install umbra-core will fail.

Pin @v1 (moving) or @v0.3.0 (exact).

Umbra Admission v0.2.0 — detection scan + SARIF

Umbra Admission v0.2.0 — govern any coding agent's PR with a signed receipt, now
with an optional built-in vulnerability scan.

• Agent-agnostic admission pipeline: contract → injection quarantine →
  required checks → independent verifier → earned authority → Ed25519 receipt.
• NEW: scan mode (scan: "true") runs the umbra-core SAST detection engine over the
  PR and uploads SARIF to code scanning — 7 languages, cross-file taint,
  deterministic and offline. Optional scan-fail-on gates the check; outputs
  sarif-file and findings-count. Needs security-events: write.
• Layered prompt-injection defense (patterns + structural carriers + full-file
  quarantine + optional semantic classifier).
• Sandboxed checks on Linux (auto-installs bubblewrap); UMBRA_REQUIRE_SANDBOX
  fail-closed option.
• Posts a verdict comment, uploads the signed receipt, fails the check below the
  required authority. Never merges.

Pin @v1 (moving) or @v0.2.0 (exact). Requires umbra-core>=0.5.0 (installed

Umbra Admission v0.1.3

Govern any coding agent's PR with the Umbra admission pipeline and attach a signed receipt.

Usage

name: Umbra Admission
on:
  pull_request:
permissions:
  contents: read
  pull-requests: write
jobs:
  admit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
        with:
          ref: ${{ github.event.pull_request.head.sha }}
          fetch-depth: 0
      - uses: bkd-dotcom/umbra-action@v1
        with:
          min-authority: "1"
          signing-key: ${{ secrets.UMBRA_SIGNING_KEY }}
Runs every PR — from Claude Code, Codex, Cursor, Copilot, Devin, or a human — through the umbra-core (https://github.com/bkd-dotcom/umbra-core) admission pipeline: executable contract → layered prompt-injection quarantine → required checks (sandboxed on Linux) → independent verifier → earned authority (0/1/2) → Ed25519-signed receipt. Posts the verdict as a PR comment, uploads the signed receipt, and fails the check below the required authority. auto_merge is always false — a human merges.