AgentHealth v0.9.0

AgentHealth v0.9.0 — Experimental AHP HTTP serving

v0.9.0 implements Phase 11's experimental Agent Health Protocol HTTP v1
binding and agenthealth serve. See the wire contract,
serving guide, impact review and
earlier-phase alignment audit.

Changes

• Add GET /health, /ready and /live public summaries and bearer-authorized
  /health/dependencies and /health/capabilities recursive evidence.
• Refresh checks in the background without request-triggered probes or
  overlapping runs. Refresh starts 30 seconds after each completed run;
  snapshots expire after two minutes.
• Keep liveness independent of target health. Readiness accepts HEALTHY and
  DEGRADED evidence; cold, stale, stopped or impaired results return 503.
• Preserve graph IDs, relationship and critical edge policies, and separate
  capability, declared readiness and completed functional/path evidence.
• Default to loopback, reference bearer credentials through --token-env,
  validate token grammar and compare fixed-size digests in constant time.
• Add protocol envelope schema/fixtures, serving and CLI tests, examples,
  documentation and phase-by-phase alignment.

Compatibility and migration

AHP ahp_version: v1 is separate from AHS spec_version: v1. Existing
configuration/result schemas, health states, target vocabulary and health
command exit codes remain unchanged. Existing nested and graph configurations
need no migration. Serving exits 0 after graceful shutdown and 6 on tool failure;
it does not exit when targets are unhealthy. Earlier binaries do not support serve.

Installation

Download your archive and matching CycloneDX SBOM from the
v0.9.0 release.
Linux AMD64/ARM64, macOS AMD64/ARM64 and Windows AMD64 are packaged with
checksums and keyless signed build provenance/SBOM attestations. Follow
installation and verification.

agenthealth version

The serving example path requires a v0.9.0 or newer repository checkout.
From its root, run:

agenthealth serve examples/ahp-check/agenthealth.yaml

The example requires your HTTP application on port 9000. Query port 8080 for
public summaries. Configure a private random token through AHP_TOKEN and
--token-env AHP_TOKEN to enable authorized details.

Limitations

Experimental HTTP JSON only, one configuration and bearer scope, no vendor
extension fields or automatic discovery. Independent implementation
interoperability is unverified. Remote serving requires proxy HTTPS termination,
network restrictions and per-client rate limiting. No built-in TLS or client
limiter is provided. Explicit functional probes repeat with each refresh; review
these before serving. AHP is not an AHP-specific client adapter, and a healthy
peer, gateway or router does not establish direct-agent communication.

Docker, Kubernetes, SDK packages and remaining adapters are still planned.
OS-native executable signing and macOS notarization remain planned; the release
uses keyless signed attestations. Only Linux AMD64 runtime behavior is
smoke-tested locally; other platform archives are cross-compiled.

Validation

Go vet/race tests, Python schema/integration tests, markdown links and all
marked/standalone configuration examples pass locally. Optional interoperability
cases require their CI environment. CI includes Linux/macOS/Windows Go tests,
Go 1.23 compatibility, vulnerability scanning and current/legacy official SDK
interoperability. The release workflow validates the tagged source and builds
five archives, five SBOMs and checksums before publication.