Skip to content

Agent Trust Plane v0.3.1

Choose a tag to compare

View all tags
@TimelessVisions TimelessVisions released this 17 Sep 18:38
· 135 commits to main since this release
v0.3.1
11d66a8

Patch release following the first public CI run. No new features. Experimental software; not production software; not independently security audited.

What changed

  • atp demo wrap --out <relative path> no longer resolves the output directory twice (the demo's own atp subprocesses run from that directory). Found by the first GitHub Actions run on ubuntu and windows.
  • A regression test for that shape (test_demo_wrap_accepts_a_relative_out_dir).
  • Compatibility matrix and verification record now reflect the remote CI results instead of "not run on a remote".

Verified

GitHub Actions on the tagged commit (https://github.com/TimelessVisions/agent-trust-plane/actions/runs/35259397172):

  • ubuntu-latest, Python 3.12 — PASS
  • ubuntu-latest, Python 3.13 — PASS
  • windows-latest, Python 3.13 — PASS
  • package (wheel build, isolated uvx run, pip-audit, SBOM) — PASS
  • dashboard (typecheck, production build) — PASS

Locally (Windows 11, Python 3.14): the full release checklist in docs/release/verification.md, plus the previously failing invocation atp demo wrap --out <relative dir> from a clean temporary directory.

Install

Not published to PyPI. Either install from the repository at this tag:

uvx --from "git+https://github.com/TimelessVisions/agent-trust-plane@v0.3.1" atp demo wrap

or use the attached artifacts, rebuilt from a clean export of this tag and smoke-tested in an isolated environment (uvx --isolated --from <wheel> atp doctor):

  • agent_trust_plane-0.3.1-py3-none-any.whl — sha256 cc5bd8dd94dc42273bc63a7b2f52cfce9588d3eeb2ae0a3cbdb08523739d2731
  • agent_trust_plane-0.3.1.tar.gz — sha256 dec67508021fdb7957e4f603c8823e98d2a47d0a33ceba3523878f856038b7fe

Known limitations

  • macOS is not verified (not in the CI matrix).
  • No IDE MCP client (Claude Desktop, Cursor, VS Code, Claude Code) has been tested; the compatibility matrix lists them as not verified.
  • Not published to PyPI.
  • Only the mediated path is protected: an agent that can reach a tool without the proxy is not stopped (docs/security/enforcing-the-boundary.md).
  • Agent credentials are bearer tokens with expiry and revocation, no proof of possession; the operator key and .atp/keys.env are omnipotent.
  • Single-use execution grants prove one release, not exactly-once external side effects.
  • Not independently security audited. Not production software.

Full lists: docs/security/threat-model.md, docs/security/security-review.md. Changelog: CHANGELOG.md (0.3.1 and 0.3.0).

Assets 4
Loading