Skip to content

v0.1

Choose a tag to compare

View all tags
@thinksyncs thinksyncs released this 23 Jun 06:40
· 145 commits to main since this release
v0.1
acfacd7

Summary

Initial public release of the hardware-aware TLS identity-binding profile.

Highlights

  • Defines the SSOT for binding upper-layer identity and authorization material to an accepted TLS 1.3 and attestation session.
  • Documents Identity Grant and Session Binding Statement roles, Manager/Agent/TLS key separation, replay handling, canonical semantic references, and cache-safety rules.
  • Includes live-style red-team coverage notes for replay, relay, grant substitution, wrong-Agent, key-role confusion, attestation-binder failures, and caller-dependent cache behavior.
  • Adds the SSOT PDF as a release artifact.

Verification

Focused local checks passed before release:

env GOCACHE=/tmp/go-build-cocos go test -count=1 ./pkg/agtp ./pkg/atls/identitypolicy ./pkg/clients

Notes

This is a repository security-hardening profile, not an IETF consensus document and not an AGTP/A2A core protocol change.

Assets 3
Loading