Skip to content

Wraith v0.2.0

Choose a tag to compare

View all tags
@YogevKr YogevKr released this 01 Sep 14:38
· 14 commits to main since this release
v0.2.0
25a8633
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Wraith v0.2.0 adds generic opaque secret capabilities for browser field fills.

Highlights

  • Register process-local secret providers for library and embedded MCP use.
  • Fill fields through fill_secret(index, capability) without sending plaintext through tool inputs or outputs.
  • Bind capabilities to exact origins, field kinds, expiry times, and use limits.
  • Share use and taint state across wrappers for one browser context.
  • Block screenshots and storage-state exports after secret use by default.
  • Redact editable values from agent snapshots.
  • Document the Instinct browser findings and current integration boundary.
  • Test the release across Python 3.10, 3.11, 3.12, and 3.13.

Instinct boundary

Wraith does not include an Instinct Vault provider. Instinct must expose a provider or broker adapter that Wraith can reach. The tested Instinct vault_fill plus execute-js path can expose plaintext, so it is not a safe adapter.

See the README and SECURITY policy for provider examples and threat limits.

Assets 2
Loading