Skip to content

v8.1.0

Choose a tag to compare

View all tags
@aao-ipr-bot aao-ipr-bot released this 06 Oct 14:38
v8.1.0
1194c96
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

8.1.0 (2026-10-06)

Features

  • backport provisioning-aware accounts and signing fixes to 8.x (#1410) (91df2b4)
    • accounts: provisioning-aware account discovery, an AccountRegistry with pluggable storage, typed account errors, and account-scoped feed mirrors (#1288). New exports: AccountPolicy, AccountRecord, AccountRegistry, AccountStorage, InMemoryAccountStorage, AccountNotFoundError, AccountPaymentRequiredError, AccountSetupRequiredError.

Bug Fixes

  • accounts: keep every 8.0 default and make the stricter behavior opt-in (#1348). By default account_policy is "off", so natural references pass through unchanged. With raise_account_errors unset, account errors still return the failed TaskResult and emit a DeprecationWarning. FeedMirror(strict_scope=None) keeps 8.0 scope handling and warns. Opt in with account_policy="auto"/"strict", raise_account_errors=True, and strict_scope=True. These become the defaults in the next major. See docs/account-lifecycle.md.
  • signing: make agent_url optional again on BrandJsonJwksResolver and build_brand_json_resolvers (#1350). Omitting it emits a DeprecationWarning and falls back to 8.0 agent selection, which now fails closed when ambiguous and restores the jwks_origin_mismatch guard.
  • signing: security fix: verify_from_agent_url takes the signer identity and replay namespace from the caller's agent URL, not from the brand.json entry, so a brand.json can no longer make one agent verify as another (#1350, #1312).
  • signing: align agent resolution and publisher pins with AdCP 3.3 (#1312). Security tightenings enforced at request time:
    • discovery binds the agent and operator origins (same registrable domain, or authorized_operators)
    • every declared identity.key_origins purpose is checked
    • publisher_pin resolvers are subject to the key-origin check
    • agent URLs are compared in canonical form
  • signing: fetch resolver capabilities over the agent protocol (#1284)
  • sdk: restore buyer compatibility and error diagnostics (#1285)

Compatibility

8.1.0 has no breaking API changes from 8.0.0. #1288 and #1312 were breaking on main. #1348 and #1350 restore every 8.0 default and signature they changed, so the backported changes add new opt-in surface without breaking existing callers. The only behavior changes for existing callers are the request-time signing security fixes listed above.

Assets 2
Loading