v9.4.0

9.4.0 (2026-10-31)

Features

• adagents: attribute and verify publisher property claims (#1719) (0c0ef92)
• server: seller helper for wholesale feed versions (#1718) (7088ebf), closes #1676
• signing: accept any well-formed adcp_use purpose in keygen (#1710) (787cfb2)

Bug Fixes

• types: defer the import-time model rebuilds that cost adcp.client 560 MiB RSS (#1704) (aac52ca), closes #1694

Upgrade notes

• Import memory back to 6.6 levels (#1694). Importing adcp.client, adcp.server or adcp.decisioning peaked at about 560–575 MiB RSS on 9.0–9.3, enough to OOM a 512 MiB seller container at startup. Model rebuilds now happen on first use instead of at import: adcp.client is about 175 MiB and adcp.server about 183 MiB, and import time drops from about 15 s to about 5 s. No API change. adcp.testing.build_all_models() still realizes every model up front where you need it (for example with freezegun).
• adagents.json publisher attribution (#1697). New helpers attribute properties to the publisher domain a document was fetched for and verify cross-domain claims. Existing calls behave as before on 9.x.
• New helpers: a seller helper for wholesale feed versions (content-hash token and unchanged: true, #1676), and keygen accepts any well-formed adcp_use purpose, including response-signing (#1677).