v0.1.4 - Enterprise Security & Release Hardening

Aegisora v0.1.4

Aegisora v0.1.4 is a security and release-hardening milestone focused on measurable security evidence, CI enforcement, package integrity, and reproducible releases.

Security & Release Hardening

• Automated L3 measurable security evidence generation
• Security Readiness CI enforcement
• Package metadata validation
• npm tarball validation and package-scope checks
• Build, typecheck, and runtime test validation
• Example smoke-test validation
• Automated release validation before npm publication
• All 9 Aegisora packages published at version 0.1.4
• npm latest aligned with 0.1.4

Published Packages

• @aegisora/audit
• @aegisora/core
• @aegisora/observability
• @aegisora/plugins
• @aegisora/policy-engine
• @aegisora/runtime
• @aegisora/sdk
• @aegisora/security-engine
• @aegisora/storage

Security Evidence

R4 introduces automated and measurable L3 security evidence across the release pipeline, including:

• Evidence register automation
• Risk evidence measurement
• Package-level security metadata checks
• Tarball content validation
• CI-based Security Readiness verification
• Generated evidence kept out of Git history

Release Verification

The release pipeline successfully validated:

• Build
• Typecheck
• Runtime test suite
• Example smoke tests
• Package versions and metadata
• npm package contents
• Security Readiness controls

Release Information

Release: v0.1.4
Commit: 02e5479
npm: latest → 0.1.4

Links

• Aegisora Repository
• Security Documentation
• npm Packages

v0.1.2 - Stability & Infrastructure Refinement

Aegisora v0.1.2

Aegisora v0.1.2 is an incremental release following the initial open-source launch, focused on continued stabilization, runtime and package refinements, repository improvements, and a smoother developer experience.

Release Highlights

This release builds on the foundation established in v0.1.0 and continues the project's early open-source development with incremental improvements across the runtime, package ecosystem, documentation, and repository structure.

• Runtime and package-level refinements
• Continued stabilization following the initial open-source release
• Improvements across the Aegisora package ecosystem
• Repository structure and maintenance improvements
• Documentation refinements
• Developer experience improvements
• Ongoing groundwork for future security, governance, and runtime capabilities

Runtime & Package Improvements

v0.1.2 continues development across the Aegisora runtime and its supporting package ecosystem, improving the foundation used by developers integrating governed AI-agent execution into their applications.

The release includes incremental improvements to package organization, runtime behavior, and the overall consistency of the project as the codebase evolves toward a more mature open-source platform.

Developer Experience

The release also includes continued improvements to the developer-facing side of the project:

• Package and repository refinements
• Documentation updates
• Improved project organization
• Continued improvements to the onboarding and development experience

These changes help establish a more maintainable foundation for future contributors and users of the Aegisora ecosystem.

Project Evolution

v0.1.2 represents the next step after Aegisora's initial open-source launch.

The release continues the transition from the initial public foundation toward a more structured runtime, package ecosystem, and developer platform, while preserving the project's core focus on secure and governed AI-agent execution.

Release Information

Release: v0.1.2
Tag: v0.1.2
Commit: 01a74b7

Changelog

View the full changelog from v0.1.0 to v0.1.2

Repository

• Aegisora Repository
• Documentation

v0.1.0 - Initial Open-Source Release

Aegisora v0.1.0

Aegisora v0.1.0 is the first official open-source release of Aegisora — a zero-trust runtime security and governance layer designed to help developers build, operate, and govern autonomous AI agents safely.

This release establishes the initial open-source foundation of the Aegisora project, introducing its core runtime architecture, security controls, governance model, and developer-facing integration capabilities.

Initial Release

The v0.1.0 release marks the beginning of Aegisora's public open-source development and establishes the architectural foundation for protecting increasingly capable AI agents at execution time.

Aegisora is built around a simple principle:

Autonomous AI agents should not be trusted with unrestricted execution authority.

Instead, agent actions can be intercepted, analyzed, governed, and enforced before reaching the execution layer.

Core Capabilities

Zero-Trust Runtime Security

Aegisora introduces a runtime security layer designed to evaluate agent actions before they reach external tools, providers, or execution boundaries.

Core capabilities include:

• Real-time interception of agent tool calls
• Security and policy evaluation before execution
• Enforcement of execution decisions
• Explicit handling of allowed, blocked, and escalated actions
• Runtime boundaries designed to reduce unauthorized execution paths

AI Agent Governance

The initial release establishes the foundation for governing autonomous agent behavior through explicit policies and runtime decisions.

Aegisora provides the architectural basis for:

• Policy-driven agent execution
• Security-aware runtime decisions
• Controlled tool invocation
• Governance boundaries around autonomous actions
• Human escalation for high-risk or ambiguous operations

Human-in-the-Loop Escalation

Not every agent decision can or should be handled as a simple allow-or-block decision.

The initial Aegisora architecture introduces the foundation for escalating sensitive or ambiguous operations to human review, allowing autonomous systems to remain controlled without forcing every workflow into a binary execution model.

Runtime & Execution Controls

The release introduces the initial runtime components responsible for governing agent execution, including:

• Request interception
• Context analysis
• Security analysis
• Policy evaluation
• Decision resolution
• Enforcement boundaries
• Audit-oriented execution tracking

These components establish the foundation for Aegisora's governed execution pipeline.

Developer Integrations

Aegisora is designed to integrate with modern AI-agent workflows rather than requiring developers to rebuild their applications around a new execution model.

The initial release includes integration foundations for:

• LangChain
• LangGraph
• Standard TypeScript-based AI agent workflows

Observability & Audit Foundations

The initial release also introduces the foundations for observing and recording governed agent execution.

These capabilities provide a basis for:

• Runtime event tracking
• Security decision visibility
• Policy decision observability
• Execution audit trails
• Future compliance and evidence workflows

Open-Source Foundation

v0.1.0 establishes the initial public architecture that future Aegisora releases build upon.

The project is intentionally structured around extensible runtime security, governance, policy enforcement, and observability components so that developers can evolve their AI-agent systems without giving autonomous execution unrestricted authority.

Getting Started

Start with the Aegisora README for installation, configuration, architecture information, and examples.

Documentation

• Architecture
• Security Documentation
• Examples

Release Information

Release: v0.1.0
Tag: v0.1.0
Commit: a494e78

Repository

Aegisora on GitHub

---

Aegisora v0.1.0 marks the beginning of the project's open-source journey toward safer, more governable autonomous AI systems.