Repository navigation
v1.2.0-rc.1 - Trust Plane Proof
Pre-release
Pre-release
·
222 commits
to 3bec7a9966cbd00468d2a7463a6462089190c07b
since this release
Trust Plane Release Candidate
This prerelease packages the governed MCP trust-plane proof on main.
Verified from a clean origin/main worktree at 3bec7a9966cbd00468d2a7463a6462089190c07b.
Proof Loop
discover -> authenticate -> permit -> invoke -> meter -> receipt -> audit -> replay -> deny
Verification
scripts/trust_release_gate.shpassed.- Focused trust-plane suite: 55 passed.
- Trust-core coverage gate: 60 passed, 85.12% coverage over trust-plane control modules.
- Executable trust-plane demo proof passed.
- Discovery drift checks passed.
- OpenAPI parity passed.
- Simulation inventory parity passed.
Demo Proof Highlights
- Signed permit scoped to one MCP tool.
- Governed MCP invoke charged the wallet once.
- Signed receipt linked to ledger and audit artifacts.
- Replay returned the original receipt without a duplicate debit.
- Out-of-scope MCP call returned a denial receipt.
- Denial replay returned the same denial receipt.
- Cross-wallet read was denied with 403.
Caveat
This is a production-beta release candidate for the control-plane proof, not a claim of complete production settlement, full IAM replacement, or universal policy coverage.